blocking state [ 60.221588][ T4069] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.224185][ T4069] device bridge_slave_1 entered promiscuous mode [ 60.229192][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.231054][ T4088] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.233659][ T4088] device bridge_slave_0 entered promiscuous mode [ 60.242412][ T4080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.244078][ T4080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.250416][ T4080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.278077][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.279930][ T4088] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.282391][ T4088] device bridge_slave_1 entered promiscuous mode [ 60.284993][ T4080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.286617][ T4080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.293543][ T4080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.297183][ T4086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.299569][ T4086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.305626][ T4086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.327151][ T4079] chnl_net:caif_netlink_parms(): no params data found [ 60.341762][ T4086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.343503][ T4086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.350691][ T4086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.355601][ T4069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.377187][ T4088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.381329][ T4069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.385227][ T4088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.530085][ T4080] device hsr_slave_0 entered promiscuous mode [ 60.568100][ T4080] device hsr_slave_1 entered promiscuous mode [ 60.607806][ T4080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.609797][ T4080] Cannot create hsr debugfs directory [ 60.619422][ T4069] team0: Port device team_slave_0 added [ 60.679912][ T4086] device hsr_slave_0 entered promiscuous mode [ 60.718001][ T4086] device hsr_slave_1 entered promiscuous mode [ 60.768105][ T4086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.769905][ T4086] Cannot create hsr debugfs directory [ 60.773293][ T4088] team0: Port device team_slave_0 added [ 60.784638][ T4069] team0: Port device team_slave_1 added [ 60.811406][ T4088] team0: Port device team_slave_1 added [ 60.841479][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.843144][ T4079] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.845484][ T4079] device bridge_slave_0 entered promiscuous mode [ 60.871611][ T4069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.873330][ T4069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.885487][ T4069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.889258][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.890861][ T4079] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.893602][ T4079] device bridge_slave_1 entered promiscuous mode [ 60.909885][ T4088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.911510][ T4088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.917463][ T4088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.929891][ T4069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.931506][ T4069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.937391][ T4069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.959650][ T4088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.961250][ T4088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.967212][ T4088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.025706][ T4079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.031038][ T4079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.068099][ T1528] Bluetooth: hci1: command 0x0409 tx timeout [ 61.070200][ T1528] Bluetooth: hci0: command 0x0409 tx timeout [ 61.119872][ T4069] device hsr_slave_0 entered promiscuous mode [ 61.148047][ T1528] Bluetooth: hci2: command 0x0409 tx timeout [ 61.168211][ T4069] device hsr_slave_1 entered promiscuous mode [ 61.208022][ T4069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.209815][ T4069] Cannot create hsr debugfs directory [ 61.223266][ T4079] team0: Port device team_slave_0 added [ 61.227876][ T4091] Bluetooth: hci4: command 0x0409 tx timeout [ 61.228148][ T1528] Bluetooth: hci3: command 0x0409 tx timeout [ 61.265482][ T4079] team0: Port device team_slave_1 added [ 61.267072][ T4074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.317935][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 61.320218][ T4074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.409928][ T4088] device hsr_slave_0 entered promiscuous mode [ 61.457399][ T4088] device hsr_slave_1 entered promiscuous mode [ 61.517852][ T4088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.519635][ T4088] Cannot create hsr debugfs directory [ 61.544467][ T4074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.611086][ T4074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.689889][ T4079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.691511][ T4079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.697364][ T4079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.703216][ T4079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.704835][ T4079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.711108][ T4079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.735241][ T4080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.782110][ T4080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.831894][ T4080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.960060][ T4079] device hsr_slave_0 entered promiscuous mode [ 61.998339][ T4079] device hsr_slave_1 entered promiscuous mode [ 62.037874][ T4079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.039661][ T4079] Cannot create hsr debugfs directory [ 62.043980][ T4080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.181966][ T4086] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.211570][ T4086] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.251624][ T4086] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.292939][ T4086] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.442143][ T4074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.460310][ T4088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.521804][ T4088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.549965][ T4088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.591134][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.594038][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.604456][ T4074] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.615630][ T4088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.663147][ T4069] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.710233][ T4069] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.756416][ T4080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.768039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.770553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.773495][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.775233][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.779360][ T4069] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.809992][ T4069] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.874464][ T4080] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.879183][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.881645][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.883929][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.913187][ T4079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.939709][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.942497][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.944575][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.946306][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.949152][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.951620][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.953871][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.955547][ T4128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.957820][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.007353][ T4079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.029921][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.032544][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.035068][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.039021][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.041498][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.043904][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.046229][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.049164][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.051546][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.053978][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.056226][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.057917][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.060888][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.063902][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.066361][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.070059][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.072604][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.075009][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.078768][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.081503][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.094910][ T4074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.100686][ T4074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.123833][ T4079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.148213][ T4129] Bluetooth: hci0: command 0x041b tx timeout [ 63.152276][ T4079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.154299][ T4129] Bluetooth: hci1: command 0x041b tx timeout [ 63.188485][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.190932][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.193679][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.196238][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.200672][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.203285][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.213103][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.228185][ T4129] Bluetooth: hci2: command 0x041b tx timeout [ 63.281825][ T4086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.308191][ T4131] Bluetooth: hci3: command 0x041b tx timeout [ 63.319075][ T4131] Bluetooth: hci4: command 0x041b tx timeout [ 63.355220][ T4088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.363778][ T4086] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.372765][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.375058][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.388210][ T4131] Bluetooth: hci5: command 0x041b tx timeout [ 63.401698][ T4069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.416489][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.419361][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.421665][ T4127] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.423307][ T4127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.425438][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.439360][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.462002][ T4088] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.466308][ T4069] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.478655][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.481027][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.483627][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.485838][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.487491][ T4130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.490948][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.492915][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.494820][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.497061][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.500360][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.502288][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.504067][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.506575][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.510951][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.512618][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.515302][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.527955][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.530529][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.533518][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.535228][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.537360][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.541081][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.543331][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.545060][ T4130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.547224][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.551355][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.559031][ T4074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.578951][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.581841][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.592886][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.595263][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.596965][ T4131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.600444][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.602960][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.605512][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.614745][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.617187][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.619988][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.625150][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.638476][ T4080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.669578][ T4079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.692041][ T4079] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.693938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.696805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.702149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.704788][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.707382][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.710989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.713553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.716066][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.719278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.721983][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.724490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.726601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.731449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.733841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.745771][ T4086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.749147][ T4086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.756977][ T4088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.760964][ T4088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.778618][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.781144][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.783822][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.786310][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.801035][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.803695][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.805992][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.811251][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.813841][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.816273][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.819605][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.822173][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.824752][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.860720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.863209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.865656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.870881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.873215][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.874841][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.876984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.882537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.884809][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.886419][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.893750][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.896417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.909942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.918300][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.937320][ T4080] device veth0_vlan entered promiscuous mode [ 63.982002][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.984526][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.987200][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.999389][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.002431][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.004721][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.007276][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.010496][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.013138][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.015593][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.018094][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.020418][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.022766][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.025008][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.032661][ T4074] device veth0_vlan entered promiscuous mode [ 64.044826][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.062331][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.064860][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.067101][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.076003][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.089416][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.096464][ T4080] device veth1_vlan entered promiscuous mode [ 64.103709][ T4074] device veth1_vlan entered promiscuous mode [ 64.162928][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.165287][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.167519][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.171743][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.179750][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.182243][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.184724][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.187319][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.204450][ T4080] device veth0_macvtap entered promiscuous mode [ 64.210086][ T4074] device veth0_macvtap entered promiscuous mode [ 64.215163][ T4074] device veth1_macvtap entered promiscuous mode [ 64.238478][ T4080] device veth1_macvtap entered promiscuous mode [ 64.255357][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.263095][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.265804][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.274418][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.276652][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.279842][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.291492][ T4074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.295103][ T4080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.298569][ T4080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.307097][ T4080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.314229][ T4086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.323653][ T4088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.327583][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.330122][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.331858][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.334362][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.336783][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.341986][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.343943][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.358393][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.363826][ T4074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.372343][ T4074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.374405][ T4074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.376488][ T4074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.379590][ T4074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.385764][ T4069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.391918][ T4080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.394455][ T4080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.405757][ T4080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.428056][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.430843][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.433350][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.435877][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.448729][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.456640][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.500335][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.502299][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.510328][ T4080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.512580][ T4080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.514632][ T4080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.516737][ T4080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.535158][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.539290][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.542316][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.545635][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.550779][ T4088] device veth0_vlan entered promiscuous mode [ 64.560504][ T4088] device veth1_vlan entered promiscuous mode [ 64.595768][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.598837][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.601155][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.613950][ T4079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.629981][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.686450][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.690577][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.722544][ T4086] device veth0_vlan entered promiscuous mode [ 64.728887][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.731306][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.733641][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.736039][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.751026][ T496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.752937][ T496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.760616][ T4088] device veth0_macvtap entered promiscuous mode [ 64.765901][ T4088] device veth1_macvtap entered promiscuous mode [ 64.791793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.794279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.797166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.803181][ T4086] device veth1_vlan entered promiscuous mode [ 64.866304][ T4088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.869642][ T4088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.871992][ T4088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.874510][ T4088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.879309][ T4088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.919699][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.922121][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.924447][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.926868][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.930215][ T496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.932048][ T496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.933136][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.939526][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.941952][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.944264][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.946660][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.953918][ T4088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.956346][ T4088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.958142][ T496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.960617][ T496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.963916][ T4088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.966318][ T4088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.970488][ T4088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.982614][ T4086] device veth0_macvtap entered promiscuous mode [ 64.987265][ T4086] device veth1_macvtap entered promiscuous mode [ 64.994408][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.997156][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.999847][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.002103][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.005229][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.024646][ T4069] device veth0_vlan entered promiscuous mode [ 65.026456][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.031193][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.037500][ T4088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.043832][ T4088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.045874][ T4088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.048881][ T4088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.088755][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.091144][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.093728][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.099030][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.103190][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.108157][ T4069] device veth1_vlan entered promiscuous mode [ 65.115890][ T4086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.123432][ T4086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.125842][ T4086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.129257][ T4086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.131551][ T4086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.133988][ T4086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.139184][ T4086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.229448][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.231969][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.234574][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.237176][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.238154][ T4147] Bluetooth: hci1: command 0x040f tx timeout [ 65.241120][ T4147] Bluetooth: hci0: command 0x040f tx timeout 00:01:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x978) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000400)=""/239, 0xef}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/86, 0x56}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}}], 0x3, 0x200, 0x0) [ 65.269170][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.279921][ T4086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.282338][ T4086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.284444][ T4086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.286810][ T4086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.299929][ T4086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.302281][ T4086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.308436][ T4147] Bluetooth: hci2: command 0x040f tx timeout [ 65.313866][ T4086] batman_adv: batadv0: Interface activated: batadv_slave_1 00:01:05 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) [ 65.365886][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.368984][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.375256][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.390733][ T4086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.393005][ T4086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.394918][ T4086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.396895][ T4086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.403851][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 65.417664][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 65.446957][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.449672][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 00:01:05 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) [ 65.458703][ T4079] device veth0_vlan entered promiscuous mode [ 65.462911][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.465450][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.473572][ T4132] Bluetooth: hci5: command 0x040f tx timeout [ 65.509622][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.512034][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.515539][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.520690][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.525363][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.535019][ T4069] device veth0_macvtap entered promiscuous mode [ 65.540529][ T4079] device veth1_vlan entered promiscuous mode 00:01:05 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:05 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) [ 65.609711][ T4069] device veth1_macvtap entered promiscuous mode [ 65.633570][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.636146][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.640636][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.645879][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.658503][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.664721][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.704259][ T4079] device veth0_macvtap entered promiscuous mode 00:01:05 executing program 1: socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) [ 65.742544][ T4079] device veth1_macvtap entered promiscuous mode [ 65.751588][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.753578][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:01:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x978) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000400)=""/239, 0xef}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/86, 0x56}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}}], 0x3, 0x200, 0x0) [ 65.781947][ T496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.783849][ T496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.790305][ T4069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.792876][ T4069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.795237][ T4069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.801572][ T4069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.803835][ T4069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.806265][ T4069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.830527][ T4069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.833092][ T4069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.837157][ T4069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.840726][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.843295][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.846771][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.850343][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.860209][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.883034][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.885557][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.890828][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.893506][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.896006][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.901198][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.903700][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.906220][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.908945][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.911584][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.915895][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.924541][ T4069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.927191][ T4069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.931107][ T4069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.933641][ T4069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.935877][ T4069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.939083][ T4069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.941630][ T4069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.944118][ T4069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.952504][ T4069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.956638][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.959683][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.962249][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.964786][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.969493][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.971998][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.974473][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.976885][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.979463][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.981863][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.984579][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.987118][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.990346][ T4079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.992882][ T4079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.996647][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.024035][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.026706][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.028296][ T4155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.030750][ T4155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.032966][ T4079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.035047][ T4079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.037099][ T4079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.058155][ T4079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.070104][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.073700][ T4069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.075822][ T4069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.089411][ T4069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.095263][ T4069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.318583][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.320484][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.344504][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.369993][ T4155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.371880][ T4155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.376912][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.420853][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.423040][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.424572][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.426495][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.426729][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.438624][ T4147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:01:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:06 executing program 1: socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:06 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:06 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:06 executing program 1: socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:06 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:06 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:06 executing program 1: mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:06 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:06 executing program 1: mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:06 executing program 4: socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:06 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:07 executing program 1: mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 4: socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:07 executing program 2: memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:01:07 executing program 4: socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 2: memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:01:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) [ 67.308804][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 67.310281][ T13] Bluetooth: hci1: command 0x0419 tx timeout 00:01:07 executing program 4: mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 5: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) [ 67.388832][ T13] Bluetooth: hci2: command 0x0419 tx timeout 00:01:07 executing program 2: memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:01:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:07 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:07 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xa8001, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:07 executing program 4: mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) [ 67.469363][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 67.471025][ T13] Bluetooth: hci4: command 0x0419 tx timeout 00:01:07 executing program 1: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 2: r0 = dup(0xffffffffffffffff) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:01:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:07 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) [ 67.548234][ T13] Bluetooth: hci5: command 0x0419 tx timeout 00:01:07 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xa8001, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:07 executing program 4: mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 1: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 2: r0 = dup(0xffffffffffffffff) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:01:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:07 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:07 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xa8001, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:07 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 1: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:07 executing program 2: r0 = dup(0xffffffffffffffff) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:01:07 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:07 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:01:07 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:07 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:07 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:07 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:07 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:01:07 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:01:07 executing program 4: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:07 executing program 3: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:07 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:01:08 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:08 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:08 executing program 4: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:08 executing program 2: memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r0 = dup(0xffffffffffffffff) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:01:08 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/237, 0x0, 0xed, 0x1}, 0x20) 00:01:08 executing program 4: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:08 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:08 executing program 0: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:08 executing program 2: memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r0 = dup(0xffffffffffffffff) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/237, 0x0, 0xed, 0x1}, 0x20) 00:01:08 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:01:08 executing program 2: memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r0 = dup(0xffffffffffffffff) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:01:08 executing program 0: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/237, 0x0, 0xed, 0x1}, 0x20) 00:01:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:01:08 executing program 0: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) dup(r0) syz_clone3(0x0, 0x0) 00:01:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x1}, 0x20) 00:01:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:01:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) dup(r0) syz_clone3(0x0, 0x0) 00:01:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/237, 0x0, 0xed, 0x1}, 0x20) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x1}, 0x20) 00:01:08 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) dup(r0) syz_clone3(0x0, 0x0) 00:01:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/237, 0x0, 0xed, 0x1}, 0x20) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x1}, 0x20) 00:01:08 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1}, 0x20) 00:01:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/237, 0x0, 0xed, 0x1}, 0x20) 00:01:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:08 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x1}, 0x20) 00:01:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1}, 0x20) 00:01:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x1}, 0x20) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1}, 0x20) 00:01:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/239, 0xef, 0xffffffff) 00:01:09 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 00:01:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x1}, 0x20) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0xffffffff) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:09 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1}, 0x20) 00:01:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0xffffffff) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:09 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1}, 0x20) 00:01:09 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:01:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0xffffffff) 00:01:09 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1}, 0x20) 00:01:09 executing program 2: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) dup(r0) syz_clone3(&(0x7f0000000300)={0x212200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:01:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0x0) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:01:09 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:01:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0x0) [ 69.635098][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.636833][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 00:01:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:01:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/239, 0xef, 0x0) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:01:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed}, 0x20) 00:01:09 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60"], 0x0) 00:01:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed}, 0x20) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:09 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60"], 0x0) 00:01:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed}, 0x20) 00:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:10 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed}, 0x20) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60"], 0x0) 00:01:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:10 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed}, 0x20) 00:01:10 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f80)=""/237, 0x2e, 0xed}, 0x20) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60"], 0x0) 00:01:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:10 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:10 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x84840, 0x7f29b8c9b566d270) 00:01:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, 0x0, 0x0) 00:01:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:10 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, 0x0, 0x0) 00:01:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 00:01:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:10 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, 0x0, 0x0) 00:01:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) 00:01:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:10 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[], 0x0) 00:01:10 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:10 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, 0x0, 0x0) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[], 0x0) 00:01:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffcfa, 0x0, 0x45}, 0x0) 00:01:10 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) 00:01:10 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, 0x0, 0x0) 00:01:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[], 0x0) 00:01:10 executing program 2: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0x8001) 00:01:10 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006600)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:01:10 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x8001) read$FUSE(r0, 0x0, 0x0) 00:01:10 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB], 0x0) 00:01:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0x8001) 00:01:10 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:11 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) 00:01:11 executing program 0: r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x9f\xbb\xad\bh\x86v#4\x00\x16%\x16\x06l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\xf5\xff\xff\xff\xff\xff\xd5.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJ\xfa+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad1jH\x97\xde\x16\"\xa3\xf0\x8c\xec\xb1\x1al\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2yf\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0J\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB], 0x0) 00:01:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0x8001) 00:01:11 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) 00:01:11 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB], 0x0) 00:01:11 executing program 0: r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x9f\xbb\xad\bh\x86v#4\x00\x16%\x16\x06l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\xf5\xff\xff\xff\xff\xff\xd5.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJ\xfa+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad1jH\x97\xde\x16\"\xa3\xf0\x8c\xec\xb1\x1al\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2yf\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0J\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 00:01:11 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) 00:01:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) 00:01:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaa"], 0x0) 00:01:11 executing program 0: r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x9f\xbb\xad\bh\x86v#4\x00\x16%\x16\x06l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\xf5\xff\xff\xff\xff\xff\xd5.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJ\xfa+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad1jH\x97\xde\x16\"\xa3\xf0\x8c\xec\xb1\x1al\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2yf\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0J\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 00:01:11 executing program 1: syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) 00:01:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) 00:01:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaa"], 0x0) 00:01:11 executing program 0: r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x9f\xbb\xad\bh\x86v#4\x00\x16%\x16\x06l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\xf5\xff\xff\xff\xff\xff\xd5.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJ\xfa+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad1jH\x97\xde\x16\"\xa3\xf0\x8c\xec\xb1\x1al\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2yf\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0J\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 00:01:11 executing program 1: syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) 00:01:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) 00:01:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaa"], 0x0) 00:01:11 executing program 1: syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) 00:01:11 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 00:01:11 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2040) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa"], 0x0) 00:01:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:01:11 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10f0c1, 0x2) 00:01:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) 00:01:11 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 00:01:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:01:11 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa"], 0x0) 00:01:11 executing program 2: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:01:11 executing program 4: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 5: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 2: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa"], 0x0) 00:01:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) 00:01:11 executing program 4: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) 00:01:11 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd"], 0x0) 00:01:11 executing program 5: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:11 executing program 2: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) 00:01:12 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd"], 0x0) 00:01:12 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 5: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 4: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 00:01:12 executing program 3: syz_emit_ethernet(0x7ff, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd"], 0x0) 00:01:12 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 00:01:12 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x100) syz_io_uring_complete(0x0) 00:01:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='schedstat\x00') preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 00:01:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x60) 00:01:12 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000), 0x1e) 00:01:12 executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) [ 72.507327][ T4071] Bluetooth: hci5: SCO packet for unknown connection handle 0 00:01:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x1ec) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='9', 0x1}], 0x1}}], 0x1, 0x20040041) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 00:01:12 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x60) [ 72.593708][ T4071] Bluetooth: hci5: SCO packet for unknown connection handle 0 00:01:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x80) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48044}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000d40)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:01:12 executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x60) 00:01:12 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 00:01:12 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x60) 00:01:12 executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() [ 72.714587][ T4071] Bluetooth: hci5: SCO packet for unknown connection handle 0 00:01:12 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x60) 00:01:12 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 00:01:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x40) [ 72.784756][ T4071] Bluetooth: hci5: SCO packet for unknown connection handle 0 00:01:12 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)={0x0, 0x0, 0x18}, 0x10) 00:01:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 00:01:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x40) 00:01:12 executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) 00:01:12 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:12 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:12 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:12 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @private}}, 0x1e) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 00:01:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x40) 00:01:12 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:12 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:13 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x40) 00:01:13 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:13 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:13 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @private}}, 0x1e) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 00:01:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:13 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:13 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x20004c1) 00:01:13 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:13 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) mprotect(&(0x7f00005bb000/0x4000)=nil, 0x4000, 0x1) munlockall() 00:01:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:13 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x101040) 00:01:13 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @private}}, 0x1e) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 00:01:13 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) munlockall() 00:01:13 executing program 1: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000f80)="f5b9fa4818ac66592bc02571280aa40c63562e47933c64107f7b8f881f4dc279e5f92d358d9bce7e7ec56fb1a0df4db113916afc245b3bf58663f4b03f23944c33de3a2373c71f2faebba70f3ce7b1d5360be177280b2dc922e1f6512e60b1f336e723bb5e0de07c6cde8bccd158360b163488bef1b5382194d5ce03147577fc5acc6dafb96dc2074f77687f6e348c584d6b44a5b01213e3b4d77f435a472233f302e88b458b80ac94583faeee572fc06e799bca47dfcbbfc9") getresuid(&(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100)) 00:01:13 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/cgroup', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r0}, 0x10) 00:01:13 executing program 2: syz_emit_vhci(0x0, 0x60) 00:01:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:13 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) 00:01:13 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) munlockall() 00:01:13 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/cgroup', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r0}, 0x10) 00:01:13 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @private}}, 0x1e) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 00:01:13 executing program 2: syz_emit_vhci(0x0, 0x60) 00:01:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:13 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) munlockall() 00:01:13 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/cgroup', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r0}, 0x10) 00:01:13 executing program 2: syz_emit_vhci(0x0, 0x60) 00:01:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:13 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) 00:01:13 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000f0f000/0x3000)=nil, 0x3000) munlockall() 00:01:14 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) 00:01:14 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/cgroup', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r0}, 0x10) 00:01:14 executing program 2: syz_emit_vhci(0x0, 0x60) 00:01:14 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) 00:01:14 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:14 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 00:01:14 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) 00:01:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:14 executing program 4: request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='][]+{\x00', 0xffffffffffffffff) 00:01:14 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) 00:01:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 74.449831][ T4952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) [ 74.768872][ T25] cfg80211: failed to load regulatory.db 00:01:15 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) 00:01:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 00:01:15 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) 00:01:15 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 75.276989][ T4969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:15 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) 00:01:15 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = dup(r0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x20) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 00:01:15 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000000240)) 00:01:15 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000240), 0x88) 00:01:15 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:15 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffff8, 0x0) request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0xffffffffffffffff) getegid() keyctl$invalidate(0x15, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) 00:01:16 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) 00:01:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x75, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 00:01:16 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x8, 0x0) 00:01:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x6f, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x6400473d, &(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="12268a927f", 0xad11, 0x5, 0x0, 0x80fa) 00:01:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 76.172268][ T4992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:16 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) 00:01:16 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x8, 0x0) 00:01:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x75, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 00:01:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x75, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 00:01:16 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x8, 0x0) 00:01:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x75, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 00:01:16 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x8, 0x0) 00:01:17 executing program 4: accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000600), 0x4) socket(0x0, 0x0, 0x0) socket(0x27, 0xa, 0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000600), 0x4) syz_clone(0x40040000, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, &(0x7f0000001900)=""/77, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x8}, 0x8, 0x10, &(0x7f00000019c0)={0x5, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x80) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) timerfd_create(0x3, 0x0) pipe2(0x0, 0x80) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 00:01:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:17 executing program 0: syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x58) 00:01:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0), 0x0, 0x8, 0x0) 00:01:17 executing program 1: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000026c0)) [ 77.077279][ T5017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:17 executing program 1: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000026c0)) 00:01:17 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x3, 0x0, &(0x7f0000000080), 0x2a) 00:01:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0), 0x0, 0x8, 0x0) 00:01:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team0\x00', 0x2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 00:01:17 executing program 1: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000026c0)) 00:01:17 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x3, 0x0, &(0x7f0000000080), 0x2a) 00:01:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0), 0x0, 0x8, 0x0) 00:01:17 executing program 4: accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000600), 0x4) socket(0x0, 0x0, 0x0) socket(0x27, 0xa, 0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000600), 0x4) syz_clone(0x40040000, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, &(0x7f0000001900)=""/77, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x8}, 0x8, 0x10, &(0x7f00000019c0)={0x5, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x80) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) timerfd_create(0x3, 0x0) pipe2(0x0, 0x80) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 00:01:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 00:01:17 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x3, 0x0, &(0x7f0000000080), 0x2a) 00:01:17 executing program 1: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000026c0)) 00:01:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x8, 0x0) 00:01:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 77.470470][ T5049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x8, 0x0) 00:01:17 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x3, 0x0, &(0x7f0000000080), 0x2a) 00:01:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) 00:01:17 executing program 1: add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='l', 0x1, 0xfffffffffffffffd) 00:01:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) 00:01:17 executing program 0: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 00:01:17 executing program 4: accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000600), 0x4) socket(0x0, 0x0, 0x0) socket(0x27, 0xa, 0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000600), 0x4) syz_clone(0x40040000, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, &(0x7f0000001900)=""/77, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x8}, 0x8, 0x10, &(0x7f00000019c0)={0x5, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x80) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) timerfd_create(0x3, 0x0) pipe2(0x0, 0x80) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 00:01:17 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 00:01:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x8, 0x0) 00:01:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:17 executing program 0: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 00:01:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) 00:01:17 executing program 0: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 00:01:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) 00:01:17 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RSTATu(r0, 0x0, 0x0) 00:01:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x0, 0x0) [ 77.881016][ T5081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:17 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RSTATu(r0, 0x0, 0x0) 00:01:17 executing program 0: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 00:01:18 executing program 4: accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000600), 0x4) socket(0x0, 0x0, 0x0) socket(0x27, 0xa, 0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000600), 0x4) syz_clone(0x40040000, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, &(0x7f0000001900)=""/77, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x8}, 0x8, 0x10, &(0x7f00000019c0)={0x5, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x80) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) timerfd_create(0x3, 0x0) pipe2(0x0, 0x80) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 00:01:18 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x0, 0x0) 00:01:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team0\x00', 0x2}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) 00:01:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) 00:01:18 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RSTATu(r0, 0x0, 0x0) 00:01:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 78.244273][ T5109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:18 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RSTATu(r0, 0x0, 0x0) 00:01:18 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000026c0)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:01:18 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0x0, 0x0) 00:01:18 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r0, 0x0, 0xffffffffffffff13) 00:01:18 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RLCREATE(r0, 0x0, 0x0) 00:01:18 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000026c0)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:01:18 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000026c0)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:01:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:18 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RLOPEN(r0, 0x0, 0x0) 00:01:18 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/fs/cgroup', 0x206201, 0xc9) 00:01:18 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 00:01:18 executing program 4: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:01:18 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/class/dmi', 0x214b80, 0x60) 00:01:18 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000026c0)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:01:18 executing program 2: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 00:01:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:18 executing program 1: signalfd4(0xffffffffffffffff, &(0x7f0000001200), 0x8, 0x80800) 00:01:18 executing program 4: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000001180), 0x0, 0x0, 0x0) 00:01:18 executing program 2: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 00:01:18 executing program 1: r0 = inotify_init1(0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:01:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:18 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000001340)='./binderfs/binder1\x00', 0x0, 0x0) 00:01:18 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RCLUNK(r0, 0x0, 0x0) 00:01:18 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/class/dmi', 0x0, 0x60) 00:01:18 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r0, 0x0, 0x3) 00:01:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:18 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RMKDIR(r0, 0x0, 0x0) 00:01:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 78.970709][ T5176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780), 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x15, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:18 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000b2000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 00:01:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'vcan0\x00', 0x400}) 00:01:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:19 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18}, 0xffffff06) write$P9_RWSTAT(r0, 0x0, 0x0) 00:01:19 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0xfffffffffffffecc) [ 79.140080][ T5191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:19 executing program 0: mq_open(&(0x7f0000000000)='^+/*\x00', 0x2, 0x0, &(0x7f0000000040)) 00:01:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 1: get_mempolicy(0x0, &(0x7f0000004440), 0x1f, &(0x7f0000ffc000/0x1000)=nil, 0x3) 00:01:19 executing program 0: mq_open(&(0x7f0000000000)='^+/*\x00', 0x2, 0x0, &(0x7f0000000040)) 00:01:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 00:01:19 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) 00:01:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 1: get_mempolicy(0x0, &(0x7f0000004440), 0x1f, &(0x7f0000ffc000/0x1000)=nil, 0x3) 00:01:19 executing program 0: mq_open(&(0x7f0000000000)='^+/*\x00', 0x2, 0x0, &(0x7f0000000040)) [ 79.414238][ T5211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:19 executing program 1: get_mempolicy(0x0, &(0x7f0000004440), 0x1f, &(0x7f0000ffc000/0x1000)=nil, 0x3) 00:01:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000b2000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x1a) 00:01:19 executing program 0: mq_open(&(0x7f0000000000)='^+/*\x00', 0x2, 0x0, &(0x7f0000000040)) 00:01:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 1: get_mempolicy(0x0, &(0x7f0000004440), 0x1f, &(0x7f0000ffc000/0x1000)=nil, 0x3) 00:01:19 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r0, 0x0, 0xfffffffffffffdc2) 00:01:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) [ 79.653805][ T5235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:19 executing program 3: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 0: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 00:01:19 executing program 1: mbind(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x96, 0x0) 00:01:19 executing program 4: lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 00:01:19 executing program 0: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 00:01:19 executing program 3: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:19 executing program 2: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x6) 00:01:19 executing program 4: mremap(&(0x7f0000c54000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) [ 79.841820][ T5249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:19 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 00:01:19 executing program 3: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 0: mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) 00:01:19 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001080), 0x80242, 0x0) 00:01:19 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:19 executing program 4: mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/4096) 00:01:19 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) 00:01:20 executing program 0: syz_clone(0x11000000, 0x0, 0x0, 0x0, &(0x7f0000006800), &(0x7f0000006840)="eb") [ 80.049514][ T5269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 00:01:20 executing program 4: mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/4096) 00:01:20 executing program 2: munmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) 00:01:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:20 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0x7) 00:01:20 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) 00:01:20 executing program 4: mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/4096) 00:01:20 executing program 2: mbind(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xdf46578ba2f7e666, 0x0, 0x0, 0x0) 00:01:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 80.240704][ T5288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:20 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0x7) 00:01:20 executing program 4: mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/4096) 00:01:20 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/236) 00:01:20 executing program 2: mbind(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xdf46578ba2f7e666, 0x0, 0x0, 0x0) 00:01:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:01:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:01:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:20 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0x7) 00:01:20 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/236) 00:01:20 executing program 2: mbind(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xdf46578ba2f7e666, 0x0, 0x0, 0x0) 00:01:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:01:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 00:01:20 executing program 2: mbind(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xdf46578ba2f7e666, 0x0, 0x0, 0x0) 00:01:20 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0x7) 00:01:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:01:20 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/236) [ 80.570591][ T5319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001980)) 00:01:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 00:01:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) 00:01:20 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/236) 00:01:20 executing program 0: r0 = socket(0x11, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 00:01:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 00:01:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001980)) 00:01:20 executing program 1: r0 = socket(0x11, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 00:01:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) getpeername$inet6(r0, 0x0, &(0x7f0000000040)) 00:01:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) [ 80.831120][ T5343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 00:01:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) 00:01:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001980)) 00:01:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:20 executing program 0: r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 00:01:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000089c0), 0x0, 0x0) 00:01:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getpeername$inet6(r0, 0x0, &(0x7f00000001c0)) 00:01:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 00:01:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000089c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:01:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001980)) 00:01:21 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:01:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:21 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) 00:01:21 executing program 1: socket$packet(0x11, 0xa2000c4fcc741294, 0x300) 00:01:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 00:01:21 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003600)={&(0x7f0000001400)={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0xc0) 00:01:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:21 executing program 4: execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x10000000000009, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x100000000, 0xffffffffffffffff}) flock(r0, 0x1) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002fffffffb}) 00:01:21 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 00:01:21 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) [ 81.302808][ T5391] process 'syz-executor.4' launched './file0' with NULL argv: empty string added 00:01:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 00:01:21 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x8000) [ 81.360930][ T5395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:21 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 00:01:21 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x4d) 00:01:21 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 00:01:22 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000400)={0x0, 0x0, 0x7, 0x100000000, 0xffffffffffffffff}) flock(r0, 0x1) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002fffffffb}) 00:01:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={&(0x7f00000004c0), 0x200004cc, &(0x7f0000000840)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:01:22 executing program 1: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) 00:01:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 82.118217][ T5414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:22 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @random="c79b910a4d5d", @val, {@ipv4}}, 0x0) 00:01:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) 00:01:22 executing program 4: socket(0x2c, 0x3, 0x6) 00:01:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8936, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @empty}}) 00:01:22 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x1, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:22 executing program 1: r0 = socket(0x200000100000011, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 00:01:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x5e, 0x4) 00:01:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x11, r1, 0x0, 0x0, 0x0) 00:01:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:22 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x1, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8936, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @empty}}) [ 82.385641][ T5435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x6, r1, 0x0, 0x0, 0x0) 00:01:22 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x1, 0x0, &(0x7f0000000080)="fd"}) 00:01:22 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x1, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:22 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_rssi={{0x1405, 0x2}}}, 0x6) [ 82.480907][ T5445] binder: 5444:5445 Acquire 1 refcount change on invalid ref 0 ret -22 00:01:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8936, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @empty}}) 00:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x14, r1, 0x713, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:01:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x3e80, 0x0, 0x0, 0x0) 00:01:22 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x1, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8936, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @empty}}) 00:01:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x1c}}, 0x0) 00:01:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)=@abs, 0x6e, 0x0}}], 0x1, 0x0) 00:01:22 executing program 0: syz_clone(0x40021180, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 00:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x14, r1, 0x713, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 82.736103][ T5464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:01:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x20000067, 0x4) 00:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x14, r1, 0x713, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:01:22 executing program 2: request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0) 00:01:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:22 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3c, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x20000067, 0x4) 00:01:22 executing program 2: socket(0x1, 0x0, 0x100) 00:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x14, r1, 0x713, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:01:22 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3c, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:23 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) 00:01:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x20000067, 0x4) 00:01:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000c40)=@framed={{}, [@ldst={0x0, 0x0, 0x1}, @initr0, @map_idx, @jmp, @btf_id, @jmp]}, &(0x7f0000000440)='GPL\x00', 0x7, 0x85, &(0x7f0000000cc0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:23 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3c, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:23 executing program 1: syz_clone(0x81021000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=':') 00:01:23 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 00:01:23 executing program 2: semctl$SEM_INFO(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=""/69) 00:01:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x20000067, 0x4) 00:01:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:23 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3c, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:23 executing program 1: request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) 00:01:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xfffffe5b, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x20}}, 0x0) 00:01:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:01:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_fd], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000140)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:23 executing program 1: request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) 00:01:23 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:01:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000140)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="04", 0x1, r1) keyctl$update(0x2, r2, &(0x7f0000000480)='(', 0x1) 00:01:23 executing program 1: request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) 00:01:23 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0xc0, 0x0) 00:01:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffe}}, 0x0) 00:01:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="04", 0x1, r1) keyctl$update(0x2, r2, &(0x7f0000000480)='(', 0x1) 00:01:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:23 executing program 1: request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) 00:01:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x48) 00:01:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="04", 0x1, r1) keyctl$update(0x2, r2, &(0x7f0000000480)='(', 0x1) 00:01:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:23 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:01:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="04", 0x1, r1) keyctl$update(0x2, r2, &(0x7f0000000480)='(', 0x1) 00:01:23 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/166, 0x1a, 0xa6, 0x1}, 0x20) 00:01:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:23 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:01:23 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='B', 0x1, 0xfffffffffffffffb) 00:01:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:23 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=[{&(0x7f00000011c0)=""/238, 0xee}], 0x1, 0x0) 00:01:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) 00:01:24 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:01:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:24 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=[{&(0x7f00000011c0)=""/238, 0xee}], 0x1, 0x0) 00:01:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) 00:01:24 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:01:24 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=[{&(0x7f00000011c0)=""/238, 0xee}], 0x1, 0x0) 00:01:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:24 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=[{&(0x7f00000011c0)=""/238, 0xee}], 0x1, 0x0) 00:01:24 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="04", 0x1, r1) 00:01:24 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:24 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 00:01:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) 00:01:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:24 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:24 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) [ 84.946927][ T5641] __nla_validate_parse: 7 callbacks suppressed [ 84.946943][ T5641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="04", 0x1, r1) 00:01:25 executing program 0: r0 = memfd_create(&(0x7f0000000100)='!\x00', 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:01:25 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:01:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="04", 0x1, r1) 00:01:25 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:25 executing program 0: r0 = memfd_create(&(0x7f0000000100)='!\x00', 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 85.256289][ T5654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) 00:01:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="04", 0x1, r1) 00:01:25 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$invalidate(0x15, 0x0) 00:01:25 executing program 0: r0 = memfd_create(&(0x7f0000000100)='!\x00', 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:01:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 85.825273][ T5671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:25 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$invalidate(0x15, 0x0) 00:01:25 executing program 0: r0 = memfd_create(&(0x7f0000000100)='!\x00', 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:01:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000065"], 0x1c}}, 0x0) [ 85.959636][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:01:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:25 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$invalidate(0x15, 0x0) 00:01:25 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) [ 86.029752][ T5687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:26 executing program 2: keyctl$KEYCTL_MOVE(0x1b, 0x0, 0x0, 0x0, 0x0) 00:01:26 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 00:01:26 executing program 0: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='*^@&&+\x00', 0xfffffffffffffffb) 00:01:26 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 86.799897][ T5702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:26 executing program 2: keyctl$KEYCTL_MOVE(0x1b, 0x0, 0x0, 0x0, 0x0) 00:01:26 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb605, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) 00:01:26 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:26 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 00:01:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:26 executing program 2: keyctl$KEYCTL_MOVE(0x1b, 0x0, 0x0, 0x0, 0x0) 00:01:26 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:26 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) [ 87.036083][ T5720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:27 executing program 2: keyctl$KEYCTL_MOVE(0x1b, 0x0, 0x0, 0x0, 0x0) 00:01:27 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:27 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) [ 87.247839][ T4126] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 87.607955][ T4126] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.615612][ T4126] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.787819][ T4126] usb 1-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.40 [ 87.790118][ T4126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.792237][ T4126] usb 1-1: Product: syz [ 87.793205][ T4126] usb 1-1: Manufacturer: syz [ 87.794430][ T4126] usb 1-1: SerialNumber: syz [ 88.078483][ T4126] usbhid 1-1:1.0: can't add hid device: -22 [ 88.080062][ T4126] usbhid: probe of 1-1:1.0 failed with error -22 [ 88.084974][ T4126] usb 1-1: USB disconnect, device number 2 00:01:28 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb605, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) 00:01:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:28 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "9c1a00049b4d0d6f3f0ad50e522f872c"}]}}) 00:01:28 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 00:01:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:28 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) [ 88.594715][ T5749] udc-core: couldn't find an available UDC or it's busy [ 88.596662][ T5749] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.612950][ T5750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:28 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 00:01:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:28 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) [ 88.800166][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) [ 88.897960][ T7] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 89.267859][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.270619][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.469076][ T7] usb 1-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.40 [ 89.471320][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.473203][ T7] usb 1-1: Product: syz [ 89.474148][ T7] usb 1-1: Manufacturer: syz [ 89.475232][ T7] usb 1-1: SerialNumber: syz [ 89.779966][ T7] usbhid 1-1:1.0: can't add hid device: -22 [ 89.781503][ T7] usbhid: probe of 1-1:1.0 failed with error -22 [ 89.784645][ T7] usb 1-1: USB disconnect, device number 3 00:01:30 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb605, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) 00:01:30 executing program 3: socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:30 executing program 1: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="972900ae9906", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 00:01:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 90.299653][ T5782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:30 executing program 1: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:30 executing program 3: socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="972900ae9906", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 00:01:30 executing program 1: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:30 executing program 1: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 90.480651][ T5798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 90.608050][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 90.998083][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.000583][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.209364][ T7] usb 1-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.40 [ 91.211420][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.213259][ T7] usb 1-1: Product: syz [ 91.214332][ T7] usb 1-1: Manufacturer: syz [ 91.215394][ T7] usb 1-1: SerialNumber: syz [ 91.509453][ T7] usbhid 1-1:1.0: can't add hid device: -22 [ 91.510863][ T7] usbhid: probe of 1-1:1.0 failed with error -22 [ 91.517525][ T7] usb 1-1: USB disconnect, device number 4 00:01:31 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb605, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) 00:01:31 executing program 3: socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 00:01:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="972900ae9906", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 00:01:31 executing program 1: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 92.040817][ T5808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) 00:01:32 executing program 1: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="972900ae9906", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 00:01:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) 00:01:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:32 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) [ 92.239169][ T5823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 92.317983][ T3548] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 92.677892][ T3548] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.680970][ T3548] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.837908][ T3548] usb 1-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.40 [ 92.840086][ T3548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.842054][ T3548] usb 1-1: Product: syz [ 92.843056][ T3548] usb 1-1: Manufacturer: syz [ 92.844149][ T3548] usb 1-1: SerialNumber: syz [ 93.127929][ T3548] usbhid 1-1:1.0: can't add hid device: -22 [ 93.129554][ T3548] usbhid: probe of 1-1:1.0 failed with error -22 [ 93.133145][ T3548] usb 1-1: USB disconnect, device number 5 00:01:33 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:33 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="972900ae9906", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 00:01:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) 00:01:33 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:33 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:33 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 93.683153][ T5836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 00:01:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x1c, 0x4) 00:01:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="972900ae9906", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 00:01:33 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:33 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:33 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0xfbffffff) 00:01:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 00:01:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:33 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:33 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 00:01:33 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:33 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0xfbffffff) 00:01:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 00:01:33 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 00:01:33 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0xfbffffff) 00:01:33 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:34 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0xfbffffff) 00:01:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:34 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:34 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 00:01:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:34 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 00:01:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0xeffdffff00000000, 0x0, 0x0, 0x0) 00:01:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:34 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 00:01:34 executing program 0: pipe2(&(0x7f0000000bc0)={0xffffffffffffffff}, 0x0) timerfd_gettime(r0, 0x0) 00:01:34 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:34 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 00:01:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) 00:01:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="84", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) 00:01:34 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 00:01:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:01:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="84", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) 00:01:34 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) 00:01:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="84", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) 00:01:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) 00:01:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)="1f", 0x1) 00:01:35 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="84", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) 00:01:35 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) 00:01:35 executing program 0: process_vm_writev(0x0, &(0x7f0000001ac0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 00:01:35 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) 00:01:35 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='$:\x00', 0x0) 00:01:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x2c, 0x1, 0x9}, 0x48) 00:01:35 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:35 executing program 0: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:35 executing program 3: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003600)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)='%') 00:01:35 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:35 executing program 2: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:35 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xf22}, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 00:01:35 executing program 3: keyctl$update(0x2, 0x0, &(0x7f0000003000)="67603cecfc1da8504e9989cbbf19c3f8a148ef779777838de9a673bdf950adeacbfc1f17b93fa4e1a8cfd408fa83fb60607161d87ecafe5622e87e371aca354c405ef3112c2a41531e2a8c835252be561fb63c548766f7dde3ecde140407006ce5b3f39fac88e1168a126036b86c5ccd5642cd5eafb85d1d8db0c6714d118fdc4ebfbebaf71a0b6210ba3c4e85e392121654c9de31c97c21bf3e52f2d477bf38b6792ccb8cb00a25815d0d09b5c3ec2313ea5d3cb4af7d4534c4a5d975c0835d9376253aa70e15fb84f473ebf87925cf3398615d69bd3c1bb8409c7d2038918acbfed3269504002d3186d6986bc7967f29f6e8311d291714f3e0905127cc39d5e1f3a68fb46954a252b9f7e2072203155f5ae2b0e602f5b6ccf515c9407790dd2296827b87f1d582a2fcb2eba4b4203ac19f183d61920d878cf6d963a2e73e31aa97fcf3a89a95cf7f51b0e9951d7a82fd41fd28f6b8632c03aea40317a8b9b09ed6bcfacbd2ce230a4fb19d667cb0b14cd195431ac3a6a0395241465e28ed6b4f1c7d0103418762e6c5eb7fea1eec8c6982ac59f95846a8e3870e252659076c83a5949ade984937e1b29284c51a9d415d094c73c4d8d84c1c115fd55fb53b49dc120dac07f532145f15a71d047e0b371c5e724df47aa0ceedc385fe1ec8d7f48fe354a4884e2d9825d6208f2f632ba5dcf8826a9e067d6d362ee1144005868f6816c5e6aa4fb402f4ba9f33abd37895717f5162232cf9f52e6b40625b0b928ddc85f6a3341e4ba9363c5863f403c6b7e187e968f4fa9e2f032e67c2db58aea3122cedde6619d1e5c59ee017394c3d4c2f8168410a1957cdd1e41a4848d970e2e23a2ef9459e08b1c58c79631ddba15bf88d4e53724f60b8c97e0cabee13677cad6ce94f82bfa44e700e5b3bca59894ddcb1f5fbcc0298aa4b64fd054a1f6a2dea5c93d9843bac65d2700b6077e5af2622c0fa1b01d5762d24c0c6968bc68782f450a9f8fca5ef635e7d471841bc83928ba971bc656513c0c52686f52f945b59f6da196a67ffdcb0882a120be2b0daee4858c1866e0470edd677c9f506ee9be11e09c30e1aa82cfecb443796d72c28997ac55379952794e9c6999315f42e310b0c97b9f97038287deaa25739dc80dbc6253ee36061713a04ead2b9789b868d91b6b4ad7f6cf527d0b5dac7d38a72d8d899fb5d0a077d2ec5c556ef08e473221e40d6101dab5ebbaa86c8c6226a4ceecf3dc4eb15fc3b55d5a6db56b9dbadb9c4f17a08d54447d103b57c6ab05f0e4e291bc6a94ae2904631454a71fd22098b33e5d9a49e9661d217fcfb4d9223c5a1686ee8848992e767b0137673230931954dfddebac5eed0f8817cd55d2d133c77d3548a93c3bca24628b5a0c4a6402f27d3af08aa75feecc7f985b0a571131b20c4dba33312c2aea7c038974f3964e91c5e94ddf39f1fb73c519f69fb8f10a430f8ea6b7c87e7f2f449102b1a974c137605ac87715a6fc83cf4fe6eb79893ff664d697ee5ad73110615416fa17501b3746aa97ae26bae8f095fda0a62e9dbc62b698a381e4b86ea635eff96ee07d8100140ee5fe2085abc7f227f648a9adb5c09939d9138334aa454ea15c72a222dfdd9cb553368203348e48c11fe3e4abda1649a4bdae2fdd0e377d4311c3f46080eb2605508a40f64b3750cd02562ab4a6056bbb44e1baeb7ee2ea3fc1743956c93a784a39de2ca289b982d3c8cda91feaa8c8ddb4c322d144f88c2ff89804b417bb8253f3dda168361f1b73611dc8fffc97c0484a40476779696125e82b6f0907e480b216e7db74d6f147a3044f7c61e14103f1e8ef9f57595e5601266008755972724489364792dd65653c758435c54cfa601ae1d44d7c08289011a8564e72cee585d2782e84dad50c28f40537a8325dca2bdc36b0150701e7cdfd6a40069d777a84a724d4739f4b3e82fa2362dc63401a97b0642d87730efa546bc137a7ec90d67152b578ba96c72223f8d6d0106a209c3ff0a3893ca916d4cce5eca77dad14a331b4ef85a4ff3f7b32caef9f0c9b8e0e64c5cb313ac8d92783b63bf2e461e6c7e9691c56bc60d7398b56bc239aee15b62e5498eb2de057e703f089346b53eb86f7d08e4217774e6523d3f6939df5a8fa5d4ebe988bca6c9923601a80ffe988bfd61de28429bd849ae920eac15d9b531e6b7f4a6f70f9eb51f27f1a46700f8b3620e1ed954e7c56e166236709413c3cc6a7bafdc57201c74fe0bf38bfe848b7ba2550a589243c3887c0fb2c0f677034db333015b94abfc5511fa268f8cdf6d423b369bb70a2008ac701c49d233110d086f92b5efd52e2ce9fcf95abdce7adaaa065503789d48406ce3a4b574ac0d7d305ad1941105febb738863ae2ee203ba17736d79eca3425a9bcc27d9c1b353a1fcb4bd536d44e0395756b2c39d01c8daba21d5ab3ebb6d680db5f8a0ed5a0aa328001c28caf9b56b625eae7d96e467abbb27b718b1afe627ea0a813e47de0457a352ba58ebe1f15aecbb84597fb042ee0cf0fadc90f9ec6f1cd6625c6453595eee46b2affad7fa8906edaaa95242826d5db68955d67020aa37e25cb4cb3566ab84413d5a500669374d3116ebb6bcd58f7cf1aab989f2da810d2b351dcf1afd4d088027fa0ecf0ad9599bdb9168b087f54c59d4a27e13e21a10cf413f1e56aaf37d8159c594ac7fb6ee0d8383495988a8342db8251a690305823dc3519d19224980acb473484f5dcbc96efd2a195cd9fbd68d82537c5eb24f7d03c8b629b108df5cd436d87b3d1361d67ba3cbda2a8bca4947270b9aa639932286f9e9f16436ca8335271784b6eb5d0e53720c1a6c24170b3d2c74b37465278ea1eb1b7e9c87706fba31f0ab7c405373b9684cb522af4e8abea1b3b33ad5e90d186a7d4a496823d4594cadf03c867fe85839228aab72c6dd85d8771bc1e56e22bc586de30024decf42ff1808b5769e1a77ebeffb81741e1a0249217cc87b4f898a707f259616653450dd93424599a414432ddd2cceb3894b6a5f4f3da9a75488eca987a74266b8dc034d7a9a8eb2973a38c1e5a71e4e5e568b9f321a7c72eecc5043f3175d1d5413b0dc947c3a8577038e314f4f22a59eecd6b60d068b12e548d820bd21915f26af098edee8285b0760782a5843081e4a1a9370eee39b46c0d1f2c476feeb389439dcfd17e0c9d323901be0b6b86b3ee0d0d9399fb4ccf65840b309e7b928e95472dcd13d79b22fd9b0f15019fe81579ee3dc341e93edd6db209b922a0008c3ac0347120ef793742c3fc0db077e13232244a9048b695ea59334e1f8277d944e9ac7f9aea370d02d47ccd03aef524aabdf06875bb1c7eedc61a89cb533cdffd81771d45a35036d23670b0de4f030678423552e2c6d8c2eb5b57a77a09131862da2d0fd1959273833ae41bbd5366ab009a8f9655924ebba39e97996ec8c1b0dc9d2a093e6f03983b3bf1fe33cfaafecec9946be6a668757bc92a239ab006a4d6fad1f13d1c5dd10646c80236a886ea886ab8083ac0df1ca436bd7a1b748aeeefc9ccc7459049a635234cd55750dd086946cc1f1021780e3ce5560546d7ed0dbb5bf8d854d81ee1298c0c63dde22439224c0e2f5304e9c2c02acdc78a879cb0761b3731ab4af5ba74ead56c4666d548bd30df32b52adb5312797b339a9cd6cb4dda7586cc1884155bbb4e7a7ee1393a1ac59d8f36e6118d6f7bbe9b8ecb88bd9ba1b993778062d0841501a11e86b557c4e62d512870e70d857307f758a2f39988b597ca2dc1caa13ae9e0eb39a2a3ca34c0b27a875341b0da6556b9a9f78fced097f066e7d61d9625954616586e80e8f2ce3d5eab462b8b4d33d4a90636190c65120e92452acab20fbd1d6cf16d8cf1ed6bb177e630f6f8465ec5829aa12cad46163afcdfe469ca3617da398875e66fc4d52286ba773810d511e8411488d6aeddba81d9d867f52065ad2e491a4bca07579a2964493530c01f7e099e6fb00b3a2b9d3ca71d31976f734622506d0ec81ea527c47e308974ba167209f1b3a65598d1f0ceaf14233768955b8b393ef6138ab95ae81910b765538adfb67f08ea73b7df61e36aa30e71447afa8ad39d1eb3ae2789ef7ce560bf404e462ebad3ce874192852aae7217fa1e40597f15b7d09425dbbcf03802d467b4fa6e27f06db18bf8b3e1405d54ce60548547325a589f2c3a8cc0f07611f454fb6c302f0169953e7e6a69db8301fb8d0db1cde4b2f8093c915e9a74f1691dedb61d675497661475efdc0a6b831d88b47a333a71fee25733d7998d0c808f2ea01d58ddb149025a36c2fcfede50e5ce0f735cc7001c00bf87a5686226787030dd60e98fd0b90920e0a102299b6680a7064716d7703046f69a93a4e3956767fc4e3b9620b04dc4e7fda7e861ef0a1e8a3fb9dd5347515280aeceef9e1feec08c31645deb50c2011bf3cee6a2233ce13fa88edf873394612d2395f3dd91367f8cd1316f48b2156b39df29b96ebb9ac7db1b343b13a26521a907447271c7dfd95d7b1c97bb8d09a29e9bd1f04133bc4096e9b36038d8a6d1a6eb96ce51607733764bcfd033e2b125e15cb7ec366477f684d4d9106dd13d981eed036497cb03f3e8f91270c9c54d65eb92b546e66492c333bf289ffe429e3a19eebab08e84f2e66f398eef89e42bf67226047f99f3f4669cc4c5a29ee419a7833329813a4d79a711495ca72170064229cbecc777046b934af2dd1e06fcd2268622ce0cb39181a777af4ca5ec6a1ae163a3e0a9dfd0755bc1b67453706a48c3bb47c27d0ae89971569b04cbc5a45bea392f8c796177e856b5ac97117c347b1dcb234b6900167c72220fc7fcd925a3546c675f333074ae6806fc447791992f14235874417decfc244c8531a64515561b7731d9454110dbf300b6006822e4cbffc629452cd86a5473b5ea648316b7d191556ebb08a1bc1385a4cac6ca5b078fdfd98f8441dba349d8b5d5131f3f28a4fc1f508f988f464d2bfe07496befdf8d1dfa016e62371e77672ae8b986c7eeb04fb612929bf0dbd9c146b3bed611e43cbb12aca2d5600015e8cb982105c1a04daee5f1ad936cbd4f65241f0b1a9bd4780f7ebb1a873c686d8970f10044629e62e6ac65fed87846bf0a5be1d28717eb4c72154b4d7db6606f93fbef0f4214b96c92fa7e44b15b6bde5780c9f7dbcbe1b51b61de97feafd9f82924169626e2353dabfe7c2574f4769713786926af7d096c99eef01c32c897dc9ab642827537ef6e0711cb30d620880b8663f65294fda677e6ba362177552fd158346513fbb8f4f5e7f3850ff750154b842c34b9fbc6bb190eb4fb629899e82b9056e63a1f8c6062b9aef348f2fd667b24f3ea1036c1945a5e0363d301505f1f9a970a9ef4f8f9821ba9cc01bf95f36f1e50de48f26f6ec0572b5cd0f40c780f501d1683f2b8d31a1e17da88d949e7f6aabd94a89ed70f386c9bf966456e60b1286e368fd4dfd93a53a233f200fbdf2ba1489990fe8700d88cc567268d5d7b2d1e33eac16c6b33d1ce9829bad771bad70c58c181ae363e60efd623ff8f0ec502efa0dd71195bd223ded75e960ef30b6d332c01349d13b46bb3cecc78e916861e0ec2c50f130997fad03ddfa9fc033de3ae412a95f2df80a3295ed4483bcec9f9521178b228495990a11636bf82ff4d769704cb8680303402c10b4efe100dcc977d93e43183216a0f7576042e930d4850329cab6dcbb8ab8496022344c6dff99ab7aa3590555c27afd19fecb914122c521050a762c1e9b4f94834fee8ea19fa7714f66", 0x1001) 00:01:35 executing program 2: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:36 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}], 0x20}}], 0x1, 0x0) 00:01:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:36 executing program 2: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) 00:01:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) 00:01:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:36 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) 00:01:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={&(0x7f00000004c0), 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0xf}}, 0x0) 00:01:36 executing program 2: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r0, 0xffffffffffffffff, 0x0) 00:01:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 96.638710][ T6014] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:37 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, 0x0) 00:01:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) 00:01:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r0, 0xffffffffffffffff, 0x0) 00:01:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:37 executing program 2: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2\x00', 0x1ff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2c, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) [ 97.371453][ T6023] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:37 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, 0x0) 00:01:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x4000}, 0x0) 00:01:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) 00:01:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r0, 0xffffffffffffffff, 0x0) 00:01:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000002040)=""/161, 0xa1) [ 97.502871][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, 0x0, &(0x7f0000000080)) 00:01:38 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, 0x0) 00:01:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r0, 0xffffffffffffffff, 0x0) 00:01:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000002040)=""/161, 0xa1) [ 98.263606][ T6048] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, 0x0, &(0x7f0000000080)) 00:01:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:38 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0xc) 00:01:38 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f00000000c0), 0x10) 00:01:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000002040)=""/161, 0xa1) [ 98.413152][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000002040)=""/161, 0xa1) 00:01:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, 0x0, &(0x7f0000000080)) 00:01:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x20040085, 0x0, 0x0) 00:01:39 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f00000000c0), 0x10) 00:01:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:39 executing program 3: read(0xffffffffffffffff, &(0x7f0000002040)=""/161, 0xa1) [ 99.252631][ T6072] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:39 executing program 3: read(0xffffffffffffffff, &(0x7f0000002040)=""/161, 0xa1) 00:01:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, 0x0, &(0x7f0000000080)) 00:01:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="00004000000000052800"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:39 executing program 0: getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 00:01:39 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f00000000c0), 0x10) 00:01:39 executing program 3: read(0xffffffffffffffff, &(0x7f0000002040)=""/161, 0xa1) 00:01:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="00004000000000052800"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:39 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f00000000c0), 0x10) 00:01:39 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 00:01:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x0) 00:01:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000002040)=""/161, 0xa1) 00:01:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000080)=""/166, 0x2e, 0xa6, 0x1}, 0x20) 00:01:40 executing program 1: r0 = socket(0x18, 0x0, 0x2) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 00:01:40 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) 00:01:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="00004000000000052800"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000002040)=""/161, 0xa1) 00:01:40 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x10) 00:01:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000002040)=""/161, 0xa1) 00:01:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:40 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)="f5b9fa4818ac66592bc02571280aa40c63562e47933c64107f7b8f881f4dc279e5f92d358d9bce7e7ec56fb1a0df4db113916afc245b3bf58663f4b03f23944c33de3a2373c71f2faebba70f3ce7b1d5360be177280b2dc922e1f6512e60b1f336e723bb5e0de07c6cde8bccd158360b163488bef1b5382194d5ce03147577fc5a") process_vm_writev(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=[{&(0x7f0000001400)=""/204, 0xcc}, {&(0x7f0000001500)=""/193, 0xc1}], 0x2, 0x0) [ 100.297537][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:40 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000002040)=""/161, 0xa1) 00:01:40 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) [ 100.380349][ T6127] udc-core: couldn't find an available UDC or it's busy [ 100.384097][ T6127] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.477936][ T1528] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.737727][ T1528] usb 1-1: Using ep0 maxpacket: 8 [ 100.867842][ T1528] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 101.037818][ T1528] usb 1-1: New USB device found, idVendor=046d, idProduct=101a, bcdDevice= 0.40 [ 101.040097][ T1528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.042041][ T1528] usb 1-1: Product: syz [ 101.043013][ T1528] usb 1-1: Manufacturer: syz [ 101.044094][ T1528] usb 1-1: SerialNumber: syz 00:01:41 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0) 00:01:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 101.090214][ T1528] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 101.097088][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 101.294155][ T1528] usb 1-1: USB disconnect, device number 6 00:01:41 executing program 0: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffff9) 00:01:41 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000002040)=""/161, 0xa1) 00:01:41 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 00:01:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 101.827250][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:41 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:41 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000002040)=""/161, 0xa1) 00:01:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 00:01:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:41 executing program 0: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0xffffffffffffffff) [ 101.936623][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 00:01:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:41 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0x0) 00:01:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:41 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 00:01:42 executing program 0: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0xffffffffffffffff) [ 102.076859][ T6168] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={&(0x7f00000004c0), 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x7a}, 0x0) 00:01:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1c, 0x4) 00:01:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006500000008"], 0x1c}}, 0x0) 00:01:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:42 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x16, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 102.267195][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:42 executing program 0: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 00:01:42 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:01:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) request_key(&(0x7f0000000640)='id_legacy\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, r0) 00:01:42 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x16, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 102.851930][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:42 executing program 0: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 00:01:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) request_key(&(0x7f0000000640)='id_legacy\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, r0) 00:01:42 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x16, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:42 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:01:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:42 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x16, &(0x7f0000008340)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 103.044549][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:43 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:01:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:43 executing program 3: syz_clone(0x1034c000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:43 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) request_key(&(0x7f0000000640)='id_legacy\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, r0) 00:01:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:43 executing program 0: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0xffff, 0x0) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000040)={0x0, 0x0, 0x800}) [ 103.780550][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:43 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) request_key(&(0x7f0000000640)='id_legacy\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, r0) 00:01:43 executing program 0: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0xffff, 0x0) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000040)={0x0, 0x0, 0x800}) 00:01:43 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:01:43 executing program 0: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0xffff, 0x0) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000040)={0x0, 0x0, 0x800}) 00:01:43 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @multicast1}, @address_request={0x2a}}}}}, 0x0) 00:01:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x300}, 0x0) 00:01:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 104.010741][ T6245] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:44 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000003f40)) 00:01:44 executing program 0: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0xffff, 0x0) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000040)={0x0, 0x0, 0x800}) 00:01:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x14, r1, 0x713, 0x0, 0x0, {{0x11}, {@void, @void}}}, 0x14}}, 0x0) 00:01:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) 00:01:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 104.729603][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x14, r1, 0x713, 0x0, 0x0, {{0x11}, {@void, @void}}}, 0x14}}, 0x0) 00:01:44 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) 00:01:44 executing program 0: keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) 00:01:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) 00:01:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 104.847355][ T6266] binder: 6261:6266 Acquire 1 refcount change on invalid ref 0 ret -22 00:01:44 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @multicast1, {[@noop]}}, @address_request={0x2a}}}}}, 0x0) [ 104.870364][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x14, r1, 0x713, 0x0, 0x0, {{0x11}, {@void, @void}}}, 0x14}}, 0x0) 00:01:45 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=[{&(0x7f0000001400)=""/204, 0xcc}, {0x0}], 0x2, 0x0) 00:01:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) 00:01:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:45 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @multicast1, {[@noop]}}, @address_request={0x2a}}}}}, 0x0) 00:01:45 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @multicast1, {[@noop]}}, @address_request={0x2a}}}}}, 0x0) 00:01:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) 00:01:45 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x11, &(0x7f0000000080)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) 00:01:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x14, r1, 0x713, 0x0, 0x0, {{0x11}, {@void, @void}}}, 0x14}}, 0x0) 00:01:45 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @multicast1, {[@noop]}}, @address_request={0x2a}}}}}, 0x0) 00:01:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0) 00:01:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}}, 0x0) [ 105.878274][ T6301] udc-core: couldn't find an available UDC or it's busy [ 105.881049][ T6301] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:01:45 executing program 0: socket(0x75cf06efba979137, 0x0, 0x0) 00:01:45 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "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", "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"}) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000001140)) 00:01:45 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @multicast2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x6}]}) 00:01:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7a}, 0x0) 00:01:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}}, 0x0) 00:01:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x3, &(0x7f0000000c40)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x85, &(0x7f0000000cc0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:46 executing program 0: sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x4100, 0x0) 00:01:46 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:01:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}}, 0x0) 00:01:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380), 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:46 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=[{&(0x7f0000001400)=""/204, 0xcc}, {&(0x7f0000001500)=""/193, 0xc1}], 0x2, 0x0) [ 106.610663][ T26] audit: type=1326 audit(106.570:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b921f24 code=0x0 00:01:46 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:01:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x6}]}) 00:01:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380), 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x2}, 0x0) 00:01:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) [ 106.711161][ T26] audit: type=1326 audit(106.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b921f24 code=0x0 00:01:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x6}]}) 00:01:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}}, 0x0) 00:01:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380), 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 00:01:46 executing program 1: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x1034c000, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x0) socket(0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) 00:01:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 106.843078][ T26] audit: type=1326 audit(106.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b921f24 code=0x0 00:01:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x6}]}) 00:01:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:46 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) 00:01:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 106.959957][ T26] audit: type=1326 audit(106.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b921f24 code=0x0 00:01:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 00:01:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 00:01:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) 00:01:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000880)={&(0x7f00000004c0), 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x37fe0}}, 0x0) 00:01:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 00:01:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 00:01:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) 00:01:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 00:01:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 00:01:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) [ 107.881642][ T6407] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 00:01:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x7000000, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f70000", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 00:01:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) [ 108.161130][ T6421] __nla_validate_parse: 8 callbacks suppressed [ 108.161144][ T6421] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 108.167084][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.057637][ C1] sched: RT throttling activated 00:01:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) 00:01:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 00:01:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f70000", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) [ 111.225268][ T6436] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:51 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 00:01:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{}]}) 00:01:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f70000", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) [ 111.334231][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 00:01:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{}]}) 00:01:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) 00:01:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700000000000000", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:54 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{}]}) 00:01:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) [ 114.881547][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:54 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {}]}) 00:01:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700000000000000", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 115.783078][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) 00:01:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {}]}) 00:01:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700000000000000", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 118.411645][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:58 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffff5c7}) 00:01:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) 00:01:59 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffff5c7}) 00:01:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {}]}) 00:01:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:01:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/18, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:01:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}) [ 119.369270][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 00:01:59 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffff5c7}) [ 121.287345][ T26] audit: type=1326 audit(121.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b921f24 code=0x0 00:02:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) 00:02:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:02:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/18, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:04 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffff5c7}) 00:02:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}) 00:02:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) [ 124.165062][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 124.177967][ T26] audit: type=1326 audit(124.140:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b921f24 code=0x0 00:02:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/18, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:04 executing program 1: socket(0x1e, 0x0, 0xfffffffc) [ 124.275438][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:02:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}) 00:02:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/19, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 126.310424][ T26] audit: type=1326 audit(126.270:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b921f24 code=0x0 00:02:07 executing program 1: r0 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)='B', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffd, 0x0) [ 127.712314][ T6560] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) 00:02:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:02:07 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000728000/0x2000)=nil, &(0x7f0000674000/0x2000)=nil, 0x2000, 0x0, 0xb00000000000700}) 00:02:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="eaf14d6e717dcc17635d7e3c5f67cbae3fa27586cd05d28a687a7f77ad0dbfca0749c6e08746b8042c1c9681d110238e4c90b0e1e544d312fe9678f6c0cac2d3127ef122374ea0f7f905b8238ab192c681a5d97d57cb0742e898e73cf008453a90712c76c2f0fea964c0fba73195cc33ddd82db6029306d878498b2221fa5854768e175538538cac5b9a0f4e3d8b692b3335070000000000000032765499121c282b306d91dd9c4de00ca73a77bb38fff9477426c83bf98a0edb217c8c6b95a3adbf554be5b0e1be66cae71af167"], 0xb) 00:02:07 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe}) 00:02:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/19, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 127.916922][ T6566] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 127.928807][ T6568] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) syz_open_procfs(0xffffffffffffffff, &(0x7f0000009140)='attr/current\x00') 00:02:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 00:02:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/19, @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 128.608785][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) syz_open_procfs(0xffffffffffffffff, &(0x7f0000009140)='attr/current\x00') [ 131.198247][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.199899][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 00:02:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 131.294972][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 131.510821][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) 00:02:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) syz_open_procfs(0xffffffffffffffff, &(0x7f0000009140)='attr/current\x00') 00:02:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 00:02:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:02:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) [ 134.174713][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.204722][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) syz_open_procfs(0xffffffffffffffff, &(0x7f0000009140)='attr/current\x00') 00:02:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:02:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 00:02:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) [ 137.744673][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 137.801639][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) 00:02:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 00:02:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:02:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) r5 = socket$inet(0x2, 0xa, 0x0) close(r5) [ 141.008048][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 00:02:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 00:02:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000000042) 00:02:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 00:02:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 144.579019][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 00:02:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000000042) 00:02:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) socket$inet(0x2, 0xa, 0x0) 00:02:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 146.899583][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) socket$inet(0x2, 0xa, 0x0) 00:02:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000000042) 00:02:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 00:02:30 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x81806, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 00:02:30 executing program 1: r0 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000000042) 00:02:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty}, 0x1c) 00:02:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:30 executing program 1: r0 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000000042) [ 150.484431][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x2000000}, 0x48) 00:02:30 executing program 1: r0 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000000042) 00:02:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:32 executing program 1: r0 = syz_open_dev$loop(0x0, 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) 00:02:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x2000000}, 0x48) 00:02:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfead, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001900200027bd7000ffdbdf25801414040000fd000009000008001900", @ANYRES32=r4, @ANYBLOB="6e65322b2eff0004000010000000ef0056021a3a14f94429fa2b8254b27ad35a8053bb91fb4c321c57e02918087da4958ec512bb02cba21926c4a3d9e62cf8cff332abf058de6dc9e814b9ffacea53f24332e912283e16d5745730420f711ab95943fa8900c1692d"], 0x4c}, 0x1, 0x0, 0x0, 0x4881}, 0x24) 00:02:33 executing program 1: r0 = syz_open_dev$loop(0x0, 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) [ 153.398500][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:33 executing program 1: r0 = syz_open_dev$loop(0x0, 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) 00:02:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x2000000}, 0x48) 00:02:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) [ 158.797903][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 162.241630][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) 00:02:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') getpid() writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 162.898750][ T6792] Zero length message leads to an empty skb [ 162.913316][ T6791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x2000000}, 0x48) 00:02:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) 00:02:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:43 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) [ 164.014444][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) 00:02:45 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:45 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x5406, &(0x7f00000004c0)) 00:02:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 00:02:49 executing program 3: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540), 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x5406, &(0x7f00000004c0)) 00:02:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 169.623997][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540), 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x5406, &(0x7f00000004c0)) 00:02:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) 00:02:49 executing program 3: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540), 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x5406, &(0x7f00000004c0)) 00:02:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() 00:02:50 executing program 3: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:50 executing program 4: ioctl$TCGETS2(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)) 00:02:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 170.836162][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:50 executing program 4: ioctl$TCGETS2(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)) 00:02:50 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:54 executing program 4: ioctl$TCGETS2(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)) 00:02:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:02:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 174.807155][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:54 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)) 00:02:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 00:02:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:55 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)) 00:02:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 175.795898][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 00:02:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:02:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, 0x0, 0x0) 00:02:55 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)) 00:02:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 175.939227][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 00:02:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, 0x0, 0x0) 00:02:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x5406, 0x0) 00:02:58 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r0 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000000042) 00:02:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 178.253366][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:02:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, 0x0, 0x0) 00:02:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x5406, 0x0) 00:02:58 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r0 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000000042) 00:02:59 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r0 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000000042) 00:02:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140), 0x0) 00:02:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x5406, 0x0) 00:02:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) 00:02:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140), 0x0) 00:02:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:02:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000000042) 00:02:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 179.298834][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 179.356850][ T6966] input: syz1 as /devices/virtual/input/input2 00:02:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000500)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) 00:02:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140), 0x0) 00:02:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000000042) [ 179.446367][ T6972] x_tables: duplicate underflow at hook 2 00:03:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000000042) 00:03:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 00:03:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 00:03:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:03:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) [ 180.546685][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 00:03:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 00:03:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 181.578599][ T7003] input: syz1 as /devices/virtual/input/input3 [ 181.684179][ T7005] x_tables: duplicate underflow at hook 2 00:03:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) 00:03:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 00:03:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) [ 182.752961][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) [ 182.795245][ T7010] input: syz1 as /devices/virtual/input/input4 00:03:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) [ 183.481977][ T7025] x_tables: duplicate underflow at hook 2 00:03:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 183.565254][ T7029] input: syz1 as /devices/virtual/input/input5 00:03:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) 00:03:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 183.711259][ T7035] x_tables: duplicate underflow at hook 2 00:03:03 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 183.762580][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 183.972472][ T7043] input: syz1 as /devices/virtual/input/input6 [ 184.157100][ T7043] x_tables: duplicate underflow at hook 2 [ 184.474883][ T6880] Bluetooth: hci4: command 0x0406 tx timeout [ 184.747824][ T6880] Bluetooth: hci0: command 0x0406 tx timeout [ 184.749355][ T6880] Bluetooth: hci1: command 0x0406 tx timeout [ 184.750850][ T6880] Bluetooth: hci2: command 0x0406 tx timeout [ 184.752291][ T6880] Bluetooth: hci3: command 0x0406 tx timeout [ 184.753848][ T6880] Bluetooth: hci5: command 0x0406 tx timeout 00:03:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r4, 0x0) 00:03:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 187.363634][ T7058] input: syz1 as /devices/virtual/input/input7 [ 188.074058][ T7071] x_tables: duplicate underflow at hook 2 [ 188.110503][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 188.113965][ T7057] input: syz1 as /devices/virtual/input/input8 [ 188.124143][ T7074] input: syz1 as /devices/virtual/input/input9 [ 188.184490][ T7057] x_tables: duplicate underflow at hook 2 00:03:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 188.258253][ T7061] x_tables: duplicate underflow at hook 2 00:03:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 188.407098][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 188.409344][ T7086] input: syz1 as /devices/virtual/input/input10 00:03:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 188.486637][ T7089] input: syz1 as /devices/virtual/input/input11 [ 188.508905][ T7093] input: syz1 as /devices/virtual/input/input12 [ 188.538515][ T7086] x_tables: duplicate underflow at hook 2 [ 188.588845][ T7099] x_tables: duplicate underflow at hook 2 00:03:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 188.743111][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r3, 0x0) 00:03:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:11 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:11 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 191.733072][ T7107] input: syz1 as /devices/virtual/input/input13 [ 191.733300][ T7111] input: syz1 as /devices/virtual/input/input14 [ 191.738073][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 191.740654][ T7112] input: syz1 as /devices/virtual/input/input15 00:03:11 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 192.011016][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 192.404526][ T7130] input: syz1 as /devices/virtual/input/input16 00:03:12 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) [ 192.503528][ T7133] input: syz1 as /devices/virtual/input/input17 [ 192.515653][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.517292][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.554401][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:12 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 192.641653][ T7139] input: syz1 as /devices/virtual/input/input18 00:03:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r3, 0x0) 00:03:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:03:15 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) 00:03:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 195.487448][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 195.513609][ T7155] input: syz1 as /devices/virtual/input/input19 [ 195.513772][ T7152] input: syz1 as /devices/virtual/input/input21 [ 195.523728][ T7154] input: syz1 as /devices/virtual/input/input20 00:03:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:03:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 196.401609][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:16 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 196.640633][ T7181] input: syz1 as /devices/virtual/input/input24 [ 196.653774][ T7182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r3, 0x0) 00:03:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 00:03:19 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 199.932243][ T7186] input: syz1 as /devices/virtual/input/input25 [ 199.948055][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 200.018553][ T7197] x_tables: duplicate underflow at hook 2 00:03:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:20 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) [ 200.246142][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:20 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:21 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 201.179825][ T7216] input: syz1 as /devices/virtual/input/input29 [ 201.242632][ T7218] x_tables: duplicate underflow at hook 2 00:03:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r3, 0x0) 00:03:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 00:03:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 203.310584][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 203.315950][ T7226] input: syz1 as /devices/virtual/input/input30 00:03:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:03:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) [ 203.569182][ T7241] x_tables: duplicate underflow at hook 2 [ 203.591958][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r3, 0x0) 00:03:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:26 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 00:03:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:03:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 206.096762][ T7259] input: syz1 as /devices/virtual/input/input33 00:03:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 206.102590][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 206.123523][ T7259] x_tables: duplicate underflow at hook 2 00:03:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:03:26 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) [ 206.199562][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:26 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 206.413780][ T7278] input: syz1 as /devices/virtual/input/input34 [ 206.442015][ T7278] x_tables: duplicate underflow at hook 2 00:03:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r2, 0x0) 00:03:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:28 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:28 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:28 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 208.862244][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:28 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 208.872931][ T7286] input: syz1 as /devices/virtual/input/input35 00:03:28 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:28 executing program 3: socket$inet6(0xa, 0x3, 0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) [ 208.933675][ T7296] x_tables: duplicate underflow at hook 2 00:03:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:29 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:29 executing program 3: socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) [ 209.140876][ T7307] input: syz1 as /devices/virtual/input/input38 [ 209.153666][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 209.261126][ T7307] x_tables: duplicate underflow at hook 2 00:03:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r1, 0x0) 00:03:32 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:32 executing program 3: socket$inet6(0xa, 0x3, 0x5) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 00:03:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 212.510008][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 212.524546][ T7324] input: syz1 as /devices/virtual/input/input40 00:03:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 00:03:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 212.611488][ T7336] x_tables: duplicate underflow at hook 2 [ 212.705042][ T7343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 00:03:32 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 212.873947][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 212.965830][ T7356] input: syz1 as /devices/virtual/input/input43 [ 213.043708][ T7359] x_tables: duplicate underflow at hook 2 00:03:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r1, 0x0) 00:03:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 00:03:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 00:03:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 216.291335][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) [ 216.325873][ T7376] x_tables: duplicate underflow at hook 2 00:03:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 00:03:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 00:03:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) [ 216.638744][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 216.746156][ T7396] x_tables: duplicate underflow at hook 2 00:03:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 00:03:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 00:03:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 219.894493][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) [ 219.945737][ T7421] x_tables: duplicate underflow at hook 2 00:03:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 00:03:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) [ 220.107546][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:03:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 220.325865][ T7440] x_tables: duplicate underflow at hook 2 00:03:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 00:03:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 223.514842][ T7450] input: syz1 as /devices/virtual/input/input55 00:03:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 00:03:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 223.546682][ T7455] x_tables: duplicate underflow at hook 2 [ 223.614864][ T7463] x_tables: duplicate underflow at hook 2 00:03:43 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 223.843037][ T7469] input: syz1 as /devices/virtual/input/input57 [ 223.906766][ T7475] x_tables: duplicate underflow at hook 2 [ 223.924093][ T7476] x_tables: duplicate underflow at hook 2 00:03:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:47 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 227.209468][ T7491] input: syz1 as /devices/virtual/input/input59 [ 227.211738][ T7489] input: syz1 as /devices/virtual/input/input60 [ 227.216932][ T7492] input: syz1 as /devices/virtual/input/input61 00:03:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 227.268577][ T7499] x_tables: duplicate underflow at hook 2 [ 227.282827][ T7502] x_tables: duplicate underflow at hook 2 [ 227.282834][ T7501] x_tables: duplicate underflow at hook 2 00:03:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) [ 227.545727][ T7513] input: syz1 as /devices/virtual/input/input62 00:03:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) 00:03:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 227.675427][ T7517] input: syz1 as /devices/virtual/input/input63 [ 227.699375][ T7513] x_tables: duplicate underflow at hook 2 [ 227.746635][ T7524] x_tables: duplicate underflow at hook 2 [ 227.803379][ T7525] input: syz1 as /devices/virtual/input/input64 [ 227.881751][ T7529] x_tables: duplicate underflow at hook 2 00:03:50 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) 00:03:50 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:50 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) 00:03:50 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) [ 230.969068][ T7541] input: syz1 as /devices/virtual/input/input67 [ 230.976216][ T7540] input: syz1 as /devices/virtual/input/input66 [ 230.978615][ T7538] input: syz1 as /devices/virtual/input/input65 00:03:50 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0) [ 231.041833][ T7552] x_tables: duplicate underflow at hook 2 00:03:51 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0) 00:03:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:03:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0) 00:03:51 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) 00:03:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 231.354066][ T7570] input: syz1 as /devices/virtual/input/input68 00:03:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24}, 0x0) 00:03:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) [ 231.419290][ T7576] x_tables: duplicate underflow at hook 2 [ 231.463040][ T7578] input: syz1 as /devices/virtual/input/input69 00:03:52 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) 00:03:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) 00:03:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24}, 0x0) 00:03:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 232.423155][ T7588] input: syz1 as /devices/virtual/input/input70 [ 232.423319][ T7589] input: syz1 as /devices/virtual/input/input71 00:03:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:03:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24}, 0x0) [ 232.473675][ T7594] x_tables: duplicate underflow at hook 2 00:03:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x0) 00:03:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) [ 232.598463][ T7605] input: syz1 as /devices/virtual/input/input72 00:03:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) 00:03:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x0) [ 232.649936][ T7609] input: syz1 as /devices/virtual/input/input73 00:03:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) 00:03:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x0) 00:03:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:03:53 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 233.936326][ T7619] input: syz1 as /devices/virtual/input/input74 00:03:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(r0, 0x0) [ 233.948100][ T7622] input: syz1 as /devices/virtual/input/input75 00:03:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c"], 0x24}, 0x0) [ 233.983744][ T7625] x_tables: duplicate underflow at hook 2 00:03:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x24}, 0x0) 00:03:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) 00:03:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:03:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x10102, 0x0) shutdown(r0, 0x0) 00:03:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 234.159479][ T7639] input: syz1 as /devices/virtual/input/input76 [ 234.171799][ T7640] input: syz1 as /devices/virtual/input/input77 00:03:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x24}, 0x0) 00:03:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) 00:03:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x10102, 0x0) shutdown(r0, 0x0) [ 234.299994][ T7645] x_tables: duplicate underflow at hook 2 00:03:55 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:03:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) 00:03:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x24}, 0x0) 00:03:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x0, 0x0) shutdown(r0, 0x0) 00:03:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 00:03:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 235.337856][ T7661] input: syz1 as /devices/virtual/input/input81 00:03:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:03:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000"], 0x24}, 0x0) 00:03:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 235.400598][ T7672] x_tables: duplicate underflow at hook 2 00:03:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:03:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x24}, 0x0) 00:03:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) 00:03:56 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:03:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x24}, 0x0) 00:03:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 236.983775][ T7688] input: syz1 as /devices/virtual/input/input84 00:04:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x0, 0x0) shutdown(r0, 0x0) 00:04:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:00 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x24}, 0x0) 00:04:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 240.586909][ T7691] input: syz1 as /devices/virtual/input/input85 [ 240.592473][ T7697] input: syz1 as /devices/virtual/input/input86 00:04:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029"], 0x24}, 0x0) [ 240.648847][ T7704] x_tables: duplicate underflow at hook 2 00:04:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) 00:04:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x24}, 0x0) [ 240.737233][ T7712] input: syz1 as /devices/virtual/input/input87 00:04:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x24}, 0x0) 00:04:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x0, 0x0) shutdown(r0, 0x0) 00:04:05 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:05 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x24}, 0x0) 00:04:05 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:05 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 245.748400][ T7730] input: syz1 as /devices/virtual/input/input88 00:04:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], 0x24}, 0x0) [ 245.810852][ T7742] x_tables: duplicate underflow at hook 2 00:04:05 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], 0x24}, 0x0) 00:04:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:04:10 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) 00:04:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], 0x24}, 0x0) 00:04:10 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:10 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000"], 0x24}, 0x0) [ 250.968485][ T7762] input: syz1 as /devices/virtual/input/input90 [ 250.970995][ T7763] input: syz1 as /devices/virtual/input/input89 [ 251.037966][ T7774] x_tables: duplicate underflow at hook 2 00:04:11 executing program 5: socket$inet6(0xa, 0x3, 0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:04:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000"], 0x24}, 0x0) 00:04:11 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 251.176980][ T7779] input: syz1 as /devices/virtual/input/input91 00:04:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000"], 0x24}, 0x0) 00:04:11 executing program 5: socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 251.342134][ T7790] input: syz1 as /devices/virtual/input/input92 [ 253.958981][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.960548][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 00:04:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:04:14 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') 00:04:14 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:14 executing program 5: socket$inet6(0xa, 0x3, 0x5) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:14 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 254.812285][ T7800] input: syz1 as /devices/virtual/input/input93 [ 254.830673][ T7803] input: syz1 as /devices/virtual/input/input94 00:04:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0xc, 0x301}, 0x14}}, 0x0) 00:04:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 254.962113][ T7809] x_tables: duplicate underflow at hook 2 00:04:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x2, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) 00:04:14 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 255.031577][ T7819] input: syz1 as /devices/virtual/input/input95 00:04:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x2, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) 00:04:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140), 0x40000e2, 0x10102, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:04:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x2, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) 00:04:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:18 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 258.562474][ T7837] input: syz1 as /devices/virtual/input/input96 [ 258.622063][ T7848] x_tables: duplicate underflow at hook 2 00:04:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x2, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) 00:04:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:18 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,dmode=0x0000000000007fff,map=off,unhide,check=s,\x00'], 0x82, 0x56b, &(0x7f0000002740)="$eJzs3M9u3MYZAPChLdWCAhgFgsaOYyCMk4N7sLK7quUKycEsxZWY7C4XJBXIpyKo5cCIlBZ1C9S++ZI2QPsGveTaJ+hL5REKFVzu2vrnbJM43iL4/QDtDMmPM98sCI5EYRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBClW51ONwqDfLS7F79YulUWw285Pmvv3yeKE5aPfYYohKj5CSsr4Wq76+rrz2N/0XzcCFfarSthpSlWwpPX3vj5B68vXZid/y0JvRKPHj/5/NODg/0/LjqRBdnORnlV5MNkO4vzqog3NzY67+/0q7ifD7LqXlVnwzgts6QuyvhmejeEsLkeZ2v3it3R9lYyyOKb6S/j7ubmnVu9Tmcj/mhtnCVlVYze/2itSnfywSAfbU9imsO3em+HO82F+HFex3WWDOP4wcOD/fV5STZB3Rcc+/B4UG9eS71Or9ft9nrdjdubt+90OivTq/XZjqXOKeH0KUuLv2h55X42vVAmGy/5Dg7f39F0/gcAAAB+uqLJM/Zo8lz+6qTWzwdZZ9FpAQAAAC/R5D//V6YPAEK4GiJ//wMAAMBPzd/mrrGrxpei2fqV8d570WHS1JLDi+2ui6dbrPvXosvTRibFxtJ0K82uR2+2QW/Oor+ZFg/m5RGV5XL09IclEP4errUx1+635f3ZkbaX1X4+yNbSYvBBNyTJ5Qt1tlf/+YuHfwmhLI8ufjUaXo7Cg4cH+2u/+/3B/UkuT5tWnh5OF1CcWUdxMpdL4Vguf3q27nE64rsnR7w8eRDTjPqr0XC17bdzfPwX2tMvvKDPlXPG/2V4q415a7UtV0+Of6Xps7t2zuiPZ9Ed7713dHR01DTwP478VBbX25jrN99tindvTo8sh/CfWRa9eVn0jn//c76L75RFs/HraRbr87JY/4FZACzKg9Oz0Jn5/8y8+z3ucq9mdv8yvNPGvHNt6fmMdGp268y7o3e++7x+Iot/hRttzI1Z8Ivm2Kbff5yYVaPDr5sTvj7T72yleTXoRc3GxUuHfwhvPHr85NbDw08/2/9s/4teb32j86tO53YvLE+GMS3MPQCcIyu/iVbrv0ZlmY9/293c7Cb1ThaXRfpxXOZb21mcj+qsTHeS0XYWj8uiLtJi0FQ+ybeyKq52x+OirON+Ucbjosr3Jm9+iaevfqmyYTKq87QaD7KkyuK0GNVJWsdbeZXG493fDPJqJysnJ1fjLM37eZrUeTGKq2K3TLO1OK6y7FhgvpWN6ryfN9VRPC7zYVLeiz8pBrvDLN7KqrTMx3XRNpjOfnMY9YtyOGl2bcHfNQD8v3gUpm+we/Yqu5dTmT0daPYseIgAwCnP5+12+9KiEwIAAAAAAAAAAAAAAM44vm7vw+mivR9nReArq9x97bxDby8+MRWVl7is9vGTz//5I/a1yLsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzvvwEAAP//d7KVlw==") newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f00000005c0), 0x0) 00:04:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 258.834717][ T7863] loop4: detected capacity change from 0 to 736 [ 258.844593][ T7864] input: syz1 as /devices/virtual/input/input97 [ 258.847521][ T7863] ======================================================= [ 258.847521][ T7863] WARNING: The mand mount option has been deprecated and [ 258.847521][ T7863] and is ignored by this kernel. Remove the mand [ 258.847521][ T7863] option from the mount to silence this warning. [ 258.847521][ T7863] ======================================================= [ 258.949622][ T7868] input: syz1 as /devices/virtual/input/input98 [ 259.006675][ T7870] x_tables: duplicate underflow at hook 2 00:04:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,dmode=0x0000000000007fff,map=off,unhide,check=s,\x00'], 0x82, 0x56b, &(0x7f0000002740)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f00000005c0), 0x0) 00:04:22 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,dmode=0x0000000000007fff,map=off,unhide,check=s,\x00'], 0x82, 0x56b, &(0x7f0000002740)="$eJzs3M9u3MYZAPChLdWCAhgFgsaOYyCMk4N7sLK7quUKycEsxZWY7C4XJBXIpyKo5cCIlBZ1C9S++ZI2QPsGveTaJ+hL5REKFVzu2vrnbJM43iL4/QDtDMmPM98sCI5EYRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBClW51ONwqDfLS7F79YulUWw285Pmvv3yeKE5aPfYYohKj5CSsr4Wq76+rrz2N/0XzcCFfarSthpSlWwpPX3vj5B68vXZid/y0JvRKPHj/5/NODg/0/LjqRBdnORnlV5MNkO4vzqog3NzY67+/0q7ifD7LqXlVnwzgts6QuyvhmejeEsLkeZ2v3it3R9lYyyOKb6S/j7ubmnVu9Tmcj/mhtnCVlVYze/2itSnfywSAfbU9imsO3em+HO82F+HFex3WWDOP4wcOD/fV5STZB3Rcc+/B4UG9eS71Or9ft9nrdjdubt+90OivTq/XZjqXOKeH0KUuLv2h55X42vVAmGy/5Dg7f39F0/gcAAAB+uqLJM/Zo8lz+6qTWzwdZZ9FpAQAAAC/R5D//V6YPAEK4GiJ//wMAAMBPzd/mrrGrxpei2fqV8d570WHS1JLDi+2ui6dbrPvXosvTRibFxtJ0K82uR2+2QW/Oor+ZFg/m5RGV5XL09IclEP4errUx1+635f3ZkbaX1X4+yNbSYvBBNyTJ5Qt1tlf/+YuHfwmhLI8ufjUaXo7Cg4cH+2u/+/3B/UkuT5tWnh5OF1CcWUdxMpdL4Vguf3q27nE64rsnR7w8eRDTjPqr0XC17bdzfPwX2tMvvKDPlXPG/2V4q415a7UtV0+Of6Xps7t2zuiPZ9Ed7713dHR01DTwP478VBbX25jrN99tindvTo8sh/CfWRa9eVn0jn//c76L75RFs/HraRbr87JY/4FZACzKg9Oz0Jn5/8y8+z3ucq9mdv8yvNPGvHNt6fmMdGp268y7o3e++7x+Iot/hRttzI1Z8Ivm2Kbff5yYVaPDr5sTvj7T72yleTXoRc3GxUuHfwhvPHr85NbDw08/2/9s/4teb32j86tO53YvLE+GMS3MPQCcIyu/iVbrv0ZlmY9/293c7Cb1ThaXRfpxXOZb21mcj+qsTHeS0XYWj8uiLtJi0FQ+ybeyKq52x+OirON+Ucbjosr3Jm9+iaevfqmyYTKq87QaD7KkyuK0GNVJWsdbeZXG493fDPJqJysnJ1fjLM37eZrUeTGKq2K3TLO1OK6y7FhgvpWN6ryfN9VRPC7zYVLeiz8pBrvDLN7KqrTMx3XRNpjOfnMY9YtyOGl2bcHfNQD8v3gUpm+we/Yqu5dTmT0daPYseIgAwCnP5+12+9KiEwIAAAAAAAAAAAAAAM44vm7vw+mivR9nReArq9x97bxDby8+MRWVl7is9vGTz//5I/a1yLsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzvvwEAAP//d7KVlw==") newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f00000005c0), 0x0) 00:04:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:22 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 262.921559][ T7883] input: syz1 as /devices/virtual/input/input99 [ 262.928003][ T7885] input: syz1 as /devices/virtual/input/input100 [ 262.930743][ T7884] loop4: detected capacity change from 0 to 736 [ 262.943939][ T7887] loop2: detected capacity change from 0 to 736 00:04:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 262.980902][ T7892] x_tables: duplicate underflow at hook 2 00:04:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:22 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,dmode=0x0000000000007fff,map=off,unhide,check=s,\x00'], 0x82, 0x56b, &(0x7f0000002740)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f00000005c0), 0x0) 00:04:23 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,dmode=0x0000000000007fff,map=off,unhide,check=s,\x00'], 0x82, 0x56b, &(0x7f0000002740)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f00000005c0), 0x0) 00:04:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 263.115857][ T7898] input: syz1 as /devices/virtual/input/input101 [ 263.144941][ T7899] loop4: detected capacity change from 0 to 736 [ 263.154175][ T7902] loop2: detected capacity change from 0 to 736 00:04:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,dmode=0x0000000000007fff,map=off,unhide,check=s,\x00'], 0x82, 0x56b, &(0x7f0000002740)="$eJzs3M9u3MYZAPChLdWCAhgFgsaOYyCMk4N7sLK7quUKycEsxZWY7C4XJBXIpyKo5cCIlBZ1C9S++ZI2QPsGveTaJ+hL5REKFVzu2vrnbJM43iL4/QDtDMmPM98sCI5EYRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBClW51ONwqDfLS7F79YulUWw285Pmvv3yeKE5aPfYYohKj5CSsr4Wq76+rrz2N/0XzcCFfarSthpSlWwpPX3vj5B68vXZid/y0JvRKPHj/5/NODg/0/LjqRBdnORnlV5MNkO4vzqog3NzY67+/0q7ifD7LqXlVnwzgts6QuyvhmejeEsLkeZ2v3it3R9lYyyOKb6S/j7ubmnVu9Tmcj/mhtnCVlVYze/2itSnfywSAfbU9imsO3em+HO82F+HFex3WWDOP4wcOD/fV5STZB3Rcc+/B4UG9eS71Or9ft9nrdjdubt+90OivTq/XZjqXOKeH0KUuLv2h55X42vVAmGy/5Dg7f39F0/gcAAAB+uqLJM/Zo8lz+6qTWzwdZZ9FpAQAAAC/R5D//V6YPAEK4GiJ//wMAAMBPzd/mrrGrxpei2fqV8d570WHS1JLDi+2ui6dbrPvXosvTRibFxtJ0K82uR2+2QW/Oor+ZFg/m5RGV5XL09IclEP4errUx1+635f3ZkbaX1X4+yNbSYvBBNyTJ5Qt1tlf/+YuHfwmhLI8ufjUaXo7Cg4cH+2u/+/3B/UkuT5tWnh5OF1CcWUdxMpdL4Vguf3q27nE64rsnR7w8eRDTjPqr0XC17bdzfPwX2tMvvKDPlXPG/2V4q415a7UtV0+Of6Xps7t2zuiPZ9Ed7713dHR01DTwP478VBbX25jrN99tindvTo8sh/CfWRa9eVn0jn//c76L75RFs/HraRbr87JY/4FZACzKg9Oz0Jn5/8y8+z3ucq9mdv8yvNPGvHNt6fmMdGp268y7o3e++7x+Iot/hRttzI1Z8Ivm2Kbff5yYVaPDr5sTvj7T72yleTXoRc3GxUuHfwhvPHr85NbDw08/2/9s/4teb32j86tO53YvLE+GMS3MPQCcIyu/iVbrv0ZlmY9/293c7Cb1ThaXRfpxXOZb21mcj+qsTHeS0XYWj8uiLtJi0FQ+ybeyKq52x+OirON+Ucbjosr3Jm9+iaevfqmyYTKq87QaD7KkyuK0GNVJWsdbeZXG493fDPJqJysnJ1fjLM37eZrUeTGKq2K3TLO1OK6y7FhgvpWN6ryfN9VRPC7zYVLeiz8pBrvDLN7KqrTMx3XRNpjOfnMY9YtyOGl2bcHfNQD8v3gUpm+we/Yqu5dTmT0daPYseIgAwCnP5+12+9KiEwIAAAAAAAAAAAAAAM44vm7vw+mivR9nReArq9x97bxDby8+MRWVl7is9vGTz//5I/a1yLsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzvvwEAAP//d7KVlw==") newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f00000005c0), 0x0) 00:04:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,dmode=0x0000000000007fff,map=off,unhide,check=s,\x00'], 0x82, 0x56b, &(0x7f0000002740)="$eJzs3M9u3MYZAPChLdWCAhgFgsaOYyCMk4N7sLK7quUKycEsxZWY7C4XJBXIpyKo5cCIlBZ1C9S++ZI2QPsGveTaJ+hL5REKFVzu2vrnbJM43iL4/QDtDMmPM98sCI5EYRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBClW51ONwqDfLS7F79YulUWw285Pmvv3yeKE5aPfYYohKj5CSsr4Wq76+rrz2N/0XzcCFfarSthpSlWwpPX3vj5B68vXZid/y0JvRKPHj/5/NODg/0/LjqRBdnORnlV5MNkO4vzqog3NzY67+/0q7ifD7LqXlVnwzgts6QuyvhmejeEsLkeZ2v3it3R9lYyyOKb6S/j7ubmnVu9Tmcj/mhtnCVlVYze/2itSnfywSAfbU9imsO3em+HO82F+HFex3WWDOP4wcOD/fV5STZB3Rcc+/B4UG9eS71Or9ft9nrdjdubt+90OivTq/XZjqXOKeH0KUuLv2h55X42vVAmGy/5Dg7f39F0/gcAAAB+uqLJM/Zo8lz+6qTWzwdZZ9FpAQAAAC/R5D//V6YPAEK4GiJ//wMAAMBPzd/mrrGrxpei2fqV8d570WHS1JLDi+2ui6dbrPvXosvTRibFxtJ0K82uR2+2QW/Oor+ZFg/m5RGV5XL09IclEP4errUx1+635f3ZkbaX1X4+yNbSYvBBNyTJ5Qt1tlf/+YuHfwmhLI8ufjUaXo7Cg4cH+2u/+/3B/UkuT5tWnh5OF1CcWUdxMpdL4Vguf3q27nE64rsnR7w8eRDTjPqr0XC17bdzfPwX2tMvvKDPlXPG/2V4q415a7UtV0+Of6Xps7t2zuiPZ9Ed7713dHR01DTwP478VBbX25jrN99tindvTo8sh/CfWRa9eVn0jn//c76L75RFs/HraRbr87JY/4FZACzKg9Oz0Jn5/8y8+z3ucq9mdv8yvNPGvHNt6fmMdGp268y7o3e++7x+Iot/hRttzI1Z8Ivm2Kbff5yYVaPDr5sTvj7T72yleTXoRc3GxUuHfwhvPHr85NbDw08/2/9s/4teb32j86tO53YvLE+GMS3MPQCcIyu/iVbrv0ZlmY9/293c7Cb1ThaXRfpxXOZb21mcj+qsTHeS0XYWj8uiLtJi0FQ+ybeyKq52x+OirON+Ucbjosr3Jm9+iaevfqmyYTKq87QaD7KkyuK0GNVJWsdbeZXG493fDPJqJysnJ1fjLM37eZrUeTGKq2K3TLO1OK6y7FhgvpWN6ryfN9VRPC7zYVLeiz8pBrvDLN7KqrTMx3XRNpjOfnMY9YtyOGl2bcHfNQD8v3gUpm+we/Yqu5dTmT0daPYseIgAwCnP5+12+9KiEwIAAAAAAAAAAAAAAM44vm7vw+mivR9nReArq9x97bxDby8+MRWVl7is9vGTz//5I/a1yLsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzvvwEAAP//d7KVlw==") newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f00000005c0), 0x0) 00:04:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 264.306138][ T7915] input: syz1 as /devices/virtual/input/input102 [ 264.319720][ T7917] loop2: detected capacity change from 0 to 736 [ 264.324341][ T7912] input: syz1 as /devices/virtual/input/input103 [ 264.333902][ T7916] loop4: detected capacity change from 0 to 736 00:04:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 264.430065][ T7920] x_tables: duplicate underflow at hook 2 00:04:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 264.496480][ T7927] input: syz1 as /devices/virtual/input/input104 00:04:24 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x8916, &(0x7f0000000000)) 00:04:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)={[{@map_acorn}]}, 0x82, 0x56b, &(0x7f0000002740)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) setxattr(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, r2}, 0x18) 00:04:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 264.646466][ T7937] input: syz1 as /devices/virtual/input/input105 00:04:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)={[{@map_acorn}]}, 0x82, 0x56b, &(0x7f0000002740)="$eJzs3M9u3MYZAPChLdWCAhgFgsaOYyCMk4N7sLK7quUKycEsxZWY7C4XJBXIpyKo5cCIlBZ1C9S++ZI2QPsGveTaJ+hL5REKFVzu2vrnbJM43iL4/QDtDMmPM98sCI5EYRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBClW51ONwqDfLS7F79YulUWw285Pmvv3yeKE5aPfYYohKj5CSsr4Wq76+rrz2N/0XzcCFfarSthpSlWwpPX3vj5B68vXZid/y0JvRKPHj/5/NODg/0/LjqRBdnORnlV5MNkO4vzqog3NzY67+/0q7ifD7LqXlVnwzgts6QuyvhmejeEsLkeZ2v3it3R9lYyyOKb6S/j7ubmnVu9Tmcj/mhtnCVlVYze/2itSnfywSAfbU9imsO3em+HO82F+HFex3WWDOP4wcOD/fV5STZB3Rcc+/B4UG9eS71Or9ft9nrdjdubt+90OivTq/XZjqXOKeH0KUuLv2h55X42vVAmGy/5Dg7f39F0/gcAAAB+uqLJM/Zo8lz+6qTWzwdZZ9FpAQAAAC/R5D//V6YPAEK4GiJ//wMAAMBPzd/mrrGrxpei2fqV8d570WHS1JLDi+2ui6dbrPvXosvTRibFxtJ0K82uR2+2QW/Oor+ZFg/m5RGV5XL09IclEP4errUx1+635f3ZkbaX1X4+yNbSYvBBNyTJ5Qt1tlf/+YuHfwmhLI8ufjUaXo7Cg4cH+2u/+/3B/UkuT5tWnh5OF1CcWUdxMpdL4Vguf3q27nE64rsnR7w8eRDTjPqr0XC17bdzfPwX2tMvvKDPlXPG/2V4q415a7UtV0+Of6Xps7t2zuiPZ9Ed7713dHR01DTwP478VBbX25jrN99tindvTo8sh/CfWRa9eVn0jn//c76L75RFs/HraRbr87JY/4FZACzKg9Oz0Jn5/8y8+z3ucq9mdv8yvNPGvHNt6fmMdGp268y7o3e++7x+Iot/hRttzI1Z8Ivm2Kbff5yYVaPDr5sTvj7T72yleTXoRc3GxUuHfwhvPHr85NbDw08/2/9s/4teb32j86tO53YvLE+GMS3MPQCcIyu/iVbrv0ZlmY9/293c7Cb1ThaXRfpxXOZb21mcj+qsTHeS0XYWj8uiLtJi0FQ+ybeyKq52x+OirON+Ucbjosr3Jm9+iaevfqmyYTKq87QaD7KkyuK0GNVJWsdbeZXG493fDPJqJysnJ1fjLM37eZrUeTGKq2K3TLO1OK6y7FhgvpWN6ryfN9VRPC7zYVLeiz8pBrvDLN7KqrTMx3XRNpjOfnMY9YtyOGl2bcHfNQD8v3gUpm+we/Yqu5dTmT0daPYseIgAwCnP5+12+9KiEwIAAAAAAAAAAAAAAM44vm7vw+mivR9nReArq9x97bxDby8+MRWVl7is9vGTz//5I/a1yLsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzvvwEAAP//d7KVlw==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) setxattr(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, r2}, 0x18) 00:04:25 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:25 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x8916, &(0x7f0000000000)) 00:04:25 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) [ 265.820540][ T7949] loop4: detected capacity change from 0 to 736 [ 265.831415][ T7948] input: syz1 as /devices/virtual/input/input106 00:04:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 265.888865][ T7956] x_tables: duplicate underflow at hook 2 00:04:25 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:25 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x8916, &(0x7f0000000000)) 00:04:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 266.155412][ T7974] input: syz1 as /devices/virtual/input/input110 [ 266.225685][ T7976] x_tables: duplicate underflow at hook 2 00:04:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)={[{@map_acorn}]}, 0x82, 0x56b, &(0x7f0000002740)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) setxattr(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, r2}, 0x18) 00:04:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:27 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x8916, &(0x7f0000000000)) 00:04:27 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 267.225676][ T7986] loop4: detected capacity change from 0 to 736 [ 267.230094][ T7984] input: syz1 as /devices/virtual/input/input112 00:04:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:27 executing program 2: r0 = socket(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) 00:04:27 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 267.514768][ T8004] input: syz1 as /devices/virtual/input/input115 00:04:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:28 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:04:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001800)='./file0\x00', 0x1044c, &(0x7f0000000080)={[{@map_acorn}]}, 0x82, 0x56b, &(0x7f0000002740)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) setxattr(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, r2}, 0x18) 00:04:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:28 executing program 2: getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 00:04:28 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 268.557943][ T8012] loop4: detected capacity change from 0 to 736 [ 268.566204][ T8014] input: syz1 as /devices/virtual/input/input117 00:04:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000)) 00:04:28 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, 0x0, 0x0) 00:04:28 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:28 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000d3"], 0x24}], 0x1}, 0x0) [ 268.812533][ T8035] input: syz1 as /devices/virtual/input/input120 00:04:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, 0x0, 0x0) 00:04:29 executing program 5: r0 = getpid() ptrace$setsig(0x4203, r0, 0x0, 0x0) 00:04:29 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000d3"], 0x24}], 0x1}, 0x0) 00:04:29 executing program 4: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:04:29 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:29 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8931, &(0x7f0000000000)={'vcan0\x00'}) 00:04:29 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000d3"], 0x24}], 0x1}, 0x0) 00:04:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, 0x0, 0x0) [ 269.873383][ T8050] input: syz1 as /devices/virtual/input/input121 00:04:29 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000d3"], 0x24}], 0x1}, 0x0) 00:04:29 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[], 0x2e) 00:04:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:04:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0xfd, 0x122d, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) 00:04:31 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:04:31 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 271.723026][ T8074] input: syz1 as /devices/virtual/input/input122 [ 271.873346][ T8070] loop2: detected capacity change from 0 to 8192 00:04:33 executing program 4: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:04:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed={{}, [@map_val]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xe4, &(0x7f00000000c0)=""/228, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:04:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') 00:04:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:04:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:33 executing program 2: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 273.934178][ T8091] input: syz1 as /devices/virtual/input/input123 00:04:33 executing program 5: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:04:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000019c0)={0x0, 0x200}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001d80)={0x10, 0x2}, 0x10) 00:04:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xfd, 0x11fc, &(0x7f0000002480)="$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") io_setup(0x3, &(0x7f0000000600)) 00:04:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 274.279542][ T8109] input: syz1 as /devices/virtual/input/input124 00:04:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 274.544888][ T8105] loop3: detected capacity change from 0 to 8192 [ 274.694625][ T8114] input: syz1 as /devices/virtual/input/input125 00:04:37 executing program 4: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:04:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0), 0x10) connect$inet(r0, &(0x7f0000000000), 0x10) shutdown(r0, 0x1) 00:04:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:37 executing program 2: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 277.400384][ T8119] input: syz1 as /devices/virtual/input/input126 00:04:37 executing program 3: r0 = shmget(0x2, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x3000) [ 277.472824][ T8127] x_tables: duplicate underflow at hook 2 00:04:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) 00:04:37 executing program 5: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:04:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) 00:04:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 277.816033][ T8141] input: syz1 as /devices/virtual/input/input127 00:04:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xa, 0x5, 0x9, 0x8}, 0x48) [ 277.873748][ T8144] x_tables: duplicate underflow at hook 2 00:04:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) 00:04:41 executing program 4: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:04:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) 00:04:41 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:41 executing program 2: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 281.289995][ T8155] input: syz1 as /devices/virtual/input/input129 00:04:41 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000002c0)=""/194, 0x38, 0xc2, 0x1}, 0x20) [ 281.368832][ T8164] x_tables: duplicate underflow at hook 2 00:04:41 executing program 3: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 00:04:42 executing program 5: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x8) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0x8000000000000003) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:04:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000100)=""/209, 0xd1, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) shutdown(r0, 0x0) 00:04:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x0, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 282.695940][ T8173] input: syz1 as /devices/virtual/input/input130 [ 282.767795][ T8178] x_tables: duplicate underflow at hook 2 00:04:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x10, &(0x7f0000001540)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d6d6163696e7569742c696f636861727365743d63703836362c726f6469722c757466383d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d312c757466383d312c73686f72746e616d653d6c6f7765722c696f636861727365743d757466382c757466383d302c009da6285a810fdc1c5fce9d9fccc501eb515237e8d14114e6afabdefa2ba19d5c45597fe8e128f2a4df6089e579ab06984050b1dc24ee2c3dbc2f43d56fb4bcec59ffce305227599624b50026724f6f350c5a54a27e1ad72fdb07ef3a079e8fad41cb08dcecc6cde9b3c6ed6e884c94ebf009ebeeddaef9a1b17811e22968ed029d42d30f2d31450668d51303d0"], 0x3, 0x2da, &(0x7f0000001240)="$eJzs3T9onGUYAPDn+qW5WKiXQSg6fboJEpqIi1NKiRC8QZTgn8lgU5W7WGgwkAxpOomj4CLo5OagY2dxEHFzcLWCVMXFbgWLr3z33Z8vuSu9RC+n9vcjkIfnfZ98z/tdyF0gee715WhdOh2Xb9++FXNztZhZvrgcd2oxH6cii9J+AAD/J3dSit9Tadq9AAAno/P8/+bZabcBAJygMX//f2Fk9srE2gIAJmjo+f+JA8uzB3fP9P8mAAD473rp1deev9CMeDHP5yI239te216LZwfrFy7H29GOjTgfjbgbUb5QKD7K+LnV5sr5vPDzfKxtXuvUR/E5q9bXYzEaMd+t777aSCllRf1ipz6PiP1efW177XSc6db/cCY2Yika8chQfcRqc2Up736ByvWH+l+IRnz3RlyJdlyKojaKI8T+anNlbzHPL6ZmfrD/emcfAAAAAAAAAAAAAAAAAAAAAABMwkLeN5jfkwbzexYWRqx35uOU9d35OtfL+UCp3pvO8352eD5Qfmi+zkycmu7RAQAAAAAAAAAAAAAAAAAA4F9ja2c21tvtjatbO7utanCtknnnm8+/eiiG99wnmOleY/SelPUyKRu1J4uIfuazG/2Oq3vq/VMcqbFOcPbxnz4etfTnIJPFUY+829p8uGzpyP0UwdJ99txMKd2rfO+j4aqoVe7hPxp8feutR5/eOvdMJ/Nld+jDk081Xr754ae/ttbbxZWj9wjeTce+Vlb5/qnF32x+Pfv+t1ce++Db8apSNfPuvTd/cTgzWwbFHZjAnd/ZbR3rMT33yfL6jb0ffxm3qvJDwqAOAAAAAAAAAAAAAAAAAAA4EZX/FQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB9bg/f8rwfWhzDjBH6OW6htXt6Z9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CsAAP//z5iLZQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x7b9c0b) [ 282.898134][ T8182] loop3: detected capacity change from 0 to 256 [ 282.921793][ T8182] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 00:04:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x0, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 283.029206][ T8182] FAT-fs (loop3): Directory bread(block 64) failed [ 283.031064][ T8182] FAT-fs (loop3): Directory bread(block 65) failed [ 283.040317][ T8182] FAT-fs (loop3): Directory bread(block 66) failed [ 283.049206][ T8182] FAT-fs (loop3): Directory bread(block 67) failed [ 283.058988][ T8182] FAT-fs (loop3): Directory bread(block 68) failed [ 283.063119][ T8184] input: syz1 as /devices/virtual/input/input131 [ 283.069668][ T8182] FAT-fs (loop3): Directory bread(block 69) failed [ 283.084207][ T8182] FAT-fs (loop3): Directory bread(block 70) failed [ 283.094314][ T8182] FAT-fs (loop3): Directory bread(block 71) failed [ 283.104418][ T8182] FAT-fs (loop3): Directory bread(block 72) failed [ 283.113382][ T8182] FAT-fs (loop3): Directory bread(block 73) failed [ 283.132823][ T8186] x_tables: duplicate underflow at hook 2 00:04:46 executing program 5: r0 = semget(0x2, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000040)={{0x1, 0xee00, 0xee00, 0xee00, 0xffffffffffffffff}}) 00:04:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x10, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x3, 0x2da, &(0x7f0000001240)="$eJzs3T9onGUYAPDn+qW5WKiXQSg6fboJEpqIi1NKiRC8QZTgn8lgU5W7WGgwkAxpOomj4CLo5OagY2dxEHFzcLWCVMXFbgWLr3z33Z8vuSu9RC+n9vcjkIfnfZ98z/tdyF0gee715WhdOh2Xb9++FXNztZhZvrgcd2oxH6cii9J+AAD/J3dSit9Tadq9AAAno/P8/+bZabcBAJygMX//f2Fk9srE2gIAJmjo+f+JA8uzB3fP9P8mAAD473rp1deev9CMeDHP5yI239te216LZwfrFy7H29GOjTgfjbgbUb5QKD7K+LnV5sr5vPDzfKxtXuvUR/E5q9bXYzEaMd+t777aSCllRf1ipz6PiP1efW177XSc6db/cCY2Yika8chQfcRqc2Up736ByvWH+l+IRnz3RlyJdlyKojaKI8T+anNlbzHPL6ZmfrD/emcfAAAAAAAAAAAAAAAAAAAAAABMwkLeN5jfkwbzexYWRqx35uOU9d35OtfL+UCp3pvO8352eD5Qfmi+zkycmu7RAQAAAAAAAAAAAAAAAAAA4F9ja2c21tvtjatbO7utanCtknnnm8+/eiiG99wnmOleY/SelPUyKRu1J4uIfuazG/2Oq3vq/VMcqbFOcPbxnz4etfTnIJPFUY+829p8uGzpyP0UwdJ99txMKd2rfO+j4aqoVe7hPxp8feutR5/eOvdMJ/Nld+jDk081Xr754ae/ttbbxZWj9wjeTce+Vlb5/qnF32x+Pfv+t1ce++Db8apSNfPuvTd/cTgzWwbFHZjAnd/ZbR3rMT33yfL6jb0ffxm3qvJDwqAOAAAAAAAAAAAAAAAAAAA4EZX/FQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB9bg/f8rwfWhzDjBH6OW6htXt6Z9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CsAAP//z5iLZQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x7b9c0b) 00:04:46 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x0, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:46 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000001140)=[{{&(0x7f0000000380)={0x2, 0x0, @private}, 0x10, 0x0}}], 0x1, 0x0) 00:04:46 executing program 4: semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/168) [ 286.561624][ T8196] loop3: detected capacity change from 0 to 256 [ 286.565929][ T8196] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.571086][ T8197] input: syz1 as /devices/virtual/input/input132 00:04:46 executing program 5: syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x80004, &(0x7f0000000100), 0x0, 0x0, 0x0) 00:04:46 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0) [ 286.632677][ T8204] x_tables: duplicate underflow at hook 2 00:04:46 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000003100), 0x0) [ 286.656384][ T8196] FAT-fs (loop3): Directory bread(block 64) failed [ 286.658932][ T8196] FAT-fs (loop3): Directory bread(block 65) failed [ 286.669582][ T8196] FAT-fs (loop3): Directory bread(block 66) failed [ 286.671361][ T8196] FAT-fs (loop3): Directory bread(block 67) failed [ 286.686722][ T8196] FAT-fs (loop3): Directory bread(block 68) failed [ 286.692077][ T8196] FAT-fs (loop3): Directory bread(block 69) failed [ 286.700327][ T8196] FAT-fs (loop3): Directory bread(block 70) failed [ 286.708267][ T8196] FAT-fs (loop3): Directory bread(block 71) failed 00:04:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000200)) [ 286.727984][ T8196] FAT-fs (loop3): Directory bread(block 72) failed 00:04:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x5452, &(0x7f00000002c0)) [ 286.742144][ T8196] FAT-fs (loop3): Directory bread(block 73) failed 00:04:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$nbd(r0, 0x0, 0xfdb4) 00:04:46 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x141140, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x20, &(0x7f0000000180)) [ 287.392455][ T8196] attempt to access beyond end of device [ 287.392455][ T8196] loop3: rw=2049, want=3440, limit=256 [ 287.415230][ T8196] attempt to access beyond end of device [ 287.415230][ T8196] loop3: rw=2049, want=4816, limit=256 00:04:47 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x141140, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}, 0x0, 0x0, 0x0) 00:04:47 executing program 4: fchownat(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0xffffffffffffffff, 0x0, 0x1000) 00:04:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:48 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x103e42, 0x17) 00:04:48 executing program 4: msgget(0x0, 0x623) 00:04:48 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x141140, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}, 0x0, 0x0, 0x0) 00:04:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000200)) 00:04:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000200)) 00:04:48 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x141140, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}, 0x0, 0x0, 0x0) [ 288.146562][ T8232] input: syz1 as /devices/virtual/input/input133 00:04:48 executing program 4: pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) bind$inet6(r0, 0x0, 0x0) 00:04:48 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:04:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000200)) [ 288.211820][ T8242] x_tables: duplicate underflow at hook 2 00:04:48 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@cred], 0x20}, 0x0) 00:04:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 288.419275][ T8253] input: syz1 as /devices/virtual/input/input134 [ 288.478007][ T8256] x_tables: duplicate underflow at hook 2 00:04:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:49 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x141140, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}, 0x0, 0x0, 0x0) 00:04:49 executing program 4: capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) 00:04:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004040)={0x0, 0x13, &(0x7f0000003a80)=[{&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x10}], 0x10000000000002a5, &(0x7f0000003f40)=[@cred={{0xbe3c0697f6a36389, 0x1, 0x2, {0xffffffffffffffff}}}], 0x500020}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000004040)={0x0, 0x5e, &(0x7f0000003a80)=[{&(0x7f0000000300)=ANY=[], 0x10}], 0x10000000000002a5, &(0x7f0000000100)=[@cred={{0x1c}}], 0x500020}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:49 executing program 2: r0 = socket(0x18, 0x4003, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000340)) 00:04:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 289.525461][ T8267] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 289.538547][ T8264] input: syz1 as /devices/virtual/input/input135 00:04:49 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000280)={0x18, 0x1}, 0xc) 00:04:49 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)=""/248, 0xf8}, {&(0x7f0000000200)=""/159}, {&(0x7f00000002c0)=""/185}, {&(0x7f0000000380)=""/168}, {&(0x7f0000000580)=""/65}, {&(0x7f0000000480)=""/193}, {&(0x7f00000001c0)=""/11}, {&(0x7f0000000780)=""/246}], 0x10000000000000d9) 00:04:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) [ 289.599750][ T8272] x_tables: duplicate underflow at hook 2 00:04:49 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000140)) 00:04:49 executing program 2: syz_emit_ethernet(0xb6, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) 00:04:49 executing program 4: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000280)) clock_gettime(0x2, &(0x7f00000002c0)) 00:04:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:50 executing program 3: syz_emit_ethernet(0x23, &(0x7f00000001c0)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 00:04:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 00:04:50 executing program 2: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x62b61a1f139f08c6, 0x10, 0xffffffffffffffff, 0x0) 00:04:50 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x3}, 0x8) [ 290.803961][ T8295] input: syz1 as /devices/virtual/input/input136 00:04:50 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt(r0, 0x64, 0x0, 0x0, 0x0) 00:04:50 executing program 4: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2\x00', 0x1ff) pipe2$watch_queue(0x0, 0x80) 00:04:50 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') 00:04:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) [ 290.871861][ T8304] x_tables: duplicate underflow at hook 2 [ 290.909300][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b32, &(0x7f0000000000)) [ 291.010016][ T8320] input input137: cannot allocate more than FF_MAX_EFFECTS effects [ 291.011605][ T8321] device bridge_slave_1 left promiscuous mode [ 291.013979][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state 00:04:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 00:04:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 00:04:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:52 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000014c0)=@abs, 0x8) [ 292.293507][ T8332] input input139: cannot allocate more than FF_MAX_EFFECTS effects [ 292.296044][ T8328] input: syz1 as /devices/virtual/input/input138 [ 292.306249][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:52 executing program 2: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(0xffffffffffffffff, &(0x7f0000004f00), 0x10, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffe0a, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000ffff000001"], 0x9}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x0) [ 292.317583][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 292.380884][ T8339] device bridge_slave_1 left promiscuous mode [ 292.383296][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.397841][ T8342] input input140: cannot allocate more than FF_MAX_EFFECTS effects [ 292.397974][ T8343] x_tables: duplicate underflow at hook 2 00:04:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 00:04:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:52 executing program 3: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000007c0)) [ 292.520277][ T8349] input input141: cannot allocate more than FF_MAX_EFFECTS effects [ 292.551288][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:52 executing program 3: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x2}, 0xc) 00:04:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000040)=@raw=[@map_idx, @initr0, @cb_func, @call={0x85, 0x0, 0x0, 0xa0}, @func, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @map_val, @kfunc], &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xa, 0x3, 0x3f}, 0x10}, 0x80) 00:04:53 executing program 3: nanosleep(&(0x7f0000001800)={0xffffffff00000001}, 0x0) 00:04:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x3ff0000}, 0x1c) 00:04:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 293.726672][ T8364] input: syz1 as /devices/virtual/input/input144 00:04:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:53 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000200)=r2, 0x12) 00:04:53 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000140)="ae", 0x1}], 0x3}, 0x0) 00:04:53 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/190, 0x2a, 0xbe, 0x1}, 0x20) [ 293.799601][ T8376] x_tables: duplicate underflow at hook 2 00:04:53 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f0000000280)=@framed={{}, [], {0x95, 0x0, 0x0, 0x7200}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:04:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:04:55 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x16, 0x0, 0x0, 0x0}, 0x20) 00:04:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x1d, 0x0, 0x0, 0x0}, 0x20) 00:04:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0xe, 0x0, 0x0, 0x0}, 0x20) 00:04:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 295.180792][ T8398] input: syz1 as /devices/virtual/input/input146 00:04:55 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6080, 0x0) 00:04:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x16, 0x0, 0x0, 0x0}, 0x20) 00:04:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x1d, 0x0, 0x0, 0x0}, 0x20) 00:04:55 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 295.270883][ T8410] x_tables: duplicate underflow at hook 2 00:04:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x16, 0x0, 0x0, 0x0}, 0x20) 00:04:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd27) 00:04:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x1d, 0x0, 0x0, 0x0}, 0x20) 00:04:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x16, 0x0, 0x0, 0x0}, 0x20) 00:04:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x1d, 0x0, 0x0, 0x0}, 0x20) 00:04:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:04:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x0) [ 296.653340][ T8428] input: syz1 as /devices/virtual/input/input147 00:04:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:04:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x1c, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 00:04:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 296.720702][ T8438] x_tables: duplicate underflow at hook 2 00:04:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:56 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x1c, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) [ 296.777230][ T8445] udc-core: couldn't find an available UDC or it's busy 00:04:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 296.797571][ T8445] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:04:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x1c, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 00:04:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x1c, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) 00:04:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x1c, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 00:04:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 297.084809][ T8466] input: syz1 as /devices/virtual/input/input150 [ 297.158670][ T8470] x_tables: duplicate underflow at hook 2 00:04:57 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 00:04:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x1c, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) 00:04:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x1c, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 00:04:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 297.391072][ T8478] input: syz1 as /devices/virtual/input/input153 00:04:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 297.409541][ T8483] udc-core: couldn't find an available UDC or it's busy 00:04:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x1c, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) 00:04:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0xa) [ 297.430974][ T8483] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 297.451616][ T8486] x_tables: duplicate underflow at hook 2 00:04:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000000)=0x98) 00:04:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000011c0), &(0x7f0000001200)=0x4) 00:04:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) read(r0, &(0x7f0000000300)=""/139, 0x8b) execve(0x0, 0x0, 0x0) 00:04:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 298.066716][ T8505] input: syz1 as /devices/virtual/input/input156 [ 298.084363][ T8504] input: syz1 as /devices/virtual/input/input157 [ 298.232878][ T8515] x_tables: duplicate underflow at hook 2 00:04:58 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000000c0)="c2", 0x1, 0x0, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c) 00:04:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 00:04:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000140), &(0x7f0000000080)=0x3) 00:04:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x14) 00:04:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000140)=0xb0) [ 298.418853][ T8527] input: syz1 as /devices/virtual/input/input158 00:04:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 00:04:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000140)=0xb0) 00:04:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:04:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x184, &(0x7f0000000100)={0x10, 0x2}, 0x10) [ 298.491081][ T8534] input: syz1 as /devices/virtual/input/input159 00:04:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:04:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x10, 0x2}, 0x10) 00:04:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000140)=0xb0) 00:04:58 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x1c, 0x1c}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0), 0x88) 00:04:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x10, 0x2}, 0x30) 00:04:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000140)=0xb0) [ 298.708686][ T8551] x_tables: duplicate underflow at hook 2 00:04:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x10, &(0x7f0000000000)=0x1, 0x4) 00:04:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:04:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:04:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb) 00:04:59 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000140)='s', 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 00:04:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000180)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, &(0x7f0000000040)=[@prinfo={0x14}], 0x14}, 0x0) 00:04:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 299.397953][ T8562] input: syz1 as /devices/virtual/input/input160 00:04:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x0, 0x7}, 0x8) 00:04:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 299.462793][ T8575] x_tables: duplicate underflow at hook 2 00:04:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0), &(0x7f0000000100)=0x98) 00:04:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@un=@file={0xa}, 0xa) 00:04:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000001400), &(0x7f00000014c0)=0x98) 00:04:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:05:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:05:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)="da", 0x1, 0x0, &(0x7f0000001180)={0x10, 0x2}, 0x10) 00:05:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, @in, 0x0, 0x0, 0x281}, 0x98) 00:05:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) 00:05:00 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x1c, 0x1c}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}, @prinfo={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @sndrcv={0x2c}, @sndinfo={0x1c}, @init={0x14}], 0xc4}, 0x0) [ 300.381994][ T8600] input: syz1 as /devices/virtual/input/input164 00:05:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000100), &(0x7f00000001c0)=0x90) 00:05:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000001c0), 0x90) 00:05:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x0, 0x0, 0x8000}, 0x8) [ 300.441606][ T8607] x_tables: duplicate underflow at hook 2 00:05:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 00:05:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf746bec66ba", 0x3714, 0x11, 0x0, 0x27) 00:05:00 executing program 5: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0xbee, &(0x7f0000000cc0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setrlimit(0x0, 0x0) [ 301.076006][ T8619] loop5: detected capacity change from 0 to 2048 [ 301.120892][ T8619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 00:05:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:05:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x894c, 0x0) 00:05:01 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:01 executing program 4: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2406c800) getgid() fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) syz_clone(0x40085000, 0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:05:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 00:05:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="bd"], 0x1f) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x77, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2405c800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) [ 301.353169][ T26] audit: type=1326 audit(301.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e440f24 code=0xffff0000 00:05:01 executing program 3: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) write$evdev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000004600)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f00000008c0)}, {&(0x7f0000000940)="bcb9f81db48ab59a836a03639ece4687a4b3cd9a8f2db862fe7e049065407e52fccd89a9b9a14f5fc4cf42dfc09c67a2e5780382d4fa4f91d3692c86c15bb20b615e8256eff2b6df2546e2c7feddd60ef2bfaa8ca7922047fd156e21ce7a1efb3a95d2a9b0a52508783e1aa11ada75e711a63e1c0f6c42bc385962c316dcc4fa1481c6d0102fae978e1e57b68e7051d8154c89444278c8f87411cc9e46e1904f728a52b93b15e04867497a925a2ba3bb0c65400fbe8b72234aa3283d89a9507435433427e1", 0xc5}], 0x3, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf746bec66ba", 0x3714, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffff3}, 0x100) [ 301.364698][ T8635] input: syz1 as /devices/virtual/input/input165 [ 301.599437][ T8645] x_tables: duplicate underflow at hook 2 00:05:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x0, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006140)={0x14, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 302.191256][ T8649] input: syz1 as /devices/virtual/input/input166 00:05:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)=@newtclass={0x24, 0x12, 0xeea0cfaed2376c9b}, 0x24}}, 0x0) 00:05:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 302.269410][ T8653] x_tables: duplicate underflow at hook 2 00:05:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006140)={0x14, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 00:05:02 executing program 3: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) write$evdev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000004600)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f00000008c0)}, {&(0x7f0000000940)="bcb9f81db48ab59a836a03639ece4687a4b3cd9a8f2db862fe7e049065407e52fccd89a9b9a14f5fc4cf42dfc09c67a2e5780382d4fa4f91d3692c86c15bb20b615e8256eff2b6df2546e2c7feddd60ef2bfaa8ca7922047fd156e21ce7a1efb3a95d2a9b0a52508783e1aa11ada75e711a63e1c0f6c42bc385962c316dcc4fa1481c6d0102fae978e1e57b68e7051d8154c89444278c8f87411cc9e46e1904f728a52b93b15e04867497a925a2ba3bb0c65400fbe8b72234aa3283d89a9507435433427e1", 0xc5}], 0x3, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9051a7511bf746bec66ba", 0x3714, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffff3}, 0x100) [ 302.440867][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:05:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006140)={0x14, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 00:05:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) signalfd4(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) 00:05:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006140)={0x14, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 00:05:03 executing program 5: r0 = memfd_create(&(0x7f0000002700)='\x12{*!', 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000002280)) close_range(r2, r3, 0x0) 00:05:03 executing program 2: syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0xbee, &(0x7f0000000cc0)="$eJzs3UFsHNd5B/DvDUmRkotk61iykxrB2gUcVWlUkootGwxQq2aJplFs1hSTtu7BK3GlbkUtFyTlyEabuCcfWqBsCvTSFChQpDB6CNhDDu0pBQr0ShS5FQXUNHVdFAX2ECOXwixm9i25kmiLMEVRkn8/QPoPZ7+3O/Peema4b8cKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDiV371zPhEOuitAADuphfnXh6fdP4HgI+Vc37/BwAAAAAAAAAAAACAe12KIt6NFN94vJterX7uGTvbal+9Nj89s3Ozw6lqOVTVl3/GJiZPffHpZ04/288Pb3+nfTpemjt3pv7C0pXOcnNlpblQn2+3LiwtNHf9DHttf7MTVQfUr1y+unDx4kp98uSpGx6+Vntn9KFjtanTE68c7dfOT8/MzA3UDI985Fe/xQfd4XEoirgYKS6//W5qREQRe++L27x39tvhaidOVDsxPz1T7chiq9FeLR+c7XdEEVEbaPR8v4/uwljsST3izXLzyw0+Ue7eXKex3Di/2KzPNpZXW6utpfZs6m1tqsqLeDZFdCKiO3rr041EEd+MFG99p5vOR8RQvx8+X90YfPvtKfZhH3dhOCJqIxEbxX0wZvew0Sjie5Hi298ajwu5X6tueyriq2Uei7ha5vWItTI/G5HKN8gjEe/t8H7i/jIcRfxRpPjJVDct9Me+Oq6c/Vr9y+2LSwO1/ePKfX9+uJvu8WPTWBTRqI743fTRL3YAAAAAALj3FPGnkeKJHx5PnRicU2y1L9XPNc4v9j4V7n/2X8+tNjc3N2upl+M5Z3N2cq7lXM+5kbObs1bk9jlnc3ZyruVcz7mRs5uzNpTb55zN2cm5lnM950bObs7acG6fczZnJ+dazvWcGzm7wwc4XAAAAAAAAACwg8NRxNcjxVO/9Fp1X3FU96V/cur0yyd/ffCe8cdu8zxl7cmIWC92d0/uoXzr8GyaTemA7iGmd//fH+T7//7woDcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4UEUU8WSkeO373RQpIuoRr0Yvr48e9NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3wlgq4r1I8edfGat+3igifjsi3t98fzMirr+/eacd9B4DAAAAAAAAwAMoFfF6pHjy5W6qRcS12jujDx2rTZ2eeOXoUAxFKksG61+aO3em/sLSlc5yc2WluVCfb7cuLC00d/tyY2db7avX5qdn9mVnbuvwPm//4bEXljqvL7cu/e7qjo8fGTtzfmV1uXFh54fjcBQR9cE1J6oNnp+eqTZ6sdVoV01n0263GAAAAAAAAICPg5FUxPuR4q2/eXtr3nm4N+c/fHPtd78UUeTl6Tz/vDUNXX1v4BPV9wZ6y5+cOv0bk58ZXN5xyvpENaFen5+emZkbWD08cmvpWH7d8b3tMgPK8V+NFH/8l/X0RF534/gPbdV+9/e3x/vNm5/oA8Z8r+P/swPrytdMqYi/ixQ/95uPxRPVdh6JW74zkeu+Eil+a/3xXBeHyron8+MPV3+PXWwtNsfL2muR4h+v3lj7VK791HbtxK479j5Rjv+TkeJ/fmd9q2/y+OcR2B61wfH/zM3vjn0a/4cH1tXy6/78ndl1ImLl9TcuNxYXm8sWLFiwsLVw0Ecm7oby/P/1SPEPf/avW9c7+fz/M72ftq//fvrN7fP/1M1PtE/n/08NrJvKVyMjwxFjq1c6I49GjK28/sYXWlcal5qXmu1Tp597ZnL8uYnxUyOH+hd320t77qsHUTn+vxcpvvejv43P5XU3Xv/tfP1/5OYn2qfxf2Rg3ZEbrlf2vOvk8f+/SPHP0z+I43ndh13/93//P54vwreuz/dp/I8OrKt+x/tExC8MrDt+NOKB+6UMAAAA7rCUivhBnk8dv8186j9Fijf++xdzXTpW1j2fH69Vf4+9uNT+wpnFxaULjdXG+cVmfa7TuNAs2/44UnT/+vHctqjmV/vzzb053u252H+JFM/9Wr+2Nxfb/2zqke3aibL2ZKT4kxdvrO1/jnF0u3ayrP23SDHxys61x7ZrT5W1/xUpfvoX9X7tkbL2S7n20e3akxeWFhf2YVgAAAAAAGBPRlIRz0SKvz81nPqfb+/m+5+3fOi9T9//e3Rg3cJdul9lz50KAPe48vx/vDyr//Jfbc3l33j+3/7/AAye/282+O8GfNDyRzn/1+7MbgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB87KQoYilSfOPxbro+Wv7cM3a21b56bX56Zudmh1PVcqiqL/+MTUye+uLTz5x+tp8f3v5O+3S8NHfuTP2FpSud5ebKSnOhPt9uXVhaaO76Gfba/mYnqg6oX7l8deHixZX65MlTNzx8rfbO6EPHalOnJ1452q+dn56ZmRuoGR75yK9+i/QB6w9FEf8bKS6//W7699GIIvbeF7d57+y3w9VOnKh2Yn56ptqRxVajvVo+ONvviCKiNtDo+X4f3YWx2JN6xJvl5pcbfKLcvblOY7lxfrFZn20sr7ZWW0vt2dTb2lSVF/FsiuhERHf01qcbiSJGIsVb3+mmH41GDPX74fMvzr08Pnn77Sn2YR93YTgiaiMRG8V9MGb3sNEo4ulI8e1vjcd/jPb6teq2pyK+WuaxiKtlXo9YK/OzEal8gzwS8d4O7yfuL8NRxMOR4idT3fTj0Tz21XHl7NfqX25fXBqo7R9X7vvzw910jx+bxqKId6sjfjf9p/+eAQAAAAAeIEU8Fime+OHxVM0Pbs0pttqX6uca5xd7H+v3P/uv51abm5ubtdTL8ZyzOTs513Ku59zI2c1ZK3L7nLM5OznXcq7n3MjZzVkbyu1zzubs5FzLuZ5zI2c3Z204t885m7OTcy3nes6NnN3hgxwvAAAAAAAAgJ0VUcTnIsVr3++mzdHeBO+r0cvr7gd64P1/AAAA//9W5Vt6") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 00:05:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006140)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 00:05:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x0, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 303.216115][ T8675] input: syz1 as /devices/virtual/input/input167 [ 303.224656][ T8672] loop2: detected capacity change from 0 to 2048 00:05:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 303.282727][ T8678] x_tables: duplicate underflow at hook 2 00:05:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006140)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 303.317523][ T8672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 00:05:03 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000002440)={0x2}, 0x8, 0x800) 00:05:03 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x12{*\xee\xb4^@\xf8S\xe8\xd7(\x85\xa5\x06\x02:\x1a\"!', 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) read$FUSE(r2, 0x0, 0x0) 00:05:03 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x220040, 0x0) 00:05:03 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000002440)={0x2}, 0x8, 0x800) 00:05:03 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) clock_gettime(0x0, &(0x7f0000000200)) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x3ff}, {}], 0x2, 0x0) 00:05:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006140)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 00:05:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x0, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:03 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x6000, 0x155) 00:05:03 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000002440)={0x2}, 0x8, 0x800) [ 303.623877][ T8699] input: syz1 as /devices/virtual/input/input168 00:05:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006140)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 303.700848][ T8705] x_tables: duplicate underflow at hook 2 00:05:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:05:04 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x2b, 0x0, 0x0) 00:05:04 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000002440)={0x2}, 0x8, 0x800) 00:05:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000002cc0)="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", 0xb39, 0x0, &(0x7f0000001300)={0x10, 0x2}, 0x10) 00:05:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000080)={@multicast2}, 0xc) [ 304.249514][ T8714] input: syz1 as /devices/virtual/input/input169 [ 304.314834][ T8723] x_tables: duplicate underflow at hook 2 00:05:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, 0x0) 00:05:04 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x401, &(0x7f0000000080)="5f6edcf1", 0x4) 00:05:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000080)={@multicast2}, 0xc) 00:05:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000080)={@multicast2}, 0xc) 00:05:04 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x100, &(0x7f00000000c0), 0x12) 00:05:04 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040), 0x4) 00:05:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:05:05 executing program 4: fcntl$getown(0xffffffffffffffff, 0x2) 00:05:05 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000080)={@multicast2}, 0xc) 00:05:05 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000280)) 00:05:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000000)="cbf7cadec15f1996af8e89041a2ebb6cf8126e099e733fe867aca311b01578311a2f90b3ceb79a18061364aa3027925c62b998d19cdab41523af4569aaf28dfbb9be21dd067272d557b3548b5bc1062e63cdbbf81d", 0x55, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) [ 305.146961][ T8751] input: syz1 as /devices/virtual/input/input170 00:05:05 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000280)) 00:05:05 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200, &(0x7f0000000000), 0x4) 00:05:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) [ 305.261037][ T8758] x_tables: duplicate underflow at hook 2 00:05:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 00:05:05 executing program 2: sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) 00:05:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="2b030000000000000000050000000e002a"], 0xa0}}, 0x0) 00:05:06 executing program 5: sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup/syz1\x00', 0x200002, 0x0) 00:05:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 00:05:06 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80800) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 00:05:06 executing program 3: sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) 00:05:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 306.087567][ T8788] input: syz1 as /devices/virtual/input/input171 00:05:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 00:05:06 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x3, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x4, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf117, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40051}, 0x80800) syz_genetlink_get_family_id$mptcp(0x0, r0) socket$nl_route(0x10, 0x3, 0x0) 00:05:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)={'virt_wifi0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002b00)={0x28, 0x0, 0x0, {{0x3a8d, 0x0, 0x1, r1}}}, 0x28) 00:05:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup/syz1\x00', 0x200002, 0x0) [ 306.165784][ T8794] x_tables: duplicate underflow at hook 2 00:05:06 executing program 3: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000140), 0x4) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf117, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 00:05:06 executing program 5: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) 00:05:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002340)={'gretap0\x00', &(0x7f00000022c0)={'syztnl1\x00', 0x0, 0x700, 0x0, 0x0, 0x8001, {{0x9, 0x4, 0x0, 0x5, 0x24, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x0, [@dev={0xac, 0x14, 0x14, 0x15}, @local]}]}}}}}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000002c00)={'veth0_to_bridge\x00'}) 00:05:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x10}}], 0x10}, 0x0) 00:05:06 executing program 5: sigaltstack(&(0x7f0000000040)={0x0}, &(0x7f0000000240)={0x0}) 00:05:06 executing program 3: mq_open(&(0x7f0000000000)='$-)%:.^\x00', 0x3, 0x0, 0x0) 00:05:06 executing program 2: getrandom(&(0x7f0000000080)=""/124, 0x7c, 0x0) 00:05:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:05:06 executing program 4: mq_open(&(0x7f0000000040)='-(\'\\}#\x00', 0x43, 0x0, 0x0) 00:05:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004880)={0x2020}, 0xfffffc95) 00:05:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:06 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x8510}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:05:06 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) [ 306.984481][ T8825] input: syz1 as /devices/virtual/input/input172 00:05:06 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:05:07 executing program 4: mq_open(&(0x7f0000000040)='-(\'\\}#\x00', 0x43, 0x0, 0x0) 00:05:07 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) [ 307.052802][ T8829] x_tables: duplicate underflow at hook 2 00:05:07 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:05:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005580)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x60010062) 00:05:07 executing program 4: mq_open(&(0x7f0000000040)='-(\'\\}#\x00', 0x43, 0x0, 0x0) 00:05:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:05:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005580)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) 00:05:07 executing program 4: mq_open(&(0x7f0000000040)='-(\'\\}#\x00', 0x43, 0x0, 0x0) 00:05:07 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:05:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 00:05:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000740)=""/132, 0x2e, 0x84, 0x1}, 0x20) [ 307.926219][ T8849] input: syz1 as /devices/virtual/input/input173 00:05:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000005680)={0x0, 0x0, 0x0}, 0x0) close(r1) 00:05:07 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000740)=""/132, 0x26, 0x84, 0x1}, 0x20) 00:05:07 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 307.991578][ T8859] x_tables: duplicate underflow at hook 2 00:05:07 executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x19093, r0}, 0x80) 00:05:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x12, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) 00:05:08 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xa01) 00:05:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:05:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005580)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x240000c0) 00:05:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x4bfa, &(0x7f00000004c0)) 00:05:08 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001f00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40a85323, &(0x7f0000000000)) 00:05:08 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 00:05:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/block/loop0', 0x802, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x2, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x21, 0x400, 0x5a, @mcast1, @private2, 0x40, 0x8000, 0xa4, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x3, 0x7, 0x3, 0x7a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x20, 0x7ff, 0xfff}}) sendmsg$inet6(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000042000000000000000000000f7472f1c632d5a6c03d3e40833843f14181be6df7b0b430c1491ed990983ce"], 0x24}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0xce, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_team\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0x4, 0x4, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"da64"}}, @common=@mh={{0x28}, {"0e5e"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x3, 0x0, 0x2}, {0x4, 0x3, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 308.817442][ T8877] [ 308.818109][ T8877] ============================================ [ 308.819558][ T8877] WARNING: possible recursive locking detected [ 308.821031][ T8877] 5.15.98-syzkaller #0 Not tainted [ 308.822209][ T8877] -------------------------------------------- [ 308.823672][ T8877] syz-executor.5/8877 is trying to acquire lock: [ 308.823681][ T8877] ffff0000d7eaf120 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: l2tp_tunnel_register+0x888/0x1974 00:05:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005580)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x240000c0) [ 308.823716][ T8877] [ 308.823716][ T8877] but task is already holding lock: [ 308.823720][ T8877] ffff0000d7eaf120 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x53c/0x1348 00:05:08 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001f00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40a85323, &(0x7f0000000000)) [ 308.823745][ T8877] [ 308.823745][ T8877] other info that might help us debug this: 00:05:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005580)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x240000c0) [ 308.823749][ T8877] Possible unsafe locking scenario: [ 308.823749][ T8877] [ 308.823752][ T8877] CPU0 [ 308.823754][ T8877] ---- [ 308.823757][ T8877] lock(sk_lock-AF_PPPOX); [ 308.823764][ T8877] lock(sk_lock-AF_PPPOX); [ 308.823772][ T8877] [ 308.823772][ T8877] *** DEADLOCK *** [ 308.823772][ T8877] 00:05:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005580)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x240000c0) [ 308.823775][ T8877] May be due to missing lock nesting notation [ 308.823775][ T8877] 00:05:08 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001f00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40a85323, &(0x7f0000000000)) [ 308.823778][ T8877] 1 lock held by syz-executor.5/8877: [ 308.823786][ T8877] #0: ffff0000d7eaf120 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x53c/0x1348 [ 308.823813][ T8877] [ 308.823813][ T8877] stack backtrace: 00:05:08 executing program 3: sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x240000c0) [ 308.823817][ T8877] CPU: 1 PID: 8877 Comm: syz-executor.5 Not tainted 5.15.98-syzkaller #0 [ 308.823829][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 308.823836][ T8877] Call trace: [ 308.823839][ T8877] dump_backtrace+0x0/0x530 [ 308.823853][ T8877] show_stack+0x2c/0x3c [ 308.823864][ T8877] dump_stack_lvl+0x108/0x170 [ 308.823876][ T8877] dump_stack+0x1c/0x58 [ 308.823886][ T8877] __lock_acquire+0x62b4/0x7620 [ 308.823897][ T8877] lock_acquire+0x2b8/0x894 [ 308.823907][ T8877] lock_sock_nested+0xec/0x1ec [ 308.823919][ T8877] l2tp_tunnel_register+0x888/0x1974 [ 308.823928][ T8877] pppol2tp_connect+0x944/0x1348 [ 308.823938][ T8877] __sys_connect+0x268/0x290 [ 308.823950][ T8877] __arm64_sys_connect+0x7c/0x94 [ 308.823961][ T8877] invoke_syscall+0x98/0x2b8 [ 308.823973][ T8877] el0_svc_common+0x138/0x258 [ 308.823984][ T8877] do_el0_svc+0x58/0x14c [ 308.823994][ T8877] el0_svc+0x7c/0x1f0 [ 308.824004][ T8877] el0t_64_sync_handler+0x84/0xe4 [ 308.824015][ T8877] el0t_64_sync+0x1a0/0x1a4 [ 308.842232][ T8880] input: syz1 as /devices/virtual/input/input174 [ 308.908427][ T8888] x_tables: duplicate underflow at hook 2 00:05:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 00:05:09 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001f00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40a85323, &(0x7f0000000000)) 00:05:09 executing program 3: sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x240000c0) 00:05:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x4bfa, &(0x7f00000004c0)) [ 315.390068][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.391568][ T2046] ieee802154 phy1 wpan1: encryption failed: -22