7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x40000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:36:41 executing program 2: stat(0x0, &(0x7f0000000900)) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x14) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x8000, 0x39b281) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x88, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x88}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x402800}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="99b8dc73b6828449bc524b2798cd0aeddfe0ed46138cc9cd79bb9a1acc51f7d6905602c37b576a75cba9059d9361718d9a652674e3d9dd1c", @ANYRES16=r1], 0x2}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/imice\x00', 0x0, 0x101003) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x402, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000002c0)=0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8a42, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000800)={0x7, 0x0, [{0x10000, 0x50, &(0x7f0000000480)=""/80}, {0xd000, 0x1000, &(0x7f0000000980)=""/4096}, {0x10801, 0xa8, &(0x7f0000000500)=""/168}, {0x3000, 0x1000, &(0x7f0000001980)=""/4096}, {0x4, 0xb1, &(0x7f00000005c0)=""/177}, {0x5000, 0x80, &(0x7f0000000740)=""/128}, {0x10000, 0x31, &(0x7f00000007c0)=""/49}]}) lsetxattr$security_evm(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='\xbf\x13\xc9\x1d\xc3\x02\xde\xd1.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) r6 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x1f68a31f, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r8, 0x401, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffff8000, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r8, 0x8, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x100, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)=0x1) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) 00:36:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000004c0)={0x0, @reserved}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r4, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) bind$netlink(r2, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'L\xdf\xff\x00\x04\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x0, 0x404000, 0xffff}}) fstat(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() setfsgid(r9) getgroups(0x2, &(0x7f0000000300)=[0x0, r9]) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x2, 0xee00}, {0x2, 0x4, r4}, {0x2, 0x0, r5}, {0x2, 0x4, r6}], {0x4, 0x1}, [{0x8, 0x6, r8}, {0x8, 0x0, r10}, {0x8, 0x4, r11}], {0x10, 0x2}, {0x20, 0x6}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r12 = socket$inet(0x10, 0x2, 0x0) sendmsg(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:36:42 executing program 1 (fault-call:11 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 509.005336][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 509.166798][T17759] IPVS: ftp: loaded support on port[0] = 21 [ 509.184876][T17763] FAULT_INJECTION: forcing a failure. [ 509.184876][T17763] name failslab, interval 1, probability 0, space 0, times 1 [ 509.197682][T17763] CPU: 0 PID: 17763 Comm: syz-executor.1 Not tainted 5.4.0-rc8-syzkaller #0 [ 509.206383][T17763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.207578][T17763] Call Trace: [ 509.207578][T17763] dump_stack+0x1c9/0x220 [ 509.207578][T17763] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 509.207578][T17763] should_fail+0xa3f/0xa50 [ 509.207578][T17763] __should_failslab+0x264/0x280 [ 509.207578][T17763] should_failslab+0x29/0x70 [ 509.207578][T17763] __kmalloc+0xae/0x410 [ 509.207578][T17763] ? tty_write+0x4cd/0x1350 [ 509.207578][T17763] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 509.207578][T17763] tty_write+0x4cd/0x1350 [ 509.207578][T17763] ? n_tty_read+0x3180/0x3180 [ 509.207578][T17763] ? redirected_tty_write+0x270/0x270 [ 509.207578][T17763] __vfs_write+0x1a9/0xcb0 [ 509.207578][T17763] ? rw_verify_area+0x3a5/0x5e0 [ 509.207578][T17763] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 509.207578][T17763] vfs_write+0x481/0x920 [ 509.207578][T17763] ksys_write+0x265/0x430 [ 509.207578][T17763] __se_sys_write+0x92/0xb0 [ 509.207578][T17763] __x64_sys_write+0x4a/0x70 [ 509.207578][T17763] do_syscall_64+0xb6/0x160 [ 509.207578][T17763] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.207578][T17763] RIP: 0033:0x45a639 [ 509.207578][T17763] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 509.207578][T17763] RSP: 002b:00007f0d04c4cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.207578][T17763] RAX: ffffffffffffffda RBX: 00007f0d04c4cc90 RCX: 000000000045a639 [ 509.207578][T17763] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 509.207578][T17763] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 509.207578][T17763] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d04c4d6d4 [ 509.207578][T17763] R13: 00000000004cac1c R14: 00000000004e3048 R15: 0000000000000008 00:36:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x8e35877520f0c410, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0x109001, 0x110000}) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x100000000, 0xc001) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000240)={0x57cb, "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"}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000440)={0x3}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="11a58fde7649496403db92ed306004b3d3cbfc195485c3b895d864ab91a3aebde4f70a917a91ec9612d004000a7b43a35bb73249ede41bf5c05ab608fb7b74ffd57f6e8e43cf9cb723fc0d8d8cabbbbae3a5fde8ad6f52d667c512596f50b9962aa2193688d872a7eeca57801742d74d39c4b003a5e292e077ed102e7999329aab95a3d96363505f76c86a6d2352dd8025207ae531701f1ce353d6b017eb64000000bc2e9f8b66fe4a8e64f0fc7a0aa55d4103e1d7d5b0dd5750071e9b3a786021678a86fcbb0b9f9364ec0f0310306fef9c21b3b20d8b44423b495299cea2c6f40c377a72534453ad7f5af27b1efb2514ace1f9a68cf205a9ddb8fd954e34bde3612e6e05686cf3b968a14bd3a356f7b8d20214c0f7a388ef5ea8d063c65f2aabff685e69f86b4a0b3697f8bfbfe66796f0489ad2e49bdbc1742941c28c88cb93e1f8ccc3db4782cdf9cbd797ddc8d7b1364da50ad48e081a38622280169eba5c6a3bf9b5f15bdf8a8b6483340a3297c31154905db209195c28f15d10153204fbe0586516c714ddc939e0eb68c73969e81fc6f215b476ddf3fcf1a604603360089dadba2779cfed9027ac163067fc0d7592ac8a013b907372a42b242405241ac1f63f85a52fff2d78b30e87a156b5cfa133dabc259bb027bec5eb8c8eb623e9776a13d3ce972a6769de8a78153f498084a244b0146b77be3d1cba7b02fe8906ed8a88f105c763d1772825b986d52823bf38b6f95eca494fd9c64497874b9f450bec65311493cc108b27611eaa6819305a3730d29368f25f7e816d60884a1e0271c3c786ad36391366ac3b65f04c148974f6973005c5ff73d6f0b3f7e44c65da7c4115c4ee543991e4ad26938384cafffffffc8f7e79aaf1b8ef37f627e3c7168ecda2cf224a491bea6129fcd954b88dbb2d29464931bcd5378041db67ddc70ee856ae09c1b26b9ada008a7d52bf1a160606865a29794f36b2a3811c66e9fe27af8fc8356374e37f3eca244367fb535dde71fae4683710761b89f18820d4f06065450c3d1f76fa26ef28320edf6c36480af14f4444edb40ebb3f8ea264486ec31c40c7f0007a69c24da10db6f60da3e648f16b5fc6b5a5c6217e46c1f3ff354a8b49beb3b46a69dcb4c5d547a7b7ba8fe22da0173f9fe80f4bd47afbec4d2e0d3c91b1a326d8bb9fded873e87f847032af52bd6d129f3ce3f11ea9d0b4250af7eaa2649d9972b9b8dc773c869b3a431eac7f55d6bb92dc29f08d7d8959e2af7571efb7ec88eac4b62850e8f6b60d4a5d06d66875b4bd260a9014a2eb88621f4c6eb3f9ed2190b48acf0358d8b82fb4794535fcb8dd50ba86d23d230a94f07a768142ff3b4c8558dac21726b6279980c238041f26e86c8e3fa83028345999464e3e37d610ab7c15daaffb744a505a3dd9802b3721f29553ee23e1cf376f12cc3fe6b7ac76bd13da44356855be096155e355c9cad31fcdeedc6679c531bc1a2765dc8777108ec5e31d793005e718a9ced77d6505e44f649128a29f5264fecba132f9f5016eaf690751edd64d903b36ceb2b08042c60e9e97f8bc985476e6088a5ebd3743c2358171b30b16d730a5dd49c92fa19cc267e2c1927f200fc3d23a804f0a12b06a6a88a2685051ab28f1721209ada2c14b557a49423795b07040d510bb21ce5d15acedd18cb7cb7a93389ceb934206e4ffb220048a7a82fb3c251d0a31ba5af9eb0c16e29f33f9d0a78f5e6300cf04d17eb5f67711cafa0d4e99eeaf0f8fdbd34170318879a0d12c01891127ba7b677d204268524c5af1d7dc27176826302e34f9d35d2f2eefad5f22f68929d3456c11d5f00d4a8ce8b784bca8088805731eff2d47024c2da68abc2d2c0f7806d7d76cdf489f3bffa75cb826bc0809331d89a3255a498b8150d4ae31d03414ab244939455b6377c2917cb2d8a9f9ebf282657e417860e49ac94f4a838aefd34f28960a78da47933252d8cb2fdb27d413ee54502cd1bf75585468b77b8dca627cab29ef0a5297ee3dcb4c987520804e9a5f45e8241019281bab7e30f4b008bf0edf3b6fb5e8d1c2ab619b2eb84293d636a6a37d716cd8e102b7099676693cb7b01031b57ee93fd22cb18229893fd4d4ef87f1596879ac9f61b2f0c35be34cb6e6f75087ff963c188d43bcb464a95e956e75559eb1f6f2224fb2ca8f0bdc90ae5c2ce712498ee4026b13b8f3137000aa1545a75e5b48e80da30e6dac5529cac1099244e79ad542f45dcfbf16c62b5eb63daee8185c5e79ebfa1ca60880f9e2895f54ab95bbae38ae62200c1e439d73fa63d0bff75935a8ad2ae73b82132e8d4eb4bd55844b2f55c65d5ffa0c65aaf0cc5bc73925d05cf7c1c4383af074feb3a53919d2a3b5bef96115aab966821dbfc4577d19d85911a485c58a5b87cf44d230cfdc255486bb09d5c16f2164397f0fc5f652", 0x6c1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00009e3000)=""/230, 0xe6}], 0x6, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r5, 0x401, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffff8000, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x680, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84040}, 0x400819d) [ 510.039043][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:36:43 executing program 1 (fault-call:11 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0x7, @empty, 0x1}, @in6={0xa, 0x4e20, 0x6f, @local, 0x8}], 0x68) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000940)="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") connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x14}}, 0x2e) sendmmsg(r1, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="63036f2972661fc3330f31b90a1c2cb5abccf8f8d07dd270fda88435f2a1e5c7e3817fddcc0a6944", 0x100000}, {&(0x7f00000003c0)="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", 0x567}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0xfc54, 0x0, 0x0, 0x0, 0xfffffffffffffe1a}}], 0x3, 0x0) [ 510.230379][T17784] Unknown ioctl -2142735306 [ 510.259390][T17774] IPVS: ftp: loaded support on port[0] = 21 [ 510.266561][T17780] FAULT_INJECTION: forcing a failure. [ 510.266561][T17780] name failslab, interval 1, probability 0, space 0, times 0 [ 510.272381][T17780] CPU: 1 PID: 17780 Comm: syz-executor.1 Not tainted 5.4.0-rc8-syzkaller #0 [ 510.272381][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.272381][T17780] Call Trace: [ 510.272381][T17780] dump_stack+0x1c9/0x220 [ 510.272381][T17780] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 510.272381][T17780] should_fail+0xa3f/0xa50 [ 510.272381][T17780] __should_failslab+0x264/0x280 [ 510.272381][T17780] should_failslab+0x29/0x70 [ 510.272381][T17780] __kmalloc+0xae/0x410 [ 510.272381][T17780] ? __tty_buffer_request_room+0x446/0x8c0 [ 510.272381][T17780] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 510.272381][T17780] __tty_buffer_request_room+0x446/0x8c0 [ 510.272381][T17780] tty_insert_flip_string_fixed_flag+0x1d2/0x4c0 [ 510.272381][T17780] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 510.272381][T17780] pty_write+0x1a6/0x320 [ 510.272381][T17780] ? pty_cleanup+0x70/0x70 [ 510.272381][T17780] n_tty_write+0x1439/0x1cb0 [ 510.272381][T17780] ? wait_woken+0x310/0x310 [ 510.272381][T17780] tty_write+0xc10/0x1350 [ 510.272381][T17780] ? n_tty_read+0x3180/0x3180 [ 510.272381][T17780] ? redirected_tty_write+0x270/0x270 [ 510.272381][T17780] __vfs_write+0x1a9/0xcb0 [ 510.272381][T17780] ? rw_verify_area+0x3a5/0x5e0 [ 510.272381][T17780] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 510.272381][T17780] vfs_write+0x481/0x920 [ 510.272381][T17780] ksys_write+0x265/0x430 [ 510.272381][T17780] __se_sys_write+0x92/0xb0 [ 510.272381][T17780] __x64_sys_write+0x4a/0x70 [ 510.272381][T17780] do_syscall_64+0xb6/0x160 [ 510.272381][T17780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.272381][T17780] RIP: 0033:0x45a639 [ 510.272381][T17780] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 510.272381][T17780] RSP: 002b:00007f0d04c4cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.272381][T17780] RAX: ffffffffffffffda RBX: 00007f0d04c4cc90 RCX: 000000000045a639 [ 510.272381][T17780] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 510.272381][T17780] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 510.272381][T17780] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d04c4d6d4 [ 510.272381][T17780] R13: 00000000004cac1c R14: 00000000004e3048 R15: 0000000000000008 [ 510.541262][T17784] Unknown ioctl -2142735306 00:36:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) r2 = semget$private(0x0, 0x8, 0x0) r3 = semget$private(0x0, 0x4, 0x202) semop(r3, &(0x7f0000000180), 0x2aaaac46) semop(r2, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) semop(r2, &(0x7f0000000000)=[{0x0, 0x1f, 0x1000}, {}], 0x2) semctl$GETNCNT(r2, 0x4, 0xe, &(0x7f0000000140)=""/28) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x210000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2b, 0x1, 0x0, 0x0, {0x2, 0xe00000000000000}}, 0x10}}, 0xc000000) 00:36:43 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0xfffffd74) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r2, 0x9b) close(r0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="f4001100002b3a25fe8000000000000005baa68754baf7ffffffffffffff6c27e800004102000000", 0x28}], 0x1}, 0x0) 00:36:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:43 executing program 1 (fault-call:11 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:43 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000c060501ff0080ff06000000000000000c000100060000007d0a00010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:36:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/141) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000003000004d00"/21], &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 510.942909][T17808] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:36:44 executing program 0: r0 = socket$inet(0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="520000a1e652b3a5db0f00007c247fe4837ca2a01457b9cb393f3c00"/42, 0x2a) [ 511.546685][T17807] FAULT_INJECTION: forcing a failure. [ 511.546685][T17807] name failslab, interval 1, probability 0, space 0, times 0 [ 511.552373][T17807] CPU: 0 PID: 17807 Comm: syz-executor.1 Not tainted 5.4.0-rc8-syzkaller #0 [ 511.552373][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.552373][T17807] Call Trace: [ 511.552373][T17807] dump_stack+0x1c9/0x220 [ 511.552373][T17807] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 511.589965][T17807] should_fail+0xa3f/0xa50 [ 511.592580][T17807] __should_failslab+0x264/0x280 [ 511.592580][T17807] should_failslab+0x29/0x70 [ 511.592580][T17807] __kmalloc+0xae/0x410 [ 511.592580][T17807] ? __tty_buffer_request_room+0x446/0x8c0 [ 511.592580][T17807] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 511.592580][T17807] __tty_buffer_request_room+0x446/0x8c0 [ 511.592580][T17807] tty_insert_flip_string_fixed_flag+0x1d2/0x4c0 [ 511.592580][T17807] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 511.592580][T17807] pty_write+0x1a6/0x320 [ 511.592580][T17807] ? pty_cleanup+0x70/0x70 [ 511.592580][T17807] n_tty_write+0x1439/0x1cb0 [ 511.592580][T17807] ? wait_woken+0x310/0x310 [ 511.592580][T17807] tty_write+0xc10/0x1350 [ 511.592580][T17807] ? n_tty_read+0x3180/0x3180 [ 511.592580][T17807] ? redirected_tty_write+0x270/0x270 [ 511.592580][T17807] __vfs_write+0x1a9/0xcb0 [ 511.592580][T17807] ? rw_verify_area+0x3a5/0x5e0 [ 511.592580][T17807] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 511.592580][T17807] vfs_write+0x481/0x920 [ 511.592580][T17807] ksys_write+0x265/0x430 [ 511.592580][T17807] __se_sys_write+0x92/0xb0 [ 511.592580][T17807] __x64_sys_write+0x4a/0x70 [ 511.592580][T17807] do_syscall_64+0xb6/0x160 [ 511.592580][T17807] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.592580][T17807] RIP: 0033:0x45a639 [ 511.592580][T17807] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 511.592580][T17807] RSP: 002b:00007f0d04c4cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.592580][T17807] RAX: ffffffffffffffda RBX: 00007f0d04c4cc90 RCX: 000000000045a639 [ 511.592580][T17807] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 511.592580][T17807] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 511.592580][T17807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d04c4d6d4 [ 511.592580][T17807] R13: 00000000004cac1c R14: 00000000004e3048 R15: 0000000000000008 00:36:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000500)={0x3f}) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:36:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x4000, 0x0) ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000)) memfd_create(0x0, 0x0) 00:36:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 511.977915][T17820] input: syz0 as /devices/virtual/input/input23 00:36:45 executing program 1 (fault-call:11 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 512.146900][T17820] input: syz0 as /devices/virtual/input/input24 00:36:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000000000000000000ff", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) [ 512.262504][T17832] FAULT_INJECTION: forcing a failure. [ 512.262504][T17832] name failslab, interval 1, probability 0, space 0, times 0 [ 512.272372][T17832] CPU: 1 PID: 17832 Comm: syz-executor.1 Not tainted 5.4.0-rc8-syzkaller #0 [ 512.272372][T17832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.272372][T17832] Call Trace: [ 512.272372][T17832] dump_stack+0x1c9/0x220 [ 512.272372][T17832] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 512.272372][T17832] should_fail+0xa3f/0xa50 [ 512.272372][T17832] __should_failslab+0x264/0x280 [ 512.272372][T17832] should_failslab+0x29/0x70 [ 512.272372][T17832] __kmalloc+0xae/0x410 [ 512.272372][T17832] ? __tty_buffer_request_room+0x446/0x8c0 [ 512.272372][T17832] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 512.272372][T17832] __tty_buffer_request_room+0x446/0x8c0 [ 512.272372][T17832] tty_insert_flip_string_fixed_flag+0x1d2/0x4c0 [ 512.272372][T17832] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 512.272372][T17832] pty_write+0x1a6/0x320 [ 512.272372][T17832] ? pty_cleanup+0x70/0x70 [ 512.272372][T17832] n_tty_write+0x1439/0x1cb0 [ 512.272372][T17832] ? wait_woken+0x310/0x310 [ 512.272372][T17832] tty_write+0xc10/0x1350 [ 512.272372][T17832] ? n_tty_read+0x3180/0x3180 [ 512.272372][T17832] ? redirected_tty_write+0x270/0x270 [ 512.272372][T17832] __vfs_write+0x1a9/0xcb0 [ 512.272372][T17832] ? rw_verify_area+0x3a5/0x5e0 [ 512.272372][T17832] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 512.272372][T17832] vfs_write+0x481/0x920 [ 512.272372][T17832] ksys_write+0x265/0x430 [ 512.272372][T17832] __se_sys_write+0x92/0xb0 [ 512.272372][T17832] __x64_sys_write+0x4a/0x70 [ 512.272372][T17832] do_syscall_64+0xb6/0x160 [ 512.272372][T17832] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.272372][T17832] RIP: 0033:0x45a639 [ 512.272372][T17832] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 512.272372][T17832] RSP: 002b:00007f0d04c4cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.272372][T17832] RAX: ffffffffffffffda RBX: 00007f0d04c4cc90 RCX: 000000000045a639 [ 512.272372][T17832] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 512.272372][T17832] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 512.272372][T17832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d04c4d6d4 [ 512.272372][T17832] R13: 00000000004cac1c R14: 00000000004e3048 R15: 0000000000000008 [ 512.790787][T17836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.812526][T17836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.921722][T17836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.942228][T17836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.029308][T17836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 00:36:46 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)={0x5, 0xfff}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\xff\xff', @ifru_flags}) 00:36:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x49a0, 0x8000) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r10, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', r10}) r11 = syz_open_pts(r3, 0x4000000000000002) r12 = dup3(r11, r0, 0x0) ioctl$TCXONC(r12, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r12, 0x540a, 0x1) [ 513.503227][T17835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 513.516902][T17835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.604397][T17835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.614625][T17835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.684834][T17835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 00:36:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) fsync(r0) read$FUSE(r2, &(0x7f0000000880), 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc66) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x6080, 0x0) write$vhci(r4, &(0x7f0000000440)=@HCI_EVENT_PKT={0x4, "51ab696f49c8eba1964d26b9019224af5e98183dd744ca50605de0486cb2bd759153baa9346d957b4c9cf4707a1ecd17352ca2063a0f7c54fc6aceb889f4da824d2a83ba281036cce9cf83638690e772b7a6c8caba1728bcc98ec2012fe4dcc45e101a189d8d02100588974da54082f2da7ed5908b1585fe7606d6da09c48daa8dc3c544597f962fd46989e973cb790f91690d884368e05948b1d86d820df9135ec0fabaf78d20ad8bc783f5b46d00ead663780cad6858f0e8d87e54be54a1e67d7c964ffc5dd859de252ac30fffad098484d36314064e2f0ff2e8e1055de168e5bf9fb8588541b5"}, 0xe9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000200)="0f22270f606ca7baf80cf30fe6b1020066efbafc0c66ed43ed66b91e0100000f320f20d80f22d8aeb800008ed83abc1fbc1f81d90c0066f2ba5f57160fc766b9bc0208000f32", 0x46}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) r7 = accept4$inet(r6, 0x0, &(0x7f0000000040), 0x80800) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @rand_addr=0x8}, {0x6, @broadcast}, 0x28, {0x2, 0x4e23, @multicast2}, 'team0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:36:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(r0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "be0d14a13ddbd48d68a5eafb2792d755b7f083657d120b51143a8da2c34e8768"}, @IFLA_GROUP={0x8, 0x1b, 0x182}]}, 0x4c}}, 0x0) 00:36:47 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000001440)=@pptp, 0x80, &(0x7f0000001780)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002740)}}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x40000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x20000000, 0x8, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/xfrm_stat\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0) io_uring_setup(0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) 00:36:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6668c103bb96faeff90baff356fd280747980002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) syncfs(r4) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0x58}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x0, "82afac0ff5a3abae8497d99afa6bc92a8e64fbd309b524bcdbad611ad0e5d13f", 0x2, 0x1}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:36:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) r8 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) ioctl$TCXONC(r8, 0x540a, 0x1) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20902, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x401, 0x800, 0x10001, 0x8, 0x1, 0x9, 0x4, 0x8, 0xc82b, 0x9, 0x1000, 0x7}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000240)={0x2625, 0x5e40, 0x1, 0x6, 0x1}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x20, 0x4, 0x8, "57d58b1f262517b749eace507bee494c", "fe5f7a6bc92f8f53d10db3"}, 0x20, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x7, 0xdf}]}, 0xc, 0x4) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708000000000000000100000000000000000f0006ac0f0002ac0f000000"], 0x1}}, 0x0) 00:36:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x0, 0x6406fe35, 0x0, 0x8, 0x3, 0x10000008, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x400420, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0xe2b63a3979fb8864) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0x5}}, 0x20) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x8400, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000280)={0x1, 0x4}) io_setup(0x4, &(0x7f00000004c0)=0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x9200, 0x0) close(r4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x30d801, 0x0) close(r6) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x30d801, 0x0) close(r8) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x6ad301, 0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 00:36:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000140)={0xba6a, 0x7, 0x4, 0x1000000, {r5, r6/1000+10000}, {0x5, 0xc, 0xfb, 0x78, 0x81, 0x6, "7550b343"}, 0x8, 0x3, @offset=0x80000001, 0x4}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) 00:36:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r6 = dup3(r4, r5, 0xc7fecfe3117f3427) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:36:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x101203) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x8) dup3(r2, r3, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB="953dc4f0dac72008b063d68f00b2a6f0c0166b60eae81d718d80eaa6aae18b35cf6305c4ecc76f4598b5363c075a4e9eb24921b740b01cd7436ca7c62330dfe7a5aa3140517896d0468414167e448bf3de1f9dcaf463399105bee726de99b9bf0fff1df2ef3d0bc38db514bec8150b9bd6f18d93985f44ae9e3d3db6e580cadd2c6291e67f9eff709bd48f3daf86e61c973d03048e5aac9f18a1a89ab3e19243360cffc85ea3cca4e60ed808a99967960b820fc2264b95c8ff6049acaf8fcd44c9a288dd868da1af506e24"], 0x8) dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) open(0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0x0, 0x0) lstat(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() r9 = getegid() setfsgid(r9) r10 = getegid() setfsgid(r10) setgid(r10) getgroups(0x2, &(0x7f0000000040)=[r8, 0xffffffffffffffff]) keyctl$chown(0x4, r6, r7, r11) r12 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) ftruncate(r12, 0x200004) sendfile(r0, r12, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 00:36:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_delroute={0x24, 0x19, 0x4, 0x70bd27, 0x25dfdbff, {0xa, 0x20, 0x8c, 0x20, 0xfd, 0x4, 0xfe, 0x6, 0x2000}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x900d0}, 0x4002004) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:48 executing program 0: syz_emit_ethernet(0x8a, &(0x7f0000000300)={@local, @random="192bce5e2ffb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[@fragment={0x0, 0x0, 0x0, 0x1}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, @dstopts={0x0, 0x4, [], [@calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x9c0, 0x0) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="f14fa5f7e30505ed93b3c81108a559650fd7a4c5f008d8217529a067543d921568bdc7c8a4da1638b895322d20192f592aa7935851e3a20a7228c6b9c553d0dce4dff89c99649032e55de83495434e7aa3c94b9cba3e7d248c9a6080a1b363f03d110b882992946075c6455010db57d2458041ffda3e0cdac45598011c25426cfa8bf895652c98197ead75587bd37bf0306e65d8ab622391ce4098c2e44c8dcfdb39f038e5a3a072fc493fae99b16fcb70b6a1c17f8a244ec8d2d4cb73da0bcb3e7c739ef8444c8a301df405a20617a7b2a481bdf205facc43b4cd66c3f2", 0xde}, {&(0x7f0000000140)="07156ba2bc7402ae874735cfe28644ea80b51dd6cb8f02564c7e43f167a0ea0038107d3e9b9bd8ca7fc2a944aec0b5c04ae9db47f6f1efab45c8ded88138b59ca1e9d956191e73f8f9a426", 0x4b}, {&(0x7f00000001c0)="c54200564296dd1dbba31a83624dda65a0ea8455b1ea5d5d762c352b106f66d18e194a47395aaccac1cb6ff230d9ccf0f7039120477303f752da3857e2a2a73fa95d4aecc301d93b4ff28e1119f3e2d2b10b27bafa0784d110f96e2504819991d9471e9a99775504e79e5e64a4282a9fff2faaaa9ad6f811b5d03e6287464261349ebf0548311be2a2a49bcc2dc98b56e050c68beeae51fec27d218fd12779f296c1abdaf07adcba423ed9ec640c9f6fd3a2ecdbd37820e9313df1f70c833585f7", 0xc1}, {&(0x7f00000003c0)="e08702e5560cd0e3da50b898491c3626b7e847c52dc2b063df1e36df6e24a8845432a85550f5cb2e010b471c813ebc4c1ca06afaa7f820967c2165125e15356b7f03ba6fdb349e4ed19211fbfec139f26d09807257c5a394927324813815c5bc83031b00f9d4881869197944c3ddbf412a3f5f9a5d749480fbd5323200cea857114f4b256c7b7b9fac2035bca8662412919e1811f3e425bb3133233cfc599f7f0cdeaa8f4438bf27eb57527576b940ba34fd0888ea448792fae777a443c87b4764d9541c9e4f30bf043baa329f45a9472edbc67c58", 0xd5}, {&(0x7f00000004c0)="dd09215e9b6092c5662cba2bc2181523abf66ae5ed22ba40401c13f639f0b4326737888fa04207c586369cb1b872d5b4dc59110560303783bb842774e29f4b7f7d8bbf8408ffbdf8a6410d958d00967bd6ba29021deb97477d997e33866eead1d10722eece25bf7a3e219b363e5bc6875a6eddd15d652aa00e3c77bd1d637bd41db31856e67f7656c8399882c8a344e786f9140e81712642fb1f9ef4ca7997315c18d92e050dc69a8921304e45a23d72597c0ee8cea1b881ad2b6ebe1d661fa2c3f8e2fafea9bc66a86fbbd3b50d6787090b98c32680ae50696a3b21bb7a64cf965129e08fc0007a15e0c7c9", 0xec}, {&(0x7f00000002c0)="b76bc7d86ea8d4e9c2ba68d0a6f7d6a61361ab7b538fe9326d490716156fe67903dfc0dbd26ac21b8dcdeafdcb25313d19a44487442d0b", 0x37}, {&(0x7f00000005c0)="9621fa949755585a91d787bf4aeca29c7e485182f7d45dfa1fba46a31f3680b4d667c9197d6c794909e19fd5ce8baca6f740d013ae8f67a350adc0c4c8c688c15954c171605b4edd7177f690bb0193f25f0bcc742f53d30b8ff3d418a83a0b281021cec9ee475524d64b61721da62d3f10fec64578062405bdd983322af57b74a374efe996a8983ca3355b6dc15ae33bf31bd8476639b993bf8e6cfd040d3884689a49f3bcb4f134d4f4e0bc389b2a6f29e1139958a2fa", 0xb7}], 0x7, 0x8001) 00:36:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x7, "91da2d347f883de9c8aa5d8d0de7e58106f0135e2e6e0110a50a8d33839cea3f", 0x3, 0x400, 0x40, 0x8001, 0x1, 0x2, 0x200, 0x1}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r3, 0x4000000000000002) r7 = dup3(r6, r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r7, 0x540a, 0x1) 00:36:49 executing program 0: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000005dc0)='(', 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r4 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/dev/dsp#\x00', 0x0) keyctl$negate(0xd, r4, 0x15, 0xffffffffffffffff) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000001380)={0x10, 0x9, {0xff, 0xffff, 0x6, {0x5}, {0x8, 0x5}, @period={0x0, 0x101, 0x0, 0xa3f, 0x6, {0x8e, 0x0, 0x2, 0x400}, 0x8, &(0x7f0000000180)=[0x1, 0x101, 0x9, 0x400, 0x4, 0x0, 0x9, 0x2]}}, {0x54, 0x401, 0x1, {0xfff, 0x5}, {0x6, 0x6}, @period={0x5b, 0x7, 0x7f, 0x3f, 0x7f, {0x7, 0x40, 0x1eff, 0x1c8}, 0x3, &(0x7f0000001300)=[0x6, 0x6, 0x7]}}}) write$vnet(r1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001340)={0x710e, 0x2, 0x3, 0x9}) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000003540)='/proc/capi/capi20ncci\x00', 0x501800, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) io_submit(0x0, 0x3, &(0x7f00000037c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7a647d367a88259e, 0x401, 0xffffffffffffffff, &(0x7f00000001c0)="2f30d89b563112ee8a71aa5a63037a82903fde4998cdd540a1b9220d817e0385884a041f71decbe9f1c7775564cf9a0eeff9c9d08b59bc9fa71e69917ba6d03af53979abf2e53426688afcb9cc42a611dd57ad47ab1265b7d5b18095c852e3222f68560a2496a38378ccb26288952cc5b3fe4b9f5f324abe7852dbf31c54287bb3fc9c75cfa03188f8f08e2c90de9cbc32bf658aa4", 0x95, 0x1, 0x0, 0x0, r1}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x3, 0x0, r5, &(0x7f0000003580)="a9d651c48bb669815fd64c65ab8c32a09499d3567c99b8b90e36ab583263a6292b4949398f505c34552989c9adfdc58621f8d20ba502496bd5ddef0eaaa645274f47f48b51ab3e25c44048f86bfc7325844a28de37a21af3b90e6bb6382557fa1aba7b78dcc57d6037bdb19b3685e7943c5922e18648db78d621c872", 0x7c, 0x25, 0x0, 0x1}, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000003640), 0x0, 0x9}]) 00:36:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x48080, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000180)=0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r4 = fcntl$getown(r3, 0x9) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3ea, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x21149}, [@IFLA_NET_NS_PID={0x0, 0x13, r4}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10008}}}}}]}, 0x50}}, 0x0) 00:36:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f666cc1b3bb96faef000baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x264601, 0x0) sendmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="c948e6dfca6d440185e9d6bc06285fec8cdf9c548e03be056bb6542d401da7a212d760a6742db39e78e9b9876103dc604eedf6b5480b04187c2c7d26cdb7e21fde52e4bc7ca12d427842a5334d", 0x4d}], 0x1, &(0x7f0000000200)=[{0x80, 0x109, 0x0, "c66cab09ca5556d176d3f5fa9b945fcadbfa7385340fd9b9429bfe572eaac21c36c5e7394a0da974212ac6ba0fc6277d6c7b0d32517d9208ee889991a072241cc632b4dc878d6ec1ff0014240d52f528edbaba58a956fbdc741216e476ed8b74e8117625e367685ffa599852ae58da60"}, {0x80, 0x105, 0x9, "4568b6add2496d196afa2ab1afef39ae4abb4ba206fe358683b79309fb3e54d47a1abe409cdd31268e33b25a7a912dee7657466dd562a6a01bfd17218be6861a1422b3d6132aaf297efa622e4331ae5a353183bb03016e8b54550551749b3e74e7cdec7d5d86fe5ac5"}, {0xe0, 0x3bf, 0xffffff00, "2895837f65523b6d6c094308b36137119b411aeb579eb2ad286def82cad774e7158847f318d74605cdad270530641744f77b9f44cce3d4ddddf6bc2e0cfbc4c126d9f0b6e2684e17e8753a6eb550a2697771b19c0eb169a9017b7d89f08d7f2655d3f92ed11b15e780b75c19fa6cc77125fb05db7da2a27d7fd7e395549c9d2dc2089b62333c388299202b501b9d039ba2e20460fcda891433c54cc8a3f377d3ec41fcd51b1f25009fa8ccd303614902a9e2904428a2c3bafcbcd17cc2dd116c6aae5346649301d5f0cd95"}, {0x1010, 0x84, 0x1, "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"}, {0x40, 0x105, 0x1, "32a284c8d90a00baeb25d55bb257600e8d390e1206f905ab4b737ef3f9b9d0c1f87ab1061c3af78f992f73"}], 0x1230}, 0x70000841) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x10, 0x0, 0x800000, 0x0, [@sadb_address={0x1fffffffffffff1c, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x0, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}]}, 0x80}}, 0x0) 00:36:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000000c0)={0x0, r6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) r9 = dup3(r8, r0, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r9, 0x540a, 0x1) 00:36:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1fc0000000}, 0x10) shutdown(r0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x2}, {0x3, 0x0, 0x0, 0x1}}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) 00:36:50 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = getpid() ptrace$setregset(0x4205, r2, 0x4, &(0x7f0000000000)={&(0x7f0000000200)="56374ffcd1ef54bafae41b593ee92aa4d7f093dc3b86e4775f34628c26fe4b9f7ffd23ec084c118a82c7d84104b09d1d96304b0d71d3a48e2f1ff3eabebaaa3f0080e45caec2f9236ad2e6303b7079f477ee1f0b9c5186b72dcede0ad3977faaf3033ad6c667d7c737ecfdf791b51bf47beeb1f39538e9fb823ee18995ddcaa82f35cb3a35b5e31e76b5df52a2e77a4c242688145805cb73291bd942a43384cf35827d8868821d2f5cc8d18272e1dfac44180fa998f08eb945038951806df1b82aca2491728fc7c52b7ad3ee3b", 0xcd}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000140)=""/185) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) 00:36:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000100)=0x3f000) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff35601000000985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:50 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0xefe0, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x77359400}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r4 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) dup2(r4, r0) [ 517.305602][T17945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.318926][T17945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.376786][T17945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.390753][T17945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.423005][T17945] device bridge_slave_0 left promiscuous mode [ 517.432948][T17945] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.968279][T17945] device bridge_slave_1 left promiscuous mode [ 517.975175][T17945] bridge0: port 2(bridge_slave_1) entered disabled state 00:36:51 executing program 3: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_netfilter(r2, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000001010000000000ffffffff0200000010000100050002000000000000000000"], 0x24}}, 0x0) [ 518.114561][T17945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.125421][T17945] bond0: (slave bond_slave_0): Releasing backup interface [ 518.245318][T17945] bond0: (slave bond_slave_1): Releasing backup interface [ 518.532912][T17945] team0: Port device team_slave_0 removed [ 518.743774][T17945] team0: Port device team_slave_1 removed 00:36:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d606429d2dab06f2d03b34c4cd31282dfda37807258ee9902fa91edfb62ad5eb2e4000007231685c4d1dc8facbdc92d0b63e4a008dbe8567cc831e09730f50dfbc9ed05ebe93f8b0e48292a5f2f682cada87339bcbf4f8e9742d3b9101cedfbd693b718fe83548c7f91abafcd99a21fe0eb0e9588f2a1e3fba41c2f1bd978dc001ebacfeda3f96e8726b120ff45842af7e930095fd276ee06bda6dca5a9467686e81b1615d41f8fd1e5a3315724f430fa56714d1941004a36cdbff76ecbce9d3840942c6bab365a99b940ba0000000000"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:51 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0xff) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = open(&(0x7f00000002c0)='./file0\x00', 0xa4d002a46b3b20f, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000340)) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0) statx(r4, &(0x7f0000000000)='./file0\x00', 0xab29b6cda0f3c8dc, 0xfff, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x80000000004) write(r5, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1, 0x700, 0xff, {0x77359400}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x4, 0x1, 0x0, 0x1}, 0x3, 0xf7280529e2a91b3, 0x0, 0x0, "2e5f9f1d3395a094"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000441}, 0x400e1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$TIOCSTI(r7, 0x5412, 0x101) 00:36:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x0, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:52 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x99}}) sync_file_range(r1, 0xa, 0x7, 0xc) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="f3", 0x1}, {&(0x7f00000005c0)='5', 0x1}, {0x0, 0xfffffe8d}, {&(0x7f0000000300)="9e", 0x1}], 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x0, 0x10001}, 0xc) 00:36:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) readlinkat(r6, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/5, 0x5) r7 = dup3(r4, r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) time(&(0x7f00000000c0)) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r7, 0x540a, 0x1) 00:36:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r3, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8ec0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xffff) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r12, 0x0) r13 = geteuid() r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r15, 0x0) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r17, 0x0) r18 = getegid() setfsgid(r18) r19 = getegid() setfsgid(r19) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getegid() setfsgid(r21) r22 = getegid() setfsgid(r22) r23 = getegid() setfsgid(r23) r24 = getegid() setfsgid(r24) r25 = getegid() setfsgid(r25) r26 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x7, r3}, {0x2, 0x6, r7}, {0x2, 0x1, r8}, {0x2, 0x2, r10}, {0x2, 0x1, r12}, {0x2, 0x0, r13}, {0x2, 0x6, r15}, {0x2, 0x2994ef65a4f6d561, r17}], {0x4, 0x3}, [{0x8, 0x1, r18}, {0x8, 0x1, r19}, {0x8, 0x2, r20}, {0x8, 0x4, r21}, {0x8, 0x6, r22}, {0x8, 0x4, r23}, {0x8, 0xa, r24}, {0x8, 0xa, r25}, {0x8, 0x1, r26}], {0x10, 0x4}, {0x20, 0x6}}, 0xac, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = fcntl$dupfd(r28, 0x0, r27) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "9031c2a4cdb9795b06f9d144aefdc4ebf1addb49fb9e2cfaaa638e393363ef0300000000000000d02e236d21bd56c63a54cc7bfd4ad9911e2f2b6f447da7afba", "ca7b43cfe50bd0b94a4956448cd4144cb88abeba5809000000000000000001f62408fdffc7ef0679fedf29d18a570000001000", "81c7d401e1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 00:36:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpgrp(r4) sched_getaffinity(r5, 0x8, &(0x7f0000000040)) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e23, 0x80000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xed}, 0xa, 0x0, 0x0, &(0x7f00000016c0)=[@dstopts_2292={{0xffffffffffffffaf, 0x29, 0x3}}], 0x18}, 0x8044800) 00:36:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x9, 0x9879}, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7, 0x40000) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)={0x7ff, 0x6b5a870b6c17557a, 0x4, 0x80000, {0x0, 0x7530}, {0x2, 0x8, 0x3, 0x40, 0x0, 0x6, "e7733302"}, 0x8, 0x1, @fd=r3, 0x4}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000100)={0xff, "5622e89aad64e6379b2f653d4eb4355cc982f176a19d93c207cbec6becab648e", 0xb20, 0x4, 0x80000001, 0x8, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000180)={0x2, 0x1000, 0x6}, 0xc) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r7, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}}, 0x2c}}, 0x0) [ 519.506084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 519.512264][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 519.518568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 519.524764][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 519.531024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 519.537280][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 519.543664][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 519.549713][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 519.556054][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 519.562143][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:36:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffff9015}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x40, 0x0, 0x8001, 0x0, 0xfb, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f6669c1b3107a93a025663362723c9cbb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000240)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x90, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x5000, 0x1000, &(0x7f000000c000/0x1000)=nil}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) getitimer(0x2, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0xfffffffffffffff7, 0x0, 0xfffffffffffffff9, 0x0, 0x3, 0x3, 0x1b, 0x78921b42, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x3000, 0x6e06d7e5f5224467}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}]}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x10001, 0x1, 0x1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:36:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$char_usb(0xc, 0xb4, 0xc6b) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0100fa100013070000000000000000ac1414aa000000000000000000000000006400"/65, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000900000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080010000"], 0x13c}}, 0x0) 00:36:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x0, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 519.894657][T17998] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 519.928071][T17998] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 00:36:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000480)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000001540)="18b5c619e73307e456a2cc9bd5faae5fcacc5d285d5677eef7a37e63c016e9266aae6db8123a295c8ffa7420e0e7c803174b4afdc0a6a5d59aa688c12970fe51a8e3c80455fd60d867b6d8263e1bca0aab0c8258c245b0b565ddcfb5b57774f6cbce44657da78440267cec56fad02229be228096ae01c98babe0e5256d2f13fbb9c50024978f4cae5ef128d4909ef42ca3179407829c947990aa6d9270d56b777bf1d41fc09b3ddbb163d6b63827aa4d95eba022b8bd210ddafff233b6457de954f2b0db68a5ae8336e42ecc34a8eee9a38892c338348a2981fbb900bc3ff720e42d6a2a4c2ba35dbff47e03ec052f09e3636cbe17b7b0b174f7f4e77021a0fd034e0b1f53bb27a0140a77910d0844afdaf9b925e0872d8e6dfe85ece19f00cb4fa36f7513f1ac96fa641f64f13262683fd20983daf61cbe66b506fb7541f0cf03efea1b00096f9d87e4d4df9536a43fae2dd06a128922ac3e3a91ca43c486c1296d1fd6214f2a1070e47446584daa3ed6e86a2839240f8ab61059933859e3c27b9532acfdbd4edec2a36e38a579e520deeeda6aa562e9b3b601a63608704df4011190a8e986d5e847a1617d9e0d737e4309500642d2b6eff2d61351d0dc4960007a0dc34676ad47103835d0e9bd4989897023f32191e0455f98b294b3a34fefd91d8cc04240f83a33da0ea122be4a4c67baff2fb2765daad5b6cb592db830bf8fe59393ad269bf45b16ca9d58232f3222535727724d7d1d61e8f37fba48662bfd637d3b5f71e6a3f376e45aab9dbfe571c168cc0972674933506df53b84d75dceeffc6099ed03299dae3fd6d3eaa9f5fd6d39e32d11c39f8d5fa1e5827cb4bdf57547b89d1a6e794e0bd566c5f223508e87957d2d983e22b4ef47345c417314ed44a17c6363809e842a303a7b005cfa0ec593f353a293e9854a6497a8a4ca8d04a6f32f67063a516a8e28e452d37af901846952ee993b3ac6165716f513033f4d886fceadc613dc6bdf2c0d22f30508828110bbc410025928f55ea2fffdb9034f8a94ba826d3f3f37886c4233a7cff2076d240e5cd7b989e5a16c7e768e35c53e3bdac0caf0520e0dab6c0481d705c5ab30074b50cf3476f34d4a81e3d50d8424d22fc0cd21d0b30290b52728a8310ab39027b670e99b689fac76a19aa3bda412dbebb5f7add0273eb25459fa6a8dbbc13bae1317499e78209295b0f774e7ac44098d8c9f55b1d7a905f1aeeec62b8fb6ae9b273fcba8db77d4f8b605c5bd73f4fdfda96eda2e3986d4533867bfaab2e7f6c77b738021e6538b25a57b6bcf60eaf9e193fcc23f1acd5a2af9ce4de479bbd41105b98ab2798bfb596ca9d894a466205b8ba219aaac1e3a5db0639f52da28b8b1a9f2bd51c9ecc572656605b6809eb52d0d7813efc4fc962d041be41d97f229f4391c6b21f541ddbe75b3819cd10397150d9432bf012a461e0b8bea0c78ce8e421d9381df44e520fd3de0ca370640b8f34ec2fe1644ae281d343e2d5f97f447c55051ad66304bb42568cb77970a2740506af66924cf42ad4e985fe4f0255f110b9e2c5557a5dd090c81112b2a1ca054ce5b3ab33ef98eeb2fedd426a609009c30ffda1c7213c09d84abf755f229f234eafa99266f9c515c2fa453c5aa2f345dc9071cd6246289f3c98ebc3e1c79a2e356606876a9be959361f98f2461cdcd23dd0fa5bf61cd796e40ac76830ad9ee028caf202703018461621e5ecd29232bfb9e8823e03b5f9b666fbaf1d7b43f1ec935140c725bd5f41dffee66c300c44631a880af0cfc750f602ed6a8e672223ee6585c3f56bd8b8469c211482d7a9d556de904a7cf6d8618825d141e8f2a5a013d5df0e3a65d4b24122e1f30e6d3ba885074b85fc4573f390ccb1c31f730ae21880247be91ec9eb8b8f758109a6a9f784c4ead41b0f20a70af2cc52694a92e613ad2d58e7e6465504a0e8d5917f1d64da89f1f2a6e293146d96c12c3e1abcadb2f5cfe21abcf74a375c5ad53285fa6ba1aea5be4348e0e48c7fdc947116abd0b1f12c1b4ecfd6214dd4dc4f94afaddb550f76eaa07eec9502a44596d76d1a6d75ab07c6456970bd26a1d2e73a112c0888929cc7bc8027ad67c1768e41b401d2129a40d625219c233ef9ed6799c8a9c35e645a8942d59ae611ac37a5a3623eabe27c5a543ef26c9cf395afc238c5f2df64fec12e6f2d04887ded66be9ddd2e0beb0f88c1d517b8cc07532c1b370695212b2e64fad35704a1096779425e7667170b55eedcb4e8953d56710e7014f8e23d716c21fb3df872e7c772daadaad6b6d368d5ae3e001b11d518fbbb8af330d77bda35765576ec349854e88ef58901e318f40f6621d41b2d85a640eaa4022789f12a180aeab88db1b28c8de9024eb3386e60a84e1c40804d1bc97605dad3836cacf16bd3e160b91db6c215f5fef23679b3184ac3221e8007db4801718801480d142075a8b98d66957a85715158365cb04f57384c2f3eb6454d705206b2e8f4a747beb30c1e386b4a3b5fd7e5b1595162c808b46ae1f3decee42c213529fbb04f10e9b376a65a4bca0380fe6d07f2e664e3083ff0c39eaf354aae9fc34381200fedc5c381c6c58b117f2302f249868af881c47c7f3c2080b64680f85de5826abada318360df9c8c399b4043eb9ce7371cc0930720276716b0c973e8876d8544ac1da209201b34d87c99faea3d947d98e0eb51a943b0cb5b9e75bb46eb8d52b4ba68103f855277581ece426813fa271d0992815e93f40982694d41f21ee2a8e8aabd335b8c592b7137480e95c87f256679804a1ec4cbd7a71e2257aaeb876e0f9b443d1a3d6a04b1a47572193dbf92bdf5c019e057c36684a0dcc6d05693ee20b851edfce68f781faad1cd5cf687d984c55948dace5ade1e8c98103c177a50f73cb7d77faf0b50e073d19871c81c97062db4cbf189bc1fdb08f0b563d597291eeeed859507bd53c65cad1c251e15079302227816a9b6e861ae4069106a8c02204e56e61ef5b201cb76c7f2b8adf147b116ad568be79fc209293d20f0162452da1681cf54259f546baf2ea6daa7253aa350871d3acaf532eda473fd16f574ab12ca0c19c6a42707d00ca7ed349939f3c9dbb5cdff1c4a4b1c95754f50e828f3094a8b0eb349d1fc7c6a20c01cafb9b96fcc0392d1898c643d464033ba10cbbffce243c5c0743ba81c4f630ad690749941289f43a34c118532375ab65cbd3fd72cbf2fd824db104128373d6aafd2a557169f290a2c19371fb52b6457c327ca1b4631b6c52ccc3f13ebc54eae062b09b0caaa54f29aa1bd8b68bbcbd319f9c964942a4e2a64ab1712b5458e7216bc1be3d96e3625c1c43663a913ccff22d7f709aeeac0d58424d22232ad0e284ed1b3ed74f8471b5100e990c0afa2e927e2a9b186c1f060cd3231eb9c1caa2b8e08190ac7cd1ec1c027c43e89a64dbe7a2e28554a81165aaef19080446cd776ef507bffa3948e7888f2c4a7be168da03b1a1b94be940d492edea8c684a7e5b92aedcf601fd9dd922edaa0e8ad45ee19578a250e657d7e1cb2fcbe64d0d7412a715e8e5490e843fd09813f874681fab9f663f32953a938ced905b369940089b2ca56d44ce0cf307e7c18d4a2ba65792f79928b8df1d3c274868534a8570d39fa10425d3084c67bd589f893e6221e2cf9999d99195c0ee77f3004b67f3fde3dd510c99c875a64343e8238019bc3821c6ec8aa9a3cac3b5c330c514c560e8ad129e5aab18bcf08239b93def2f0aedabd4a3fc922bb2a2ccfc6ba5c61da14924814b14479bfdf3b9de1ea79420cf48cc20e01253137f9b542b3c97d7b8a8b36c262cc8f25cb576d093cf465ea023e94c5f7e17b62ac4dfa8aad7e4b04802e8609465e2c61dcbb6bea8920cea0b1ffb1c8d5df4f40a976a1a931c7ce2f0c87cbecc8b07cb4c85efc9aa8d7b82fac1954c4682fe609912e9d020a9130890f83fe7f3f432067ccf5097737db2340c00f094feaaae359ed976bcde3b84e05411ceb3595df335beb5a057693fe12f971ee9740f41adbf24a12d88c4c49b5a0a0259528f39a0e26ea31eb528abb5199e8b68a848a925090c9368a3c5909a27929d2f0eccc416df1b0dbc535785c4371017162d2a451bfc5f7bd85cd5067d2e2eeb5fd78c3654979fd657f2f5a6877e7ca95d075521e7ab91dda1d65f28d019bf752730ed8ba1d090a962fdb14780fd1149e5825e54ac388d4a618328d51d6881caf4ccd14c9a568e7949505dbbe67ebc53fc17f3128f7ede8aeabccb7bb62ba3cde99ed56ede84a0866956369598c0cb8a2d58a56f6e8c20f59754749aa68487408e0dbb3c8abe5ad35ad158b0d55d84726119eba595ec526610252961683f9d577e4c26ac87a5369c7750dfcce5936b286faf48d2ff441b158c8123980ac87da492fc1b2529930833266c595cd794ce732204f1f679d377a937aba2b907ecb2df9404d4ed176ad818866f8a871de45339f5c20666eccfbf3849e39cc0d90ebc81ebb6ce2e6aef04ace395b57490bb9050cd2e712510e62c60c4cfe6f5f1ee71798c3b5961bab0203721e5bf83a9e9d6f897ee1c7835459b545e262e765c455df9f7f721b9ffc4f57ecd9b3d65c54c736e76c86fcddfc508314646bb0381031f06777e6208592b7bd243c9db7310d6faec990a7ee7c1f1033bdb9493cd6d51697ef653846d62ca4297c52a24baf846a7718dee8bd2f3b4823a7b05a83d601e606cd3f57ece6bb2b70825b8b7364c745e99730ca91ba1923ca1b60a6c5baed65be8e73c3b509d4bc90ade370f9e1b058a12f1d97e1985c3a5f10347156c65678c0d5b16f824fcf5a3c840ab2854ee14eca37392ae8323b5434fd565ab0f6872f621ec4f1ffa9baa846090b3227eef702ca6f5faf77ced8e903135a75950ce9bbee9a25d6711087e894a15ed7b9b0e907ad922d4e47e6bc64389dbe77659aa3b87060764b23358505257a7b6acf2ae6c5c7426213c3db55f3fcddba2a2bb93f438d24602fec4657e9c60243bed4282fdac7c0dcd9f4ab3eb091da8a3f2ab8dd04c221c87961fb8529b66388cdc13cb7e9b4e0155a830a6ef15a41bed00412279119b3d5e3a2628812ecc8bd9c08fbb1d725d84c6070e4c493ca2c4f0346d61ef414737497a879f4118a5f8eca0051b7a6188408caba9dcbe41615f52d1b522a345191fac1508d8e09700c35cf7ebcaeadaee2746bb8d104f5cb3ed6a0d91938b6b6af09a3f36285952bb9fb43191a2d39b66d134211f3eb6bf11e2b34c2d476c15bfa211202110f6c1b79d8e0431e59d0ee1ed9454e1e58028c1f5b8a78388c16f0edef6c2fbe943dfcaf8666e943efd747cc80eca9f0317899c3a447785006bed482bf550a62cb90b22639017327724440501b7280faa91df60300a31df31f47738b8672e5afad4232a0267269b9463c8e41039ffcb6553a6f98d6703385829789246230ea7f59b6ee2405852c68e95e88763ad2c19eb31b2741346dc4193da24e9dbe6cf6139c71b7f6b9f6345445cdcdb51b5313b79a37df43a8bba0d5685f958dcc5fa0d741f55068b830cc9fcca14d307ab7e08bd5a1a13056b99580a2b56ade3a6142640c757816ca5a05906f124df779ab5e0c865fb08c50c10e067febb83a20c84bf6b08c19e48f1526833d17f0698212ba5e5b6e8c5feb3fb699972ab6af7e5b851d68848686c1e0d95977465e3a18c7ae5b12c93b42fa475d607341f61cbe8086649877819505dc266f62d12e34323713e35bdeb40c9bde1e6ce350ee76369c9308e34dcf44eab", 0x1000}, {&(0x7f0000000180)="acce990d9ce59a203d5dfe1178c1d0d71c69d048c36d581bb7ab4eb03959b2a5b59e9eb48360c30734694984e214e6bac6682f8a627191988792d6b000895f3f3f5732b67b30824c42e5c4225e4af015917ef962e8d5ea8d1409b680169f868cf2d3fbad84f6a0fd89c470f38cc52f43", 0x70}, {&(0x7f0000000200)="3241d1a789ec27a5ecc5fb55767c88db74eab461707c6a1c72a113024848395b29f1225522e10bf3f566112c5ac887fc104eb6617dac6a20f119a7750b78ea9fb3ae2a03857db6ab21f59fc6537360d2b0", 0x51}, {&(0x7f0000002540)="a0323b36d279b0a12003df557de0c3a33f03e73269603517aaa39af096ec07471d09995acc9d8b0ad30cedb5f463458234f77488cfceeec683dc17fb7bb74aaeb0b6f5d2adf52e2e01e0baac90d098cede00075664800dffce4b9832de1362706fa554e59227be591d93fec99405298d7d1356ccda9b158b0bffcc69e7b2721c2377e8c2e1e1e0bb53b6780f99e5d52a57706de72c48f9df54de758f3362b33a3e330e971d844ff7af04841a1ebb2ceb3b6c6b04c9465254c52c95c9ff5e5bbdd93c603aecc9078e", 0xc8}], 0x4}, 0xe3a9e1439c796435) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x100, 0x404084) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX], 0x75) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'yam0\x00', 0x600}) shutdown(r0, 0x1) 00:36:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x80}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2321262e220a6a2edfbcba29e22f6669c1b3bb96faeff9dc0e10020002b2fd0d00d23143fb94bc595000fac11c122045fbc8af3233f2209b0ac71bab3ca1b69600bb335bc90f8348549f707d6b0bbe215ed42555856dc4ff2a868a3148d86347095b427979e9fadb7503da99c5685241cebf0924893cfb81a046d4877304ab31c8fdd4b5d39b6c928e4c57efd578522b120f7c6b241c7d9e4d1bb67d843404d149f568746ae322c5d0b0b31c47ef9fc190cbfa78a0c64c3552cabd91c79006c8832b2af303f521a7c4f798646b276651dd6cef958411"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r2) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x8}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000600)={r12, @in={{0x2, 0x4e23, @multicast2}}, 0x101, 0xff01}, &(0x7f00000006c0)=0x90) splice(r7, 0x0, r8, 0x0, 0x8ec0, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1200000000000000006495b415bd0000"]}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000000)=[r13], 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r14, 0x0, 0x8ec0, 0x0) openat$cgroup_int(r14, &(0x7f00000000c0)='memory.swap.max\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100005070000000000000000000000004eae1db7a1cac8aeba0b5df84cb859630783", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100626f6e64000000001400020008000900000000000800080000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000040)={{0x6, 0x8, 0x6, 0x3}, 'syz0\x00', 0x32}) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f00000000c0)=0x1) 00:36:53 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5c, 0x80000) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8, &(0x7f0000fff000/0x1000)=nil, 0x6) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x70, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_OPERSTATE={0x8, 0xa, 0xdb2e}, @IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x1}], @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x2) 00:36:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000000004000000000000"]}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000003c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f00000002c0)="7a912ee69333631b80960b560f3893c9a11e34693915cea28719a458557b151f8c5ecc109bad04020d1ebb8a83bc507a7cba454ef8ac63eb55c0d81b209c5090aa23d5eb10b0a8593fc0d98df032e6ef7631873685ee254c62289fcf4ac226ab73734df1d127f71ce9dd2d326c855ab6ee377f6ecf27685f77787fdcf8812c238b04a9db551f76fc1497283f8d7929ac7462a2721d9561e9f21b36de0fa96baa5d515cf75a67ff045e0b18f51d4077b065b5e9a64ba750fbbb1f8c89d6631e48208c5404644b1d114267cd970ff63e8151c996b63f3144", 0xd7) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x733820, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001f00020026bd7000fbdbdf25000000000000000004000000bb00000000000000000000000000000000007f00000000000000000000000000010100"/80], 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) r7 = dup3(r6, r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2fe1693f00000000000000aff356fd28074798a474ea86370154495fdc0e"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r7, 0x540a, 0x1) [ 520.705284][T17998] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 520.733549][T17998] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 520.756960][T18030] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 520.773334][T18030] bridge5: port 1(ip6gretap1) entered blocking state [ 520.780153][T18030] bridge5: port 1(ip6gretap1) entered disabled state [ 520.788998][T18030] device ip6gretap1 entered promiscuous mode [ 520.829321][T18032] netlink: 'syz-executor.2': attribute type 14 has an invalid length. 00:36:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x0, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64600) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:36:54 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0x0, @remote, @mcast2={0xff, 0x10, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff83, 0x0, 0x0, 0x0, [0x29, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) 00:36:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/d^v_sn\xfd\xb2\x0e\xa1') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:54 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00000069dd00dc254aca294bc7f463f62cff00ff"]}) r3 = dup2(r2, r1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x77, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000540)={r6, 0x40}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000600)={r7, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e21, @rand_addr=0x8}]}, &(0x7f0000000640)=0x10) listen(r1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) writev(r8, &(0x7f0000000440)=[{&(0x7f00000001c0)="17", 0x1}], 0x1f2) shutdown(r8, 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000000)=0x1ff, 0x4) r11 = accept(r1, 0x0, 0x0) close(r11) [ 521.454923][T18036] not chained 10000 origins [ 521.459476][T18036] CPU: 0 PID: 18036 Comm: syz-executor.4 Not tainted 5.4.0-rc8-syzkaller #0 [ 521.462374][T18036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.462374][T18036] Call Trace: [ 521.462374][T18036] dump_stack+0x1c9/0x220 [ 521.462374][T18036] kmsan_internal_chain_origin+0x164/0x180 [ 521.462374][T18036] ? arch_stack_walk+0x29a/0x3e0 [ 521.462374][T18036] ? kmsan_internal_chain_origin+0xbd/0x180 [ 521.462374][T18036] ? __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] ? skcipher_walk_next+0x111d/0x2840 [ 521.462374][T18036] ? skcipher_walk_done+0xa9d/0x11e0 [ 521.462374][T18036] ? crypto_ctr_crypt+0x6cf/0xaf0 [ 521.462374][T18036] ? crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] ? crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] ? crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] ? apic_timer_interrupt+0xa/0x40 [ 521.462374][T18036] ? aesti_set_key+0xb0/0xb0 [ 521.462374][T18036] ? apic_timer_interrupt+0xa/0x40 [ 521.462374][T18036] ? kmsan_memcpy_memmove_metadata+0x109/0x2e0 [ 521.462374][T18036] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 521.462374][T18036] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 521.462374][T18036] ? scatterwalk_copychunks+0x7da/0x810 [ 521.462374][T18036] __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] skcipher_walk_next+0xa8f/0x2840 [ 521.462374][T18036] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 521.462374][T18036] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 521.462374][T18036] ? scatterwalk_copychunks+0x7da/0x810 [ 521.462374][T18036] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 521.462374][T18036] skcipher_walk_done+0xa9d/0x11e0 [ 521.462374][T18036] crypto_ctr_crypt+0x6cf/0xaf0 [ 521.462374][T18036] ? aesti_set_key+0xb0/0xb0 [ 521.462374][T18036] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 521.462374][T18036] ? crypto_rfc3686_create+0x1120/0x1120 [ 521.462374][T18036] crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 521.462374][T18036] crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] tls_push_record+0x3438/0x4eb0 [ 521.462374][T18036] ? kmsan_alloc_page+0x2ee/0x330 [ 521.462374][T18036] bpf_exec_tx_verdict+0x1454/0x1c80 [ 521.462374][T18036] tls_sw_sendpage+0x1315/0x1b70 [ 521.462374][T18036] ? bpf_exec_tx_verdict+0x1c80/0x1c80 [ 521.462374][T18036] inet_sendpage+0x1ab/0x2c0 [ 521.462374][T18036] ? inet_sendmsg+0x2e0/0x2e0 [ 521.462374][T18036] sock_sendpage+0x1f1/0x2e0 [ 521.462374][T18036] pipe_to_sendpage+0x342/0x470 [ 521.462374][T18036] ? sock_fasync+0x250/0x250 [ 521.462374][T18036] __splice_from_pipe+0x484/0xe80 [ 521.462374][T18036] ? generic_splice_sendpage+0x2d0/0x2d0 [ 521.462374][T18036] generic_splice_sendpage+0x1d5/0x2d0 [ 521.462374][T18036] __se_sys_splice+0x2141/0x3320 [ 521.462374][T18036] ? kmsan_copy_to_user+0xa9/0xb0 [ 521.462374][T18036] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 521.462374][T18036] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 521.462374][T18036] __x64_sys_splice+0x6e/0x90 [ 521.462374][T18036] do_syscall_64+0xb6/0x160 [ 521.462374][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.462374][T18036] RIP: 0033:0x45a639 [ 521.462374][T18036] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 521.462374][T18036] RSP: 002b:00007fc2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 521.462374][T18036] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045a639 [ 521.462374][T18036] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 521.462374][T18036] RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 [ 521.462374][T18036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2bf26d6d4 [ 521.462374][T18036] R13: 00000000004ca797 R14: 00000000004e1bd8 R15: 00000000ffffffff [ 521.462374][T18036] Uninit was stored to memory at: [ 521.462374][T18036] kmsan_internal_chain_origin+0xbd/0x180 [ 521.462374][T18036] __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] skcipher_walk_next+0x111d/0x2840 [ 521.462374][T18036] skcipher_walk_done+0xa9d/0x11e0 [ 521.462374][T18036] crypto_ctr_crypt+0x6cf/0xaf0 [ 521.462374][T18036] crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] tls_push_record+0x3438/0x4eb0 [ 521.462374][T18036] bpf_exec_tx_verdict+0x1454/0x1c80 [ 521.462374][T18036] tls_sw_sendpage+0x1315/0x1b70 [ 521.462374][T18036] inet_sendpage+0x1ab/0x2c0 [ 521.462374][T18036] sock_sendpage+0x1f1/0x2e0 [ 521.462374][T18036] pipe_to_sendpage+0x342/0x470 [ 521.462374][T18036] __splice_from_pipe+0x484/0xe80 [ 521.462374][T18036] generic_splice_sendpage+0x1d5/0x2d0 [ 521.462374][T18036] __se_sys_splice+0x2141/0x3320 [ 521.462374][T18036] __x64_sys_splice+0x6e/0x90 [ 521.462374][T18036] do_syscall_64+0xb6/0x160 [ 521.462374][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.462374][T18036] [ 521.462374][T18036] Uninit was stored to memory at: [ 521.462374][T18036] kmsan_internal_chain_origin+0xbd/0x180 [ 521.462374][T18036] __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] skcipher_walk_next+0x25c4/0x2840 [ 521.462374][T18036] skcipher_walk_done+0xa9d/0x11e0 [ 521.462374][T18036] crypto_ctr_crypt+0x6cf/0xaf0 [ 521.462374][T18036] crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] tls_push_record+0x3438/0x4eb0 [ 521.462374][T18036] bpf_exec_tx_verdict+0x1454/0x1c80 [ 521.462374][T18036] tls_sw_sendpage+0x1315/0x1b70 [ 521.462374][T18036] inet_sendpage+0x1ab/0x2c0 [ 521.462374][T18036] sock_sendpage+0x1f1/0x2e0 [ 521.462374][T18036] pipe_to_sendpage+0x342/0x470 [ 521.462374][T18036] __splice_from_pipe+0x484/0xe80 [ 521.462374][T18036] generic_splice_sendpage+0x1d5/0x2d0 [ 521.462374][T18036] __se_sys_splice+0x2141/0x3320 [ 521.462374][T18036] __x64_sys_splice+0x6e/0x90 [ 521.462374][T18036] do_syscall_64+0xb6/0x160 [ 521.462374][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.462374][T18036] [ 521.462374][T18036] Uninit was stored to memory at: [ 521.462374][T18036] kmsan_internal_chain_origin+0xbd/0x180 [ 521.462374][T18036] __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] skcipher_walk_next+0xa8f/0x2840 [ 521.462374][T18036] skcipher_walk_done+0xa9d/0x11e0 [ 521.462374][T18036] crypto_ctr_crypt+0x6cf/0xaf0 [ 521.462374][T18036] crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] tls_push_record+0x3438/0x4eb0 [ 521.462374][T18036] bpf_exec_tx_verdict+0x1454/0x1c80 [ 521.462374][T18036] tls_sw_sendpage+0x1315/0x1b70 [ 521.462374][T18036] inet_sendpage+0x1ab/0x2c0 [ 521.462374][T18036] sock_sendpage+0x1f1/0x2e0 [ 521.462374][T18036] pipe_to_sendpage+0x342/0x470 [ 521.462374][T18036] __splice_from_pipe+0x484/0xe80 [ 521.462374][T18036] generic_splice_sendpage+0x1d5/0x2d0 [ 521.462374][T18036] __se_sys_splice+0x2141/0x3320 [ 521.462374][T18036] __x64_sys_splice+0x6e/0x90 [ 521.462374][T18036] do_syscall_64+0xb6/0x160 [ 521.462374][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.462374][T18036] [ 521.462374][T18036] Uninit was stored to memory at: [ 521.462374][T18036] kmsan_internal_chain_origin+0xbd/0x180 [ 521.462374][T18036] __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] skcipher_walk_next+0x111d/0x2840 [ 521.462374][T18036] skcipher_walk_done+0xa9d/0x11e0 [ 521.462374][T18036] crypto_ctr_crypt+0x6cf/0xaf0 [ 521.462374][T18036] crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] tls_push_record+0x3438/0x4eb0 [ 521.462374][T18036] bpf_exec_tx_verdict+0x1454/0x1c80 [ 521.462374][T18036] tls_sw_sendpage+0x1315/0x1b70 [ 521.462374][T18036] inet_sendpage+0x1ab/0x2c0 [ 521.462374][T18036] sock_sendpage+0x1f1/0x2e0 [ 521.462374][T18036] pipe_to_sendpage+0x342/0x470 [ 521.462374][T18036] __splice_from_pipe+0x484/0xe80 [ 521.462374][T18036] generic_splice_sendpage+0x1d5/0x2d0 [ 521.462374][T18036] __se_sys_splice+0x2141/0x3320 [ 521.462374][T18036] __x64_sys_splice+0x6e/0x90 [ 521.462374][T18036] do_syscall_64+0xb6/0x160 [ 521.462374][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.462374][T18036] [ 521.462374][T18036] Uninit was stored to memory at: [ 521.462374][T18036] kmsan_internal_chain_origin+0xbd/0x180 [ 521.462374][T18036] __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] skcipher_walk_virt+0xa4e/0xaa0 [ 521.462374][T18036] crypto_ctr_crypt+0x12b/0xaf0 [ 521.462374][T18036] crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] tls_push_record+0x3438/0x4eb0 [ 521.462374][T18036] bpf_exec_tx_verdict+0x1454/0x1c80 [ 521.462374][T18036] tls_sw_sendpage+0x1315/0x1b70 [ 521.462374][T18036] inet_sendpage+0x1ab/0x2c0 [ 521.462374][T18036] sock_sendpage+0x1f1/0x2e0 [ 521.462374][T18036] pipe_to_sendpage+0x342/0x470 [ 521.462374][T18036] __splice_from_pipe+0x484/0xe80 [ 521.462374][T18036] generic_splice_sendpage+0x1d5/0x2d0 [ 521.462374][T18036] __se_sys_splice+0x2141/0x3320 [ 521.462374][T18036] __x64_sys_splice+0x6e/0x90 [ 521.462374][T18036] do_syscall_64+0xb6/0x160 [ 521.462374][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.462374][T18036] [ 521.462374][T18036] Uninit was stored to memory at: [ 521.462374][T18036] kmsan_internal_chain_origin+0xbd/0x180 [ 521.462374][T18036] __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] skcipher_walk_next+0xa8f/0x2840 [ 521.462374][T18036] skcipher_walk_first+0x15d/0x720 [ 521.462374][T18036] skcipher_walk_virt+0x8d1/0xaa0 [ 521.462374][T18036] crypto_ctr_crypt+0x12b/0xaf0 [ 521.462374][T18036] crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] tls_push_record+0x3438/0x4eb0 [ 521.462374][T18036] bpf_exec_tx_verdict+0x1454/0x1c80 [ 521.462374][T18036] tls_sw_sendpage+0x1315/0x1b70 [ 521.462374][T18036] inet_sendpage+0x1ab/0x2c0 [ 521.462374][T18036] sock_sendpage+0x1f1/0x2e0 [ 521.462374][T18036] pipe_to_sendpage+0x342/0x470 [ 521.462374][T18036] __splice_from_pipe+0x484/0xe80 [ 521.462374][T18036] generic_splice_sendpage+0x1d5/0x2d0 [ 521.462374][T18036] __se_sys_splice+0x2141/0x3320 [ 521.462374][T18036] __x64_sys_splice+0x6e/0x90 [ 521.462374][T18036] do_syscall_64+0xb6/0x160 [ 521.462374][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.462374][T18036] [ 521.462374][T18036] Uninit was stored to memory at: [ 521.462374][T18036] kmsan_internal_chain_origin+0xbd/0x180 [ 521.462374][T18036] __msan_chain_origin+0x5c/0xc0 [ 521.462374][T18036] skcipher_walk_virt+0x6e6/0xaa0 [ 521.462374][T18036] crypto_ctr_crypt+0x12b/0xaf0 [ 521.462374][T18036] crypto_skcipher_encrypt+0xd2/0x150 [ 521.462374][T18036] crypto_gcm_encrypt+0x4a5/0x9e0 [ 521.462374][T18036] crypto_aead_encrypt+0xf2/0x180 [ 521.462374][T18036] tls_push_record+0x3438/0x4eb0 [ 521.462374][T18036] bpf_exec_tx_verdict+0x1454/0x1c80 [ 521.462374][T18036] tls_sw_sendpage+0x1315/0x1b70 [ 521.462374][T18036] inet_sendpage+0x1ab/0x2c0 [ 521.462374][T18036] sock_sendpage+0x1f1/0x2e0 [ 521.462374][T18036] pipe_to_sendpage+0x342/0x470 [ 521.462374][T18036] __splice_from_pipe+0x484/0xe80 00:36:54 executing program 0: r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0xc0386105, &(0x7f0000000300)) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000180)={0x3, 0x9}) write$selinux_attr(r3, &(0x7f0000000080)='system_u:object_r:fsadm_log_t:s0\x00', 0x21) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8000, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0xc0386105, &(0x7f0000000300)) r6 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0xc0386105, &(0x7f0000000300)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111}}, 0x20) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x3, 0x6d]}, 0x8) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100), 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x800, 0x0) fsetxattr$security_smack_transmute(r8, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x7aa2d35dedceb995) clone(0x64000000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 00:36:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r4 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0xa, 0x5, 0xd, 0x8, 0x1, 0xff, 0x0, 0x4e, 0xffffffffffffffff}}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r3, 0x4000000000000002) r6 = dup3(r5, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x802000, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0xda8) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:36:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010003b0e0000000c0000000000000000", @ANYRES32=0x0, @ANYBLOB="3af38bf37112c54db6f2", @ANYRES32=0x6, @ANYBLOB="120012000c0001007665746800000000180002000a00010002000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0xbf, 0x20000000081006) readahead(0xffffffffffffffff, 0x6, 0x7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 521.462374][T18036] generic_splice_sendpage+0x1d5/0x2d0 [ 521.462374][T18036] __se_sys_splice+0x2141/0x3320 [ 521.462374][T18036] __x64_sys_splice+0x6e/0x90 [ 521.462374][T18036] do_syscall_64+0xb6/0x160 [ 521.462374][T18036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.462374][T18036] [ 521.462374][T18036] Local variable description: ----walk@crypto_ctr_crypt [ 521.462374][T18036] Variable was created at: [ 521.462374][T18036] crypto_ctr_crypt+0xf9/0xaf0 [ 521.462374][T18036] crypto_ctr_crypt+0xf9/0xaf0 [ 522.689796][T18062] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 522.747806][T18065] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 522.766235][T18059] IPVS: ftp: loaded support on port[0] = 21 00:36:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2319202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e001002000295fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:55 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x4000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/246) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x24840, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x54, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/229, 0xe5, 0x2, 0x1b}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0xd71d1ce96fe9aed5}, @increfs={0x40046304, 0x2}], 0x4e, 0x0, &(0x7f0000000400)="051ecb21099e1dadcc912c4f302b9223dbbf66bbdf42fd99fa7208b3c537e7e6ae8cf451d045e1025ea698e26c47abd52702228ebde2c2273bd7a2eb0d6139b8a71f1944eac4d22d1b7ee0c941ef"}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000005c0)={0xe3, &(0x7f00000004c0)="cd4a61d2cb37e72459a54504bdda4cf587f29c663aad377b752b80336575f0365294f64a08baf3b08cec53573e66a5b93624cad4ade32ec99aa035e2e4cf472b58cd818aaa096b3ba72e488731c5af0283fe02ba6453a916dbf486d797bbad4973207fa857f65eec713e27e8ee9f880a72830a76b2c1bfd295461df7f9dc5aecd609d83be1c74c7e2507f73d857ff8234d0bd915c56d0858d6c952c73fbeb1966459660c7ff7ab4e2ac8e42a136c37990478768b4865820a574a24dff6ccec191975198bdc31a0bbfdf37efe395f35a962f6a3e96535f9a6fd7d941c60a336d35cf9e8"}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x2c24d5c3dd2c98a4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000016c0)={0xffffffffffffffff, &(0x7f0000000640)="11db564f455b48c595b03eba44dccf719e14ca898451cbcd0be6714c27839b90f72b5ae4d6340936ebded83b9cfefdcbe8d512eb87c466e55484b8e4e539d846569827a562cc1a3fb31b8ddab71c0270d66fc2b93d1d1b387c1285856693b453c1cf8cc6f2c264cc0b55c34235da", &(0x7f00000006c0)=""/4096, 0x8}, 0x20) sendmsg$unix(r1, &(0x7f0000001840)={&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="08a5c348c5637891bcc0d76b6014969689939f8a268b79da7886479f44d2b0cc0cd8aa1a967b6b4628f7", 0x2a}, {&(0x7f00000017c0)="d1deb7807c1bd7c3edb73e039fd52c323598ed20694faff7aa4a094c27004c9c5a7fb1aa8a3823e77ad20284e7", 0x2d}], 0x2, 0x0, 0x0, 0x40000}, 0x800) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vga_arbiter\x00', 0x640000, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000018c0)) r4 = open(&(0x7f0000001900)='./file0\x00', 0x800, 0x90) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000001940)={0x1, 0x6, 0xb3, 0xa2}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001980)="311a6b55c0e0ace381a28a26118c22bf", 0x10) r5 = syz_open_dev$dmmidi(&(0x7f00000019c0)='/dev/dmmidi#\x00', 0x4, 0x100) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000001a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001b40)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/ptmx\x00', 0x4001, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0x100, r7, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8303}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x6f}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0xd067c864d58a88c6}, 0x40101) r8 = syz_open_dev$sndpcmc(&(0x7f0000001e00)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e40)={&(0x7f0000001dc0)='\x00', r8}, 0x10) rt_sigpending(&(0x7f0000001e80), 0x8) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/snapshot\x00', 0x84800, 0x0) ioctl$PPPIOCGMRU(r9, 0x80047453, &(0x7f0000001f00)) r10 = dup2(0xffffffffffffffff, r3) r11 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r12 = syz_open_dev$admmidi(&(0x7f0000002340)='/dev/admmidi#\x00', 0x79, 0x2000) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000002640)={0xe8, 0x0, &(0x7f0000002480)=[@release={0x40046306, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002140)={@fda={0x66646185, 0x5, 0x1, 0x14}, @ptr={0x70742a85, 0x1, &(0x7f0000001f40)=""/220, 0xdc, 0x1, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000002040)=""/235, 0xeb, 0x1, 0x33}}, &(0x7f00000021c0)={0x0, 0x20, 0x48}}, 0x1cc156a98fed314d}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002280)={@fd={0x66642a85, 0x0, r11}, @fda={0x66646185, 0x0, 0x2, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000002240)=""/42, 0x2a, 0x0, 0x1d}}, &(0x7f0000002300)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000023c0)={@fd={0x66642a85, 0x0, r12}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000002380)=""/10, 0xa, 0x2, 0x32}}, &(0x7f0000002440)={0x0, 0x18, 0x30}}, 0x1800}, @enter_looper], 0xb0, 0x0, &(0x7f0000002580)="add62a6481342b4908239809edcdd316bd7a540f5958837cfa6d03bd80cb9c79b87cec892172a66140c9fb57f18742947d90d3d7c6ef2ac04ad5e234e4e403e284eda4072373f1893e087d2121d57c621faa6684f69e02fd3fbcfd7135ba83065556a57af3b2fb45f881479ae93ea9cdd65b1e0a44ed08a36f99830b8488526ca3b32834f866d013d236297e833dad9dee8b93ae87376d58458be61ff2baa542f138260b805ac5bc15b2e0c9965c5ccc"}) 00:36:55 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00000069dd00dc254aca294bc7f463f62cff00ff"]}) r3 = dup2(r2, r1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x77, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000540)={r6, 0x40}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000600)={r7, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e21, @rand_addr=0x8}]}, &(0x7f0000000640)=0x10) listen(r1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) writev(r8, &(0x7f0000000440)=[{&(0x7f00000001c0)="17", 0x1}], 0x1f2) shutdown(r8, 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000000)=0x1ff, 0x4) r11 = accept(r1, 0x0, 0x0) close(r11) 00:36:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, 0x0) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 523.020949][T18059] IPVS: ftp: loaded support on port[0] = 21 00:36:56 executing program 2: syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0xffffca88}}}}}, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xe, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) 00:36:56 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000380)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x3, 0x4}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000180)=[{0xffffff81, 0x4, 0x0, 0x0, @time={0x77359400}}], 0x30) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x8}, 0x18) shutdown(r0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x10001, 0x8, 0x9ae1, 0xc96e]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x14}]}, &(0x7f0000000080)=0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000032fab1067593ba875298e4034a8633bee43d03290462d994f4822481577291f8b63f3be2183f4134dd092473b8ecd378835702b4cedda4b8616e7be71bb1aa8faf54e0b0365725dee1486b697e0fedef3b0095bdb62e8df01866647dc040a656d1cf28cbf1f064368a6e67c616b50468fb66490cb12ad0b6bb11469d8022a049c575337b400e3afe4a27e722a01183c3fe2f8950f19f00000000b4c6965af94837f244e884d0547641719f658cba7a84eb2dd07ed9a8eb504e2030c1a8677a7d8bfced8bfe5d50d62e000000000000"], &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x98) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r6) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000140)={0x0, 0x100000001}) r7 = syz_open_pts(r6, 0x4000000000005) r8 = dup3(r7, r6, 0x0) write$UHID_INPUT(r8, &(0x7f00000015c0)={0x8, "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", 0xaf0}, 0x1006) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="100f20e152e229a51367f141e3de532d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x3, 0x2, 0xf203, 0x0, 0x8, 0xc1, 0xe1d, r11}, 0x20) 00:36:56 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffff4, 0x0, 0x0, 0x2cc) splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x72, &(0x7f0000001740)={@multicast1, @multicast2}, &(0x7f0000001780)=0xc) writev(r2, &(0x7f0000001680)=[{&(0x7f0000000040)="cbbdc6a1359e1bd5914e5b90c0a0c9e9afd73249da4aa3c907269b6ee506a09c4eb5361ce3a9665423e10e2674b09dc96bcb5758f39fcf1f7753df0f0dcf37", 0x3f}, {&(0x7f0000000180)="bb0dddb2b1f3cf23b13dde845639a5518666848ef2d37cdafea543216b1548433259a15dad1456dc19a8d92f89d063c31b5e06502319e1df86f534e94241eb7f202c6d24622fd770b51b75c320fa7c4edea4b42b9425224e99b1d3d6fe17ebfabe895de12408736fd5b1844900ac162adcd609aa3242d0fa3202f92941fdf6dac03396d00ee31f0ef0a0be2e525dc54076605d66113e20cff91d5122cab83c5a3357ad2dc9da10f1bc13cf3c0594baa8fa61dfe602f923f8cf4a32e93543273d260c60c382763eb755e01ce013853facf123245df27c5f263da23950ce", 0xdd}, {&(0x7f0000000280)="f79fe29bcbbd15244e02d54fc077d5f0cdca71a29b9fe5bd5acd5d85b2232f987d7f23a0d1d3c7c8b73dd25f83d6ed2a787e6b651cf39678b088559747883ae605d140ea242f3a299bdea8301cd660a73a7a977c3da74910bdd2e0c259bf3756f56e5f714cb3653f9e242092bdfd1385d14d04fd1119304a7276b12b8f8ffe963ade99a23e9e16b737e97e8eef557b1e729705813bccc75cbf230d15f7d7efe3c62ab4b562fa8e3448d33945d1e6f15ca3238b62bb3ef23d5d3005ad56c6bffb091f6b640bc1609f2ef589feffe24700eca8abe7a327e94a65cbcbb90b797eed86718571a24500dfb0e19bebe22c661f9777", 0xf2}, {&(0x7f0000000480)="c039d17adc563f4b2a0c01af115559bc6cfece72c9f414ead3242909fbeda4dd5dadc9c45c652b8415a4dc5bfb61b4fc8a6bad1b944f0a44f35e45ddfd25c8fb1465a78960f7b09f4e94b4ccad1c863aad41f20970291e81f75f6d2fdf1be3b42b56d59781e549cc6a8c97c31d23fed1608a8eaee90d2e90c406444eacf357ae71dbcf93af00b6f0e03ce28850fa076435e084fdbe6c8b76bb79145c7a0beaa33898ae7714f5b39692a9e104995397e65b9a0a41cc7bd7cf43d9142a7dbc7c87bc6512881147ed9193afa859d3f326a8d2159ea0bd4bff892d10fa5102cc8816ebdd05", 0xe3}, {&(0x7f0000000380)="d0ef1697befbe914cb6521a35bc48f1bb8b4724033e2a90bdde9d90726532e478b080bce2a71390aa99d106b83610d776697dc3cf8ebc4ecbecc262d5780b628b67eee4f69dd93996ac03fbd9f3e3be263ae20823af74e7d854d6c3185513dc0a73f3acbbb87a5400b35defb85d7f00a0e029ad47e9443c1f8a2b3e9570d127be7a0c94fa5d76cd0a5c1", 0x8a}, {&(0x7f00000000c0)="6134c0be9eb71ee32694b836a1bb5d070ed289de01588cbe82210c772d9c9b534dfe141ca98659ec6bdde8418f9f1be5553da990bab0e515f204ab27c104dfd3280f91325ae0a367b4e45bac561eb19078a03dc78a35827839", 0x59}, {&(0x7f0000000580)="799a42375f8d0e5907c2dd211e0afe82b5a6694f7c3960899ea0e447e3cf90bcde9109509d8fcbc69db67256e109ff0ca25404698578457db242a788061beeddc4da35aa49de9002cafb492c5a77e7606f5d0c74a2cd718327f87c6bed75c2eca114271a002c9dccde6738b435a84ca4e43f2d4310c4ac84a9", 0x79}, {&(0x7f0000000600)="1c933a60b1b48bc9fccf63ab68790b4598dee58c3642dfaa972c49c77b016847488857adcbc6dcf352fab759454d9213013c", 0xffffffffffffff76}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="73ba4a14422ddbdab37d5925709a264d6fd3ddb423c7391e5a4e10bf06d170857e8f1935937f1388a538db9d1b13f0517a0f1ab8ed002a772b602b7e", 0x3c}], 0xa) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 00:36:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="ce48b031ec2355d00000000001000000"]}) fchdir(r4) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r3, 0x4000000000000002) r6 = dup3(r5, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:36:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="3801000016002100e7ff00000000000110000000000005000000e50000000000000000000000fe2f1798fbb8bec691cbe9ad86404c414e29fc4ac7b1916619479579504decb627eff8bd29350bf18760f5762d792b9a1cf1c5966c4a1038e55d52cef2b6672d757500ca6e58c184f9a92338fbeed8789579043d134b75b38761a764fd419717f9316b4c67cf40ac132d1484d39c3012463ef2115570656fd179cc170ed4a2b73cac584db8de487d4c86c363e3e343e43687c3a28033c973120135233158b437b773cb9d2cf9510dd72d791d2138c63b04c0633a332f660d0987", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfff, 0x80) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={[], [], @remote}}, &(0x7f0000000100)=0xfffffffffffffe30) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r1, 0x4) 00:36:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0x2e6, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x395}}, 0x0) 00:36:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, 0x0) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 523.960552][T18098] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.027387][T18101] bridge_slave_0: FDB only supports static addresses [ 524.039118][T18098] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 00:36:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x505000, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x7fff, 0x0, 0x0, 0xb632}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xec0, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) fchmod(r2, 0x9a) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000080)=0x4) 00:36:57 executing program 3: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x8000}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000400", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x77, &(0x7f0000000040)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={r5, 0x2b, "7e97230015c7123872088a81efe84b128e528057b8c86518e8dafd4d5493260099ae1b972e8e8d1d09be99"}, &(0x7f0000000040)=0x33) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r8, 0x400, 0x1, 0x80000001, 0x2a5, 0x41}, &(0x7f00000000c0)=0x14) 00:36:57 executing program 1: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xfb83f8e8afdb70bc) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) setsockopt$inet_buf(r5, 0x0, 0x928e8a97e11db675, &(0x7f0000000200)="feaf0ea3abfbcb516b56fecf40b9cf831811d7440a28cb16ad175ae1ed3d2494c45b1ca30ae5f30c874445f08934a4ad8a334d58a4f475abd611171d3cde67144ddf42f9a5cb36b5ca82a7ef1ce72c29646c79b632ef046632ebb6908d87dae56d36e3298a40897888c65b1c1999c937a8a91bdf1b6b523e989f076ff4c237ba7aab8a37761d53653f305ba4f5719f6ba84889c42ee72d28f1a5496bcf2f218b73a36139b708bbfe5a600726edd23343aa30d39bd5171818af7020f2e0aacbfc24a56ca0682e415411a3bfdffda7e39161b9358598c9271d41802313b3e0348b2feeda2570", 0xe5) ioctl$TCXONC(r5, 0x540a, 0x1) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 00:36:57 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) accept4$alg(r2, 0x0, 0x0, 0x800) 00:36:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96f3fbbce205c5d8bd141ad8f97bcf5107faeff90baff356"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:36:57 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e180f000000e8bd6efb120009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x80000) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x70}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r3, r4}) 00:36:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f4f3232ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4f}], 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400000, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 525.022230][T18130] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable 00:36:59 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f00000003c0)=0xb5e, 0x4) listen(r2, 0x100000001) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r3, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fda200e5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r6}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r6, 0x3}, &(0x7f0000000140)=0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) tee(r3, r8, 0x800, 0x8) ptrace$poke(0x5, r7, &(0x7f0000000000), 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x800, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 00:36:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, 0x0) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:36:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socket$inet_udplite(0x2, 0x2, 0x88) eventfd(0x8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) openat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB]}) memfd_create(&(0x7f00000003c0)='\x00', 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x5c0c40, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x7fffffff, 0x3f, 0xc}) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653020000a08393924981576774b9e38f97578d4299ab19b221ab2165e6209499b2aa483a99349aa09942d256da184d2a95bdd82f206043b1845aabff68cefdfb9901269a20f7ce75f1a1ac739f5d0fa234a71893efddeec912b232dbc34d0d69066b1b70543c0a51392cfc47a427168eb6b1d66f419bfaf3c2c809001719233f8f167e807ab00ee2155021f940600000000000000773be720d08ef7b49f3b8c36b9a09227ab0db35091b046cc5de35cf3bcee3b43eb8d9765a82187f48330890328f79542cf9bd84db24a250a7c157e0c6ecf6ce38cdae3e36c3ed7bf02efc254230c5b3a2896e1ed9ef8900819327283d2e8d07262eed07c21a9e6054838a0a84197387e359c882898733c8b6d2120ef8cef01faaf78579b3cf2874010e46cb1c3e1413625e622f7652bb385577a25ed1ef913f0d137e7e4cbdb35d0857449b2c166da9e04d2e3db7002d49e98633e29603e3de097b3c37a62d32aa668da52b0efa9e94b9a598dcf2dda54248db8d554103511cf7e14739a16402bf975090e33831847ca2683224d23cee7afbbbbcce867fa404979d84541a7fd69fcfd4e8e73270f7789146424b6e0a75dc73bad12d851a95f02992c5173d619ee99931e"], 0xf0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000600000078080000000000000100000000000000f100000000000000040000000000000000000000000000000000000000000000000000000000000000000000070000006a0100000000000003000000000000000400000000000000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500"/384]) r7 = syz_open_pts(r5, 0x4000000000000002) r8 = dup3(r7, r0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0x0) ioctl$TCSETX(r10, 0x5433, &(0x7f0000000100)={0x1, 0x8, [0xff, 0x7ff, 0x9, 0xff01, 0xff], 0xff}) ioctl$TCXONC(r8, 0x540a, 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r11, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x8ec0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r12, 0x10f, 0x81, &(0x7f0000000140)=0x1, 0x4) 00:36:59 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x19, 0x0, &(0x7f0000000100)) 00:36:59 executing program 3: sysinfo(&(0x7f0000000000)=""/22) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000440)={0x0, 0x0, 0x9, &(0x7f0000000400)=0xfffffffffffffffd}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000200)={0xf, {0x9, 0x0, 0x4, 0xff}}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000240)={0x1, 0x5, 0x4, 0x2b24210f, 0xfff, 0x4, 0xc, 0x0, 0x2b5, 0x8, 0x0, 0xd22, 0x40, 0xa7, &(0x7f0000000040)=""/157, 0x7fff, 0xfffffffb, 0x2}) get_thread_area(&(0x7f00000003c0)={0xffffc927, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}) r5 = socket$inet(0x10, 0x2, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f00000001c0)={0x3, 0xca, &(0x7f00000002c0)="565a212ba6d553394644d20e80d936e528529b47df1dd2f4f34f4bafecb4f03591d4ec3a119703a851dc3db85250846652e0cf2f27c324becc526431b0eef61ef4a3aa692ac1b04f934c7cf7148a23ac616be014a68c9a7982038f8016c0fa88586281a57cd48d2978f8f3ea59738c611e8362005b36aead9f14900a06b4daa331df09c45d275accd448421c893f3cd4b607944b69037b1042bce3284bd5353d0414d6579222298abe5b4cd5f33ebb8d6d32ec05e930b7f98afe5d39533a2243458b931fe320af492805"}) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00=\x00', @ifru_flags}) 00:36:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x101000) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000100)={0xc, 0x81, {0x55, 0x1, 0xe6, {0x8000}, {0xc1a, 0x8001}, @rumble={0x1ff, 0xfff}}, {0x54, 0x8, 0x5, {0x5, 0x3ff}, {0x76, 0xff}, @period={0x58, 0x4, 0x57, 0x1, 0x8, {0xfc01, 0x0, 0x8, 0x1}, 0x5, &(0x7f0000000080)=[0x40, 0x2, 0x5, 0xf674, 0x1e]}}}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) fspick(r5, &(0x7f0000000200)='./file0\x00', 0x0) [ 526.901068][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 526.995633][T18158] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 00:37:00 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0xffe9) socket$inet6(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x0, "e4b80b549026321cd9e8af965a413c51a8f281ab19f01dea1af56603ae52bb5d8981a539b56de71d901630e949f38ae55a7249cd4b425419bce9beba0778fb94c809ee5f1273a9a82dc736c48bb798a9"}, 0xd8) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0xfffffffffffffde7) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shutdown(r1, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0xff}, 0xfffffe03) 00:37:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x22) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0100001000070d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140112000c00010069703667726500000401020014000700fe8000000000000000000000000000aa140007000000000000000000000000000000000008000900070000000800130000000000080008001b000000080002000000000008000a000000000008000500ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="1400060000000000000000000000ffffffffffff140007000000000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="0800050002000000080014003306000008001800000000000800170000000000d6010700fe8000000000000000000000000000aa08f50100a6f825e45ab9115abe2cb0e44fdd8d4c9737ee0e538d5f42a5e73ee930c4275246bff24f8e914de1825fd28ee160232f67bd4353f8dfa0159fb3a3aafe0a2aab6169f186fd2380bd15c18efd003bb72adb487a68acf90886e4cbe2b3ca161e73769d89e2417665b7fd48e0b98b1e13df9890c992dc3bdf10e49c413c427f2afac0bf6cb013ec62af", @ANYRES32=0x0, @ANYBLOB="08000f000500000008001300000000000800180000080017000100000004001300080005000400000008000700000000000000a3f13bf7c504bd50d6702a959cc364b9ceb372a043d216d0", @ANYRES32=0x0], 0x13c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/161) [ 527.308778][T18156] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 527.374846][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.384383][T18166] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 527.392628][T18166] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 527.400728][T18166] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 527.409042][T18166] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 00:37:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x2, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb99, 0x4000) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 527.417364][T18166] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.485333][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.495321][T18166] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 527.503568][T18166] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 527.511678][T18166] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 527.519973][T18166] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 527.528257][T18166] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:00 executing program 3: stat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540), 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000300)='ng\x00', &(0x7f00000002c0)={'M&z', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd", 0x2d, r2) r3 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0xc) keyctl$chown(0x4, 0x0, r0, r4) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000000c0)="0bbe3e9a98908f7ae247bec00231940c21f90a9e26", 0x15, r3) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r6) r7 = socket$inet6(0xa, 0x8000008000080001, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000780)) r8 = syz_open_dev$dspn(0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @ipv4={[], [], @multicast1}, 0x5}}, [0x3ff, 0x1000, 0x4, 0x0, 0x7, 0x8, 0x3ff, 0x0, 0xffff, 0x6, 0x1, 0x764d, 0x1, 0x4]}, &(0x7f0000000400)=0x100) keyctl$chown(0x4, 0x0, r0, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x64, &(0x7f0000000140)=[0x0, r9, 0x0]) r10 = socket(0x1, 0x80005, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r10, 0x0, 0x42, &(0x7f0000000440)={'icmp\x00'}, &(0x7f0000000480)=0x1e) getgid() r11 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r11, 0x4008700c, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r11, 0xc0305602, &(0x7f0000000100)={0x0, 0x556, 0x3013}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) unshare(0x60020000) 00:37:00 executing program 0: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"]}}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 00:37:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 527.704463][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 527.835502][T18181] IPVS: ftp: loaded support on port[0] = 21 [ 527.898816][T18183] IPVS: ftp: loaded support on port[0] = 21 [ 528.564041][T18187] IPVS: ftp: loaded support on port[0] = 21 00:37:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff3dfc7f5fca3123762f704b3a9488d81d41ef5479863dc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x69, 0x42}, 0x14) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) dup3(r8, r0, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@rand_addr="c7f296408ce385e4e6ddab673928e81c", @loopback, @mcast1, 0x3, 0x800, 0x2, 0x500, 0x8, 0x3bbc63d17c43ac09, r7}) r9 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r10, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9400) dup3(r0, r10, 0x0) 00:37:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r10, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000280)=0xf4ac, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', r10}) r11 = fcntl$dupfd(r0, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [{}]}, @timestamp={0x44, 0x4}]}}, @igmp={0x0, 0x0, 0x0, @loopback}}}}}, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000100)) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\a\x00'/16]}) fsetxattr$smack_xattr_label(r12, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="65746830672f00000000000000cd314781ff349710e41e3163f08d21bff53648e537b5b8c386dfa3ddfbaf4c2864ac65ec91a41edaff7ba36700d098474f4044b810cf1a3293b2f5f5d8eb92f587b8db117611844d6af2793762a6052707fa36fe972dbd462aa0515c026184657bd640872c4a459b6228a50115a6547e5931f911170bd2071eb208a527"], 0xd, 0x7) 00:37:01 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x7, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000200)={0xc519, 0x10, [{0x4, 0x1}, {0xb}, {0x3}, {0xf, 0x1}, {0x7}, {0xe, 0x1}, {0x3}, {0xa, 0x1}, {0xd, 0x1}, {0x7}, {0x1, 0x1}, {0x1}, {0xc, 0x1}, {0x4, 0x1}, {0x8}, {0x1, 0x1}]}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000000300)) r7 = syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x3, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x711000], 0x1}}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x540, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f00000003c0)={{0xd2, 0x9}, 'port0\x00', 0xe0, 0x3c, 0x3, 0x400, 0x0, 0x5, 0x1, 0x0, 0x1, 0x3f4c}) [ 528.790716][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 528.807644][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.822839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.828940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 528.835360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.841522][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 528.847974][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.854182][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 528.860466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.866743][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:37:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x32) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 528.938592][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:37:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x37, &(0x7f0000000000)=0x80, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) eventfd(0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 529.277900][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:37:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) accept(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1e, @rand_addr=0xdd}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb1251373aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) dup3(r2, r3, 0x0) 00:37:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2fb21da241c02e4cf3f90baff156fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80000) kcmp(r6, r7, 0x0, r8, r1) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:02 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) lseek(r0, 0x8000, 0x3) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x800, 0x61ce], 0x3, 0x2ab6, 0x0, 0x0, 0x0, 0x8000, {0x0, 0x3, 0xfff8, 0x0, 0x6, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0xd4, 0x6, 0x0, "ab3f17485f38f82e9c22fc5340000023112b00"}}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0xc446d000a917e37d) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000340)=""/255) close(0xffffffffffffffff) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f00000002c0)={0x22, 0x1, 0x4, 0x0, 0x5}, 0x6) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 00:37:02 executing program 0: rt_sigtimedwait(&(0x7f0000000040)={0x6}, &(0x7f0000000080), &(0x7f0000000100)={0x77359400}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}}, 0x0) r0 = socket(0x3, 0x6, 0x20) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:37:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000033002c01000000000000000002000000ffd39d160c0001000500100004000a48"], 0x24}}, 0x0) [ 529.556854][T18224] IPVS: ftp: loaded support on port[0] = 21 00:37:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="240012c1eba52628ca0008000100736974001800020014000200fe800000000000000000b51b46aceb85397434c7af811e1ab0a49fbcd22b5a013692ab3741d3c854eeb9a43c2def89cb4e6a976fd9b0613ca07bad0b0a2f486c6fa3540c5489594c7d7e243c6ecea8ddcca507e91cfde6023729d5e0"], 0x5}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 00:37:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000253b2a07f93b2df4e3b356b688452600000000000000", @ANYRES16=r5, @ANYBLOB="000428bd7000fddbdf25030000000c000200ff7f0000000000000c00080006000000000000000c0002000900000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xfe94e9578e61efbd}, 0x9e7c4560a633d849) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) r8 = dup3(r7, r0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r8, 0x540a, 0x1) 00:37:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 529.939619][T18245] IPVS: ftp: loaded support on port[0] = 21 00:37:03 executing program 3: unshare(0x8000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r4 = dup2(r2, r3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r5, 0xc00, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x48, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff01}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x40005) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4020aea5, &(0x7f0000000000)={0x0, 0x101}) 00:37:03 executing program 2: stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)) getegid() socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) lstat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) delete_module(&(0x7f0000000280)='/dev/radio#\x00', 0x1000) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, r2) getgroups(0x3, &(0x7f0000000140)=[0x0, r2, 0x0]) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000500)={0x80000001, {{0xa, 0x4e21, 0x8001, @ipv4={[], [], @empty}, 0x7}}}, 0x88) getgid() socket$inet_tcp(0x2, 0x1, 0x0) setgroups(0x31dbe445, &(0x7f00000002c0)) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x3bc177af4b1a627b) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x7}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000080)={0xccccccccccccd55, &(0x7f00000005c0)}) clock_gettime(0x0, &(0x7f0000000440)) futimesat(r3, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={{0x77359400}, {0x77359400}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) r6 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xe72) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9d4, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60020000) 00:37:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) r7 = syz_open_pts(r3, 0x4000000000000002) r8 = dup3(r7, r0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r8, 0x540a, 0x1) [ 530.581737][T18255] IPVS: ftp: loaded support on port[0] = 21 00:37:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@gettaction={0x1c, 0x32, 0x1, 0x40, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xbbea}]}, 0x1c}}, 0x0) 00:37:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x10000000}, 0x0, 0x9, 0xffffffffffffffff, 0x6) openat$urandom(0xffffffffffffff9c, 0x0, 0x400420, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x840, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000300)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200100, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x80000001, @local}], 0x1c) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000003c0)={0x1, 0x401}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000400)=0x2, 0x4) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) openat$cgroup(r9, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4e56fbb1c780c55f70459f16a3e01b8af68b4260acd6", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x77, &(0x7f0000000040)={r10}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={r10, 0x8001}, 0x8) io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r11, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) keyctl$get_persistent(0x3, r14, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast1, @in6=@rand_addr="8bc5297d0b0c72b774ece4d64ac2c508", 0x4e21, 0x0, 0x4e24, 0x1, 0x2, 0xc0, 0xe0, 0x29, 0x0, r14}, {0x8, 0x2, 0x0, 0x2dc, 0xffffffffffffff7f, 0x5, 0x9, 0x100000000}, {0x9, 0x7, 0x9}, 0x1, 0x6e6bb2, 0x0, 0x1, 0xa0530e052212ca90, 0x5}, {{@in=@empty, 0x4d2, 0xff}, 0xa, @in6=@rand_addr="cbe5e6841fad62b5a9f58b322d1f06f0", 0x3504, 0x0, 0x3, 0x9, 0xa5f, 0x7, 0x3}}, 0xe8) 00:37:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x74}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001", 0x18}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000200)='\x00\b\x00\x00\x00\x00\x00\xf7\x02\xff\xff', 0x7, 0x18001) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={0x2}, 0x8, 0x800) r5 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r5, &(0x7f00000004c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 00:37:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_sn\x9c\xd8(\xa5\x16/_v\xc4\x96f\x10') r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)='cpuset&^em1ppp0[*selinux,procppp1+vmnet1\x00'}, 0x30) timer_create(0x2, &(0x7f0000000140)={0x0, 0x24, 0x5, @tid=r2}, &(0x7f0000000200)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) r6 = dup3(r5, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:37:04 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x401}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd271}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5e62}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdf9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000801}, 0x2000) syz_emit_ethernet(0x66, &(0x7f0000000300)={@broadcast, @random="b065a3cfff4d", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @dev, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "631097", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}}, 0x0) 00:37:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xe9fe3fe66eb6b7ae, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000001c0)=""/250) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @broadcast}}]}}}]}, 0x60}}, 0x20008000) 00:37:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x30}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000780)=""/61, 0x3d}], 0x1}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0xa0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000240)={0x3, r5}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000001fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0xfffffde8}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000280)=""/92, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xf}], 0x126, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 531.162283][T18275] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) setxattr$security_smack_transmute(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x2) r4 = syz_open_pts(r3, 0x4000000000000002) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', '/dev/ptmx\x00'}, &(0x7f0000000140)='/dev/ptmx\x00', 0xa, 0x2) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:04 executing program 0: lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0xc66b674e63158a16) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x324182, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000280)={0x3, 0x4, 0xffff7fff, 0xea, 0x8}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) open_by_handle_at(r1, &(0x7f0000000140)={0x2f, 0x1, "782ecec1eb24e9f16c7cfe031ab541ff44cb8532c634ff15a6b0fa618e0d700fceadc849cc3701"}, 0x200000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008910, &(0x7f00000000c0)="0bcfe8fb01000000000000") r3 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000200)=""/25) ioctl$sock_ifreq(r3, 0x89fd, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond0\x00'}) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x800000, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f00000001c0)=0x40, 0x4) 00:37:04 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r13 = gettid() r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$unix(r14, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) tkill(r13, 0x15) 00:37:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:05 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x110, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x20, @loopback}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) 00:37:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="1200000000000000000022000000040028ec2619c958d5de00fd32ea5b41e1b970149369a76117296b045fef18"]}) write$binfmt_script(r6, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, 'selinux-keyring'}, {}, {0x20, 'vmnet1GPLeth0'}, {0x20, 'securityproc.{GPLPsecurity'}, {0x20, '/dev/ptmx\x00'}], 0xa, "6ae276fe561254f8cfe95c811a0635ac5fb58846936189ad53b5368b03c03457d928f354441a823ab2022a0223ce5b8995e7ab1203673bd97b5c0dae36926fa7f25cf74a229e8e6d5dfcd45a9f81367ee759b509d05f01f5917b09f91918b0c946dade86986df7f359ef623657dda65e0caf32706a824edc4ec7a23770378fc0d5a8cce207155c8f29efb5cdf417562655c17ff482e82c16e1f61eeff9788f307fee27d00a492d3c7d487251da360a831654edceb37f3481eff6da53727a9835bcf5d97c8868b22efa329325e229d5827448ec96f2337baae31cab6e4078fb1b456d5fae7d3dd8e7"}, 0x143) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) ioctl$TCXONC(r5, 0x540a, 0x1) [ 531.970826][T18301] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 532.103865][T18304] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 532.973073][ C1] net_ratelimit: 4 callbacks suppressed [ 532.973094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 532.985112][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 532.991210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 532.997373][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 533.003814][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 533.009792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 533.016173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 533.022174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 533.028537][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 533.034561][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:37:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x1}}}, 0xb8}}, 0x0) 00:37:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="232120312f6669d9fe8c9ddef8cf79aff356fd280747985fdc0002b2fd0d1b3e3fc009010000844c4892f68a04cc7401a732e5eff8b4d5d95d4c252ef2c7cc3f17d72cc5ef6bbcc7d4e21b965fcb4b447d9f835d5538df878622a3636eec9e255c0ba60eb6a297118bab449485c71e74309d550b13acc63e3ca2fa1272"], 0x22) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x17, 0x1a, &(0x7f0000000000)="c9a1479df433fe24170ff6f0d1741ecce8f43fe0fb69634d8c74"}) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x565, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x401}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x80) 00:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a007b500000000000000000020000000000000000000000080010000000000008001900c80b287fd7c91fda19398aebd38f4377", @ANYRES32=0x0], 0x2c}}, 0x0) 00:37:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:06 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r13 = gettid() r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$unix(r14, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) tkill(r13, 0x15) [ 533.299401][T18329] validate_nla: 1 callbacks suppressed [ 533.299424][T18329] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 533.351680][T18329] 8021q: adding VLAN 0 to HW filter on device bond1 00:37:06 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60020000) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x100, 0x0) 00:37:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1ff, 0x40) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x8001, 0x4) [ 533.641797][T18342] IPVS: ftp: loaded support on port[0] = 21 00:37:06 executing program 0: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x20}, 0xc) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x1d5) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100)={0x1}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 00:37:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90ba0f356fd280747985fdc0e00100d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) write$P9_RLINK(r7, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) fcntl$setstatus(r0, 0x4, 0x40800) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sync_file_range(r10, 0x401, 0xefe, 0x1) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) write$P9_RLOPEN(r9, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x9, 0x3, 0x4}, 0x100}}, 0x18) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00006ed000), &(0x7f0000000000)=0x4) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x77, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r6, 0x93}, &(0x7f0000000080)=0x8) 00:37:06 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000e00)=@bridge_getlink={0x294, 0x12, 0x200, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x0, 0x50800}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_XDP={0xec, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4}, [@exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x46, &(0x7f0000000140)=""/70, 0x41000, 0x1, [], r7, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x0, 0x40, 0x8}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0x16, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xd82e}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000380)='GPL\x00', 0x1f, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x4, [], 0x0, 0x3, r3, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x9e9, 0xf, 0x4, 0xffffffc3}, 0x10}}]}, @IFLA_VFINFO_LIST={0x180, 0x16, [{0xd0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5776, 0xc3, 0x5ee}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x36, 0x7}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, [{0x14, 0x1, {0x1, 0x774, 0x9b4, 0xa65c0b58e403e825}}, {0xfffffffffffffed0, 0x1, {0x8, 0x17a, 0x7, 0x8100}}, {0x14, 0x1, {0x0, 0x447, 0x99e, 0x88a8}}, {0x14, 0x1, {0x9, 0x72f, 0x5, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x0, 0xc, [{0x0, 0x1, {0x2, 0xa32, 0x401, 0x14280}}, {0x0, 0x1, {0x4, 0xc6, 0x1000, 0x88a8}}, {0x0, 0x1, {0x80, 0xbe6, 0x9, 0x88a8}}, {0x0, 0x1, {0x4, 0x45a, 0x3f, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x3f, 0xffffff86}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0xfffffffa}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x8}}]}, {0x4c, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7fffffff, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x21, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xa74, 0x10001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x7f}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xb1}}]}, {0x60, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffff8, 0xffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x131c, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0xf156, @dev={[], 0x10}}}, @IFLA_VF_TRUST={0xc, 0x9, {0x20, 0xff}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0xfff, 0x80000000}}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x1}, 0x14062) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 00:37:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8, 0xf, 0xfe}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:07 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r13 = gettid() r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$unix(r14, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) tkill(r13, 0x15) 00:37:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0d24b1a41ca1afee3cff104ce2c263b6184b00000000000000"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x8, 0x18, 0x10001}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x4) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x3f, 0x1, 0x8000}) 00:37:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 534.678264][T18377] netlink: 'syz-executor.5': attribute type 24 has an invalid length. 00:37:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0dd95f7094bd52062eb6d9c93f8c40a5137f102f4d1fa18834c6ea57d2820c2bf44aff8b2f6919a0012110f577f9784482c842824dc5666824b0d45300"/103], 0x22) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x69, 0x20, {0x6c}}, 0x2f5) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)=0x1592) ioctl$TCXONC(r5, 0x540a, 0x1) [ 534.747745][T18377] netlink: 'syz-executor.5': attribute type 24 has an invalid length. 00:37:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xb4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0xb4}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x10000) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0x9) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r5, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000340)=0x80, 0x40800) close(r3) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000180)=0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001", 0x18}], 0x1}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 00:37:08 executing program 5: setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x7fff, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000001c0)={0x4, 0xff, 0x6}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x20000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000002c0)) semop(r1, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) semop(r1, &(0x7f0000000000)=[{0x0, 0x1f, 0x1000}, {}], 0x2) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/145) bind$inet(r0, &(0x7f0000001280)={0x2, 0x4e23, @rand_addr=0x7}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200)=0x8001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x20000000025, &(0x7f00000000c0)=0x1080, 0x1ec) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = syz_open_procfs(r6, &(0x7f0000000040)='stack\x00') ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000080)=0x8) 00:37:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 535.152306][T18398] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:08 executing program 1: r0 = io_uring_setup(0x7d2, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x3, 0x2ba}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000280)={0x30, 0x6f, 0x1, {0x3, [{0xc4, 0x3, 0x8}, {0x44, 0x4, 0x6}, {0x2c, 0x2, 0x6}]}}, 0x30) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) read$usbmon(r2, &(0x7f00000002c0)=""/245, 0xf5) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)={@my=0x0}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) r6 = dup3(r5, r1, 0x100000) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x18) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r1, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) r7 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x4800) ioctl$TIOCLINUX2(r7, 0x541c, &(0x7f0000000100)={0x2, 0x1, 0x6, 0x1, 0x200, 0x8}) 00:37:08 executing program 0: r0 = socket(0x40000000000a, 0x803, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004080)={'lo\x00\x00\x00\x02\x00M\xbf\x00\x00\x00\x00\b\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x34}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f00000003c0)=""/4096) fcntl$setown(r2, 0x8, r4) 00:37:08 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r13 = gettid() r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$unix(r14, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) tkill(r13, 0x15) 00:37:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x20a100) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x8, 0x100, 0x2, {0xd378, 0x772, 0x1ff, 0x800}}) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1fc0000000}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) 00:37:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66be96e86996faeff90baff356fd280747985fdcca94a40e019c2dc1980e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000140)={0x0, {0x1, 0x1}}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000080)=0xbb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000040)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) 00:37:09 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x84) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000040)=""/18, 0x12}, &(0x7f0000000140), 0x8}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "8aa89822f3f461a80576e943"}, 0x5ac) 00:37:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x3f, 0x40}) r4 = syz_open_pts(r3, 0x4000000000000002) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) splice(r5, 0x0, r6, 0x0, 0x8ebe, 0x9) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f00000000c0)={0x390, 0x2, 0xfff, 0x0, 0x3c}) r7 = dup3(r4, r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) r8 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r8, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, 0x73, 0x3, 0x20, &(0x7f0000ff9000/0x2000)=nil, 0x408d9e99}) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x80140, 0x0) r12 = getgid() r13 = getegid() setfsgid(r13) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010004000000001004000100000000000800e05e", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="08000200", @ANYRES32=r14, @ANYBLOB="10000400000000002000020000000000"], 0x44, 0x4) ioctl$UI_ABS_SETUP(r11, 0x401c5504, &(0x7f0000000340)={0x0, {0x800, 0x401, 0x7, 0x3, 0x1ff}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0x0) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f0000000200)="dd42bd13121956941f96d915fb940f115ae1fedd48f4e9c936d423edc1fc40cc38befebf2eedcc7bfabeb0391d630a04339a4c610cb8d679c9fd405c06d9024524ccee4d83830afa412f52dc030bca4b04337b719255775cafbe02d9804a6b4fa070cc97e0e28bd1d54cb3c9402d64fbbe97ee259810bcc53275c342b30590ab8b6f2d73f7921eafc8942767caf3f75bc718c2e8c6b929d6eac4bb3f6782f3d4b152f7ed809b9a9da2e8bf4fe4ec40f38678461f6b1124e00f133394") ioctl$TCXONC(r7, 0x540a, 0x1) 00:37:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3}, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="120000000000000000000000000500000033105a909a5a3a8aa6ddda8683b4050043d24d0473b336b34c5d623654c3b83267be09e302"]}) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='veth0_to_bond\x00') 00:37:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000080)=0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newae={0x40, 0x1e, 0x211, 0x0, 0x0, {{@in6=@remote={0xfe, 0x8000000}}, @in=@dev}}, 0x40}}, 0x0) 00:37:09 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x103000, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000100)={0x0, @motion_det}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) [ 536.275468][T18438] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r4, 0x8000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="310000001000050700"/20, @ANYRES32=0x0, @ANYRES32=r2], 0x3}}, 0x80) 00:37:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x10004000000002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000000000000000000000119c0ffb2ab1928a0900fde32fa53ea9fcf3802bc9cdf89c8b0e085a1c7ef249665f2abd2b68e0ab350d6e30a399515a5fbf008b36a95079ee237a443a2bdd1015e1ef98f7a7"]}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x5, r6}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f00000000c0)=0x3) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @rand_addr=0xcaa4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x64, {0x2, 0x4e22, @multicast2}, 'nr0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r8 = socket(0x10, 0x80807, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x87, 0x80000000}, {0x6, 0x7}], 0xee01}, 0x18, 0x2) write(r8, &(0x7f0000000000)="220000002000070700be000009000701020000690b000000dadb97f1050013800100", 0x22) 00:37:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:09 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) gettid() r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$unix(r13, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) 00:37:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000100)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x80) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0xffffffffffffffba) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000200)={0x7, 0x7, 0x7, 0x0, 0x0, [], [], [], 0x66, 0xffffffff}) 00:37:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="daa160f05bb2459e22491398b61c72cd2a8c39eb3d4605b6412b3b1e5748c320830139e51b0cfaef2303f1c378ea0ad5a84969f5d5dd31d6ffefc44b79602bcf747c00aa58ed13489499d151b5452dc54f3be1c87edb452efcae058505e1c28c4eb0f777919201a443c97a7756acce6695a363da8262e0c3a2b5766e6fc1abf4495df4246d47d89e8c891fef68af805bae1a8d60cba1ec4b678744fe6b8392cdc415aa748a7dc13b27e38f526a3836d7913bb688fac61f2bf920408ccbb556d9aa54ecec0f61a8c988278c85eb3b", 0xce, 0xfffffffffffffff8) keyctl$invalidate(0x15, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) r5 = epoll_create(0x6) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) sendmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3c9af6670fa230c704a8f356f1db2c2f8e8994b61f497658f249a2f070ea21d191f369ded8d58d484788a42130db67ee44339502fecec9966da4085e1f8804", 0x3f}, {&(0x7f00000002c0)="34c85bff82d2d75f6a9200d3556f97286cf7d24ccea0b86a1a19507c32197c3f2fef43ac6821dd7f2c21dec6480f7be32fa5103bd7ffbf87e05fcb3b15ec45c8569179f31a35a9d8fec6ae8f4f84660cea1abd48858c0dee0124b91529ec608b9f7e3fb9e7bde70fa0534647f777e1082b2b6a7bc2730ce770167d49ce7decc5513999473d690fa87485ccbb49b6c5de84beb1b43ca397058ceea1a6f379c16aa1fe01cdd1a97fe63aec1d941c8c97c6f454a0eb12b4fb5043d98b286bd553c1c41fb8201e9c1e", 0xc7}], 0x2, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [r5, r6, r2, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}], 0x40, 0x8020001}, 0x40080) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x4, 0xc000}) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="6530001e3b39a938d0ebdf23ccf3d0b8c6bcbfee4bdd313a8c8a6f6348e19b1abffbb81ed678ecf2f69a494712181149c6329784c681b018f67cb87e96d5c2a6fa68d5ce9e852d8c626f28ac2b008b47134ca63cc3e5613aa6d8b4b7e4f7bb1e647e1b4d0bf294e55b879a541a5cf5123bdc9c365c88be015022559c55700329a0a092a7f6a820b300069cf91ac7af7c7abcc8d530dd99ba347acad1249beb557507824adb1d45f6a64d1399beef9d5a2554c81132ae1e049d"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x0, 0x0) 00:37:09 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = creat(0x0, 0x44) tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x14, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffe}, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000240)={0x0, 0x2}) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x697641fb5fa96c5a) write$smack_current(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="91"], 0x6) write$P9_RFSYNC(r6, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) r7 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r7, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000000a08300"], 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r8, 0x1000000000013) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:37:09 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x5f0f) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0x14}], 0x1}, 0x0) 00:37:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0dd044b8e63eb0c7"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) flock(r0, 0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100090c0800418e00000004fcff", 0x58}], 0x1) 00:37:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14880090}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x5c, r8, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x80a0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:10 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = gettid() capget(&(0x7f0000000040)={0x20071026, r0}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000080)={0x5, @vbi={0x6, 0x40000, 0x8, 0x32314d48, [0x3, 0x10000], [0x4, 0x7fffffff], 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 00:37:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:10 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x1c}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x0, 0xfffffffffffffdfb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x17) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xfffffffffffffe20, "8c096227cf031444f8290266529c29992b9f5b3cf08e3307c1d11f695f39cbca936f1486b90861e806865f82f70826aa672604ed698cf83c6efa5b49ac77a87d5d71c23fc4bf4a78d60ac9ee8073f80f8d61c3efe4dc927ef924bcab9a679feb6537286da9893393ba2378d9dfbcefc46a9240389de82a86c8a81cb7d2f3fb2918593ea4d8e68db1d96b7ef91955050570f95b0abe680d25eb1675a46636f3b7da5217dca0"}, &(0x7f0000000180)=0xc9) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000001c0)="b00f8d68dfeccc6ad613d36ae6887a153d4122cb65a68ead4f0d2a25955d36c980bf7b09767b29a2e7fea03e8bed282e477578fd0a65ab3f63d0185e917fa4f93ba0e989b329ced84e3604f97188fcfadae1fa59c65df78619645afb522212c6f7ab41fa7b1365327811485370f3a8efc9b6f3c654bff29a63b05274f167386ac1db5d4fc1811835bf8e63cc49d289f03d00e70e240d8a639e3df10a7008b7e60566ece72f1fa695b081aec6"}, 0x20) 00:37:10 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) gettid() r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$unix(r13, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) 00:37:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:10 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = gettid() capget(&(0x7f0000000040)={0x20071026, r0}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000080)={0x5, @vbi={0x6, 0x40000, 0x8, 0x32314d48, [0x3, 0x10000], [0x4, 0x7fffffff], 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 00:37:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x381082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4080aea2, 0x0) dup2(r6, r5) 00:37:10 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c80)=[{&(0x7f0000001840)="699d889236d129b1100d8ec4a2c7a2392a9bb5e634f247fb92a9d5a5b5b8fe0eee8453be92f18e7bc7f6861c81ff278eb51e7a8e1329555009b02c028c3f3750263f2fb9528d7e3b52668e84be6160e3d0d3e77a7f3a547dc581cd21d80df44f45b3fb7eb49e2cd859478fdca0e3ad74cf8d43c766e1a2ee0cdf3b458494c7114320fa657a775586959fb8d226a73cce057580c7d8f5cb416e603e7c123593243b3d8ba39f5bddec858a28622696c2b1fc61cdbae844e148e42099482ac37a29577ab0a3becbdec25048c9e21291000000000000000000", 0xae}, {&(0x7f0000000300)="39d047c68dbbfc1c191f6fb2e32df644f05bda033aea107b23e0ffb62649bb4b07436056d086c7e9a1ca21c9ef872fc115e2798242c6c6faa685cca813c628528d1b96c089095282d472d0d443e5933b039305bc3fff123b39a64767ba1bceb2bd9851f165bad2833ea2e95bdcef8c61c8bd587c1f2726873c7d945ed8339c75436dbafa", 0x48}, {&(0x7f0000000100)="e0e268e22e8f332956695b346482401f41aa43145bf8f0e74cb6c438fd89c2dd3d9c01cde4ea903eda29ef86e6de373342b3938208c7c710ccdfc457dec2d0b10c072fa6cf5ff4bc5b3a4cee36c157bc2c679b72162074f3b95bc65a64e741286b196eaa01a47d76a477e43a90e14aa35a90350b9da20ffa9735cdad5a2e55f9272d5a433a66cbf2546152c3cc5b359ca444b702f7a905943d71073fa31003a5af779a902f2924c1d5f462d9460350309602889a95c34803b8d19efda238ad19987c7d862cfa916a78af9b0e6b17cec03a37a5110342e94df7c53b6ff68d1d33a13d789f9db2ce7ff70e4476", 0xec}, {&(0x7f00000003c0)="ce5bcd2c5806d04f2cb759d3bd368e184a86bfccfbf42572507d016b8859ee12622e1d0284e887f2c355fe5a855e01e5fa6e67d702ef75fdf0bf5286aaa29b1254130ec5b2ddf27855e1a10f23782ed9cadc1858483b06d5b595209e57486d3d97a79223b0a5f7eeaada67c9f47110bca16158f16c9391ae871d0eabd00a91eace68a2000000805ed00323b337861f660805bb7305df841d8f35ecb3932f284f2d071c7d9ff735e47f908039ab0a131fdf5588397688ddb08bff939781ed58e76743ed96cca883d1e081290379bc2f8757e0389d02c18660558d4a38730d4556e52e70630b3d0cbbe0fea256ca55eb2a40cca9eb7a12bef24dae45bfe62b6c49e6c312dc9790e6225bf5ea0cb80ce4330c060cff7f000000000000c28a223e8c8244bafcd7075f055423be1304023621435dc542c3a87fa3831985bca5ffd4d0f5a0b0b55a69753347e33dfbf3f3415a410000000000000000", 0xc6}, {&(0x7f0000001bc0)="382b7af878ffd576d7d3d08d0f153bfdcb90c6693f1198ec96abb210aa67371d0d170b79faf0a2f62360cd67c200a4b707df091cb8dbd5d78f1ead9d60c31295a6e3db6a97bdd8f192d5f784d3b6740df7961c240500712bdc439f1535c56c39de39fe87a1785dc5455b1446754461f6fe3f0fd5a83f019c21b723230932d654c0451a6f4b6dded81b0eb44a7f86053e7d332e2bba38b7e21c5fe7ca1910", 0xfffffd8f}], 0x5, 0x9) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000240)=0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "6cc4874d92ef3271", "a5b97f82a0f27ad6931bc9f6d3ec0a6e", "c04bee04", "e4e5646239d2b894"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 00:37:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:10 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c000000000000000aaaaaa90000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) 00:37:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8001, 0x0) ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000100)=0x1) r6 = dup3(r4, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, &(0x7f00000002c0)={0x6, 0x3, 0xcc7e, 0x1, &(0x7f0000000200)=[{}, {}, {}]}) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:37:11 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b80)=ANY=[@ANYBLOB="7005000024000705000000010000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000800010074626600440802000800060000004ea56b000100000004040200000000007557000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000083840000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f5336a14b33a78e02588b086738000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001000000000000000000000000001000010000000000000000000000000004040200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba0040b3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff18b85ea4b5bb92e9a3821c92b85890da2aa0eaf91cf7fbc3154a130674ebdaaebc4f8b2a0fb09676421f0f0ba5cc6865df08f57312dabc4813edafeb921a83272b91e18c095987aadbc44d0de594cfff7be4589afa42494a2fa358f5ea6341136e147c13b337f8d0cc030f8a04f8236b12275ecc5ae577911d476f34c541b6d9cdc0de8d53d76d2102efe76f5881d91b020a17f8315da11ff05ba8ae085246a9762e80235b00ccb73e83ced0a92284970c699066597926c9bca43fe8195036d56e452db21c82df3bf14d445b7d181302dd62909422df2f37836c682cc4491eedc01a220874e80af7cc990882a0be5d17dde29b1732ef72316bd1d40da0dc170afb5e1d424366ba11e8a43554075c302f7adedd5a9e07f502e383cf142baa304de986f48193be0abcee13e24764f38092f5b1e69ebfec8e3c38b2a217ae278a14ce8d20b43560e81f667c40fde86169ed5814c8d99e5b068d45adade3cd83936027bd6758f68d6011ed3bc0fcd2855400364e54c4e04e66e97f81bfefe457ab147a85883e8e5a79397a56d155c2afb90b639b7bf283ce56c68b774702f6bc9f7bfa2e9fcb4b3e24c7f8303e75711b0b12a45a4a9a1f7efcc271ee8b8a64f0740ffd205b9e79d5356dbaa1d78f1284dd35f3396c04bc720b6d7873208ea5f88747a1d2503d85cac7a82e4d29d1cfb10c8868ca5440bfa6acf31c4f698a31c4d58f4b0600f899ed89f3b00ee647b30b90977c24366ee2870e7c8be8be935582611f38ca919e1df22d6dff8113dbf26d75f0a7f0bfaaa5694c8c250e6f8aeb49308f672626aae79b2558f7784276"], 0x870}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000002c0)={r4, r5/1000+10000}, 0xfffffffffffffd85) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8ec0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f0000000200), &(0x7f0000000280)=0x4) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e0000000150010002cbd7000fbdbdf25647262675f70725f686d61635f736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x151aa622768826dd}, 0x800) sendmmsg$alg(r0, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="b3a61b7c6c2512fe10d68a520456c74930cb84cbcaffc7b00d49bacab81293167f4e6c29ae46557e437b4c110ac3fe6c5a4be3f5288f83113e88b49be6bc8164a9104e5295b75f45e1590bedf9f14894b9ea7e0ceddcdcadcc3bb4404c349dfe2dd81f1ba1917b96fc49", 0x6a}, {&(0x7f0000000440)="d5bd114e0dae9dc1d6f9c17df0c4b9d9f16d960e81d3cf8c5494cf4d", 0x1c}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000640)="8a5202bd54e46f04538a1aeed7dfac6db69774b60412b9fb0d1124af8ea561e5475b9a833a9fae1a7158761e74cbb516b1d17b764ecb6354971c28cb068f6f7b1bd8275eaf1f3856ddb4f31f207e613731e3b1494c4910de207b947d13903d6a18ea755a736dd2c28a509347a8435a25bc3b954217f4044a9d682be3182c588a9843c4376d51368fd35294ea1fbe96ad7a5f66930169478d30a449bf5ef2c661a63ba11e9be3c95da8f3cb41032191e878ff27c827238f66e8de60799e41d990a32f1f4b2ff7d84740fd91edaf453e1199983a79354d8e5c1dbce22dc928e529fe6a0d43f5", 0xe5}, {&(0x7f0000000580)="51064cce26f0778a9ae4c6ca5ff269db9b1c455149002c9e3600617051a4ca339201622da77697d167effc130ba67a2663996b73f9c5d99eb64a505f34100095d7bbdd5f63cff19582458873a356413f960854bfc02ee88ad4c3208825ec8d394e58991890c06960e9b2e6a8317fac8cebad", 0x72}], 0x5, &(0x7f0000002680)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0xfffff001}, @op={0x18}, @iv={0xd8, 0x117, 0x2, 0xc0, "b8daf4e8e9b13d547e047da695f81989635b664160912996b1bff1cf9937286c50d364c095f1d7de33a8554227d3291b7d471d8c6bfc4d686569403534e9f1b8be90df0d1ac1cc1693db93746d3af8c08ba10a4cdd24223a1da7d5bb3f4ec3c8b769ea1c5e298d2fa9e96310b15efe10e7b995fc9e82d7ad7620ca1d0ac7b732aae68823f1ab3105a2d01e0251182b4ef40b6502971b74f32e4c4ab50660e285a159667ed57c1cd56da54fd146f09aa2f6ac7910cbfbfe729f244bba1cb63f14"}, @iv={0xe0, 0x117, 0x2, 0xcb, "7048dbdfcd69b20ab78250e81994e892b9eb79c7f4472a4858d6eb439546c8e453d3939cda742fcc3a9a567901d742980b7c19e99580439ba191b34297022d48c4dcec9ccf2daa1f31b9f9a90de92b874816aa125902674704343b299b19d6eb58adfa7e4eb739a7ed0b70ab2be2825e39823b45a91eee0827bf131ea10eb9cb6ac711ce3b8a0ca4026d6a36a658e14017a4bdbeee5d07ee84ff158ef6d897be4b7516965adfd1acc9cbddb237290550b1540ee95f7377936fa94db945091f595c38268c527a710790a590"}, @op={0x18}], 0x1218, 0x81}], 0x1, 0x0) [ 537.902794][T18526] ebt_among: src integrity fail: 200 [ 537.920440][T18527] ebt_among: src integrity fail: 200 00:37:11 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) unshare(0x200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0xa0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={{0x0, 0x7530}, {r2, r3/1000+10000}}) setns(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00'], 0x2) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000100)={0xfffffffb, 0xa87, &(0x7f0000000040)="73b16b14991803044f40c7cb62aa55d9264f2cf9d8b971ae1d5819c15e95188bfdfdf83037790523e8f01e403a8f6d09f0f0ca2301a03ee4ef95f199b73b697a0d25fe39050ad8a9c88c0bd82dce19272718893fb717b43df48d9682652ec49b0b80f85ba291ab", &(0x7f00000002c0)="4ae1311edfe4322cd91dfc0a534d4a4747c6a33911de059b58126ad6c8bf578b8b627e0f028d7ccb9986110f8e64e28b2cf0409711ecaa19689dca43e44d5ebdbb84a409b925b5df5280d001a4ddae832917af24c2679b9f122977706dc5eaab54d837", 0x67, 0x63}) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 00:37:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 538.140128][T18540] IPVS: ftp: loaded support on port[0] = 21 00:37:11 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) gettid() r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$unix(r13, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) 00:37:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000100)={0xffffffff, 0x7f, {0x57, 0x0, 0x8000, {0x1ec1, 0x9}, {0x7f, 0x2}, @const={0xdf, {0x8, 0x5, 0x8, 0xb}}}, {0xf1, 0x5, 0x6, {0x401, 0x4e}, {0x6, 0x7}, @ramp={0x4, 0x4, {0x9, 0x5a, 0x8, 0x8}}}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x8) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYPTR64], 0x8) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:11 executing program 3: openat$snapshot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(0x0, r1, 0x10, r0, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x20, 0x0, 0x15, 0x5, 0x20}}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000003c0)={0x6, @pix_mp={0x4f, 0x7fffffff, 0x3032344d, 0x8, 0x9, [{0x3, 0x6}, {0x3, 0xac02}, {0x80000000}, {0x9, 0xffff}, {0x8001, 0x401}, {0x9, 0x8}, {0x0, 0xeb7}, {0x6d, 0x380}], 0x5, 0x0, 0x1, 0x0, 0xa1c3c5a32bc43ede}}) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = socket(0x40000000015, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f0000000040)) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x27) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r7 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0xe9067a2e30289942, 0x0) ioctl$VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000002c0)) syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) syz_open_dev$media(0x0, 0x6bff, 0x0) unshare(0x40000000) 00:37:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8, 0x12}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8001}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x10000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) poll(&(0x7f0000000140)=[{r1, 0x8009}, {r6, 0xa221}, {r7, 0x400}, {r8, 0x100}, {r4, 0x2}, {r9, 0x1}], 0x6, 0x3) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 538.745254][T18555] IPVS: ftp: loaded support on port[0] = 21 [ 538.996299][T18545] IPVS: ftp: loaded support on port[0] = 21 [ 539.213126][ C1] net_ratelimit: 26 callbacks suppressed [ 539.213145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 539.225399][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 539.231919][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 539.238463][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 539.245089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 539.251411][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 539.258071][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 539.264472][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 539.271014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 539.277647][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 539.337766][T18555] IPVS: ftp: loaded support on port[0] = 21 00:37:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1ff, 0x2d, 0xb5, 0x7}, {0x0, 0x9, 0x20, 0x1}, {0x9, 0x4, 0xc0, 0x3ff}, {0x3, 0x3b, 0x3, 0x7fff}, {0x4, 0x23, 0x7, 0x5}, {0x6, 0x1, 0x9, 0xd54}, {0xfff, 0x4, 0x8, 0xbc}]}) syz_emit_ethernet(0x116, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/287], 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044154}, 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x4) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x6}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000140)={0x1, r6}) 00:37:12 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1, 0x9a001) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x3) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xd52560816477f169}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r4, 0x21, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x48}, @FOU_ATTR_AF={0x8, 0x2, 0x9fbd79867353047d}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x1d}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x808}, 0x20000040) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000400)=0x6) 00:37:12 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7b9) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdf, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/pros/capi/capi20\x00', 0x1, 0x0) 00:37:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:12 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0x65}]) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x7) 00:37:12 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r13 = gettid() openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) tkill(r13, 0x15) 00:37:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000400140008002e0001000000941b29137336e0e879a2ab339b94ec286708f888665d7e2ffbf81487f3afef747112223cf9662dd1ae353620895b69dd966c8104bfa8fc7eba41d6103acc609f1dfda39069daa6f1a044d806805d02be1f2a3ab26d0c0bcca8da2119eaab064929bc586abbe85e5873d9736c7e95eefe4b4efbc1f0014c72592ee83aa64b47691f3c7a9add06c79a3f195a00"], 0x2c}, 0x1, 0x0, 0x0, 0xd94db4d290b9056}, 0x0) 00:37:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}], 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x2a54b6fd6b55c4c9, r3) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0xffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x8}]}}}]}, 0x44}}, 0x0) 00:37:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4c23, 0x0, @remote, 0x80000}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000000c0)={0x9400000000000000, 0x4000, 0x5b64, 0x30902358d8709005, 0x15}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="4a046bf28aad34be69d5edaa6ee9634f515a1d5d5a1af99f1d42a9238fc68c30c598391fbcc62fea1fe35a8c811b09657ab7e8075bb93665de38f1df1ab28503f96be31ee06ec5d09eb361b6d54765c7bc04feceaabe8d156d1e2f717da6f2fa63d725e9065f3ff187d2e65788cb870a79fe861d5a16b09c342569bdc8a102d829b4f2786568ed7e64fcce4689eb967e9e0bf7789116c376764d9a875ad996520ecb633f98ccc482d71b073ddb3fd88531cd6e5e625ad7892eab"], 0x2de) 00:37:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x29a, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000190007041dfffd946f61050002000300fe0200000002080008001e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:37:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 540.353350][T18612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:37:13 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20001, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x5) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r5 = dup3(r4, r2, 0x0) getsockopt$packet_int(r5, 0x107, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f0000000100)=""/209) r8 = fcntl$dupfd(r6, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0xedc0) 00:37:14 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r13 = gettid() tkill(r13, 0x15) 00:37:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:14 executing program 0: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xdb7, 0xa, 0x0, "c66ae9f3d8f6c64259c1c66f0608fc270dce23bfc8ed984e84d1cc0a267151ee", 0x398f4d24}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_SNOOPING={0x8}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x8}]}}}]}, 0x44}}, 0x0) 00:37:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:14 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) unshare(0x8000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000000080)={{0x1, 0x0, @descriptor="14bc054fcd9af4e4"}}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8ec0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x4, 0x3, 0x1, r9}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10001) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r10, 0x0) [ 541.493688][T18633] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 541.502027][T18633] netlink: 'syz-executor.0': attribute type 24 has an invalid length. 00:37:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100002400070500"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x120}}, 0x0) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r0, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8ec0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x8ec0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r9, r11}}, 0x18) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:37:14 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1d368f6800000000000000fcffffff00"]}) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000240)={0x7, 0xfbfc, 0x9}) fcntl$getflags(r3, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000140)="c7485d4140c6fac49b60b35adae19fa0117a33ff85155a987d5c5410f8bc1bdc9f1a279262979b9be8e2080a2ee3695473e3a4136f3b6ba4edce7d34dccd239bbabd0566a140fa1768790fa1b984135cd827d237e859ec1dc7de9ec8347ded8d4e9c15e8d462f61199e2f211f95c4605a14b3dde1596aeb8bec06e19c8e2bdf433893cb577d85b2045cdf3f13cc71abd567f7009af01970d0c54b32e4b17d22a5bd03575d5f7b89e3f8464ddb2c5c036eaaee9756df06ca15a042fb1ddd17c4bd9b6a16f5afdbf301bb64a91d323edc78334ffcd4c70ad0ceaa5f4fa96c284ed95a9b55adb430cf3980c70", 0xeb) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x42040, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) fsetxattr$security_ima(r4, &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@sha1={0x1, "cd8e621b11af92b441d01d054d16641e059580c1"}, 0x15, 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) move_pages(0x0, 0xd4, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 00:37:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:14 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) tkill(0x0, 0x15) 00:37:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) 00:37:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x48524742, 0x280, 0x168}) r1 = getegid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) setregid(r1, r2) 00:37:15 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000080)={0x3a, &(0x7f0000000040)=""/58}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x8) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) 00:37:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e265600000800490d524fa45780fbe1924a1f42bad5b433d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627dbaaf582393a2944b5f39be22eea4717fbc7bf1744386f4f70511a75d9afc60ba10f1fa55313f5683a7969a74a473955c4015cc0000000000001dbc3d7b48529175c97a1e48f918018d49cac053da9f58ae69f4c78751203b47c9a8a52a184c6f4a8d9e1398fce2ab8959853f2d04ef26ac028d938e730b8e435aeb43f2ad789900000000000000000000009450003333ece2f9488cdb1cf05a5d1cf6acadfe9ea25556354da491f265617cb943014b01b02587b3d3692e3c672da61a09aabf2d0a3bbc9dd3ad0d8f809cbea5aab8fd639ea795e57d6531a19783334b006ab7fd7ef38d6f62077cbf0510641e985dfea5e3722522c51ad91ad113329b514b019d328e0d27f47d5e8f0c22cba7ffd080fae5855f0a7ab6fa39d35f416b9f2326acde31c7e41de635cf7020f1845eec62caad1cc30bb1eb5f1876ed71de3fd1bbbb02dfd40c0e703228e01db8c05d33d0ba2b05a001fc321682d616846ce8589971cee164300d5dce35141d7c4f77303a3bd6162424971f14562ecc73e3f8511ab3560ec784f033163959f095d1f3148f0b0cc4aa643b87e8f6273a354778337ec84bede9a73eca5bd425c885f94a771298c5e16af73439c3785db7e8927718ac1ecba78f1e2bcfd635cd540fe90e334702db1e1b16a04ed66a2403531f58e5720f00d85707a92ee43e2f21f30fb36b074ece3125b78bcc52330ef597f8e39f21c3b9188b38ce140edb91ab2690b483b913a0e591525ffb0fc9bcb28b2fc61a6f701f6dbf43d33487b401992f0a93d35510287bfe868738269e4cd3a2edcbc037e0277093de4f8791f7"], 0x31a) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000540)="38000000000000000000f99f2b9c771dbc88b698341f5aff07000000000000eceaaf4611f7f43b35858e49d330e9a152e3e109a3d59a2d2941539f3c4190c53860f28e", 0xffffffffffffff2b, 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000800c5011, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x81, 0x0) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) umount2(&(0x7f00000003c0)='./file0\x00', 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x2, 0x0, 0x6, 'queue1\x00', 0x800}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x0, 0x80000, 0x61) 00:37:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 542.375279][ C1] sd 0:0:1:0: [sg0] tag#7597 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 542.384979][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB: Test Unit Ready [ 542.391547][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.401380][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.411148][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.420996][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.430751][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.440542][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.450297][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.460088][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.469848][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.479646][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.489395][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.499194][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.508962][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.518751][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.528598][ C1] sd 0:0:1:0: [sg0] tag#7597 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 00:37:15 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x12040, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{&(0x7f0000000040)=@ethernet={0x6, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000180)=[{0x28, 0x80, 0x400, "fd9504d8952088c4da4086ae8110d4239ff8eb0d7bcd"}, {0xa0, 0x6, 0xfff, "a5e24ab9b07de04c289336d4ffafb4064cbfa98235a4f3fa2fb0e46dbc60094e23431889f3c4dad467ecc1f68f64ee3f8ede6fc3803c5c8f552fd62ac1ab267b6b0423d83e62e334d13ecb11ef65fd80446ef5655beb3007b528e1f456d373f8640be7c47b0eab37575e92d58ce2a7a7f204926e97519112315f397c791eef52f03d5598b1b19e837c3d279295bd52"}], 0xc8}}, {{&(0x7f0000000280)=@isdn={0x22, 0x7, 0x6, 0x8, 0x4a}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000300)="cfb100a6fd6023dde851ac99d42c174d3d2e209d4b3078f01b326f08c40194d7fde88dd503e5377914000a04", 0x2c}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="6546c14325af69d80cebfdecf1030bb88184951d71ebf17ef60c7cee59a6b91fbca503c199491a45fde6b6199496945c11f40e7c91bc3daace847487353c8aaf5851a3753fd8bd48c9404ce44a2411d4f7f86d6c45daa69adc2534239e2eb7a8bef6160bfdc22d11007e4dd64c1000581e2fbee27a8f1d4e73253573f77adbfcc38a09f31c6c9d386dbd84b14a25bc9d44c01fb0904d6610457b02e51fe2461f601fb1fe9360ed6851ebc94873f521101a3727", 0xb3}, {&(0x7f0000001500)="93ea2d984ac7f4fd0688286e0fcca5615c47f1b29129da6f5f677b1948521046ad99991e455521b3db2ce0f19c10087a238dc11b507a03f480b4e7a13e164651223ec218e13d553bfea7bb4ce46c6266812259e8c59a8b1829057967ab2d66c67ccfca0a0280409cf2e446ae8d0aa26605d99cb6f8f5cc00ad47ff698e", 0x7d}, {&(0x7f0000001580)="445f041f3509ea5da9fd970ec067798d07b9af15f1cc60e22edb49b9586360f7484c5ab4aa6c2871caf47c5018fa1138f394ecac3e51dd64c6bb2bdca33cedd680ca885f63b5c850854108614d47405517d36b85a6bdfea4cab9dba64d8e27443a9144f131155d90d91fe240fae050ab0b2864dab0cae605b140b27fa2afe59eea566e028fe5907f93932cc851a0ed0ecbeb5dd0894db82986fad76621759269c6450dd947fd03b5ec2b51ae6f46c7cf6be4716be0bda54d83545041ae1c0859842f30aa1a1b046103d0ea67cc243f3d02fb24bb71a01a43c04e32b3cf22b30d9cd2d7e151cdcee11cc1daadd96cebaf3a97ecbf22", 0xf5}, {&(0x7f0000001680)="72219e48885ad50947caa83ea961d3eafefc85c0766775215b53e467d48f4e3afa69a9792d36edbcba4d7e797364d9979694220afc7e12cacf543858a09b6f342a4b79116e8ae603b6eaa0689b98f7968483612e9d3d86071b7eb03e78f74b5dad973616dede047d00e658e00ddcfa8853230a7f1b8c66e58c04d291d57b3a6e65d01750ad40baf746e74e98fd4ef99eae7036c98aa07113afead5bbd9dbf690d7b1c2eaaacb300b5d3f10934480c793254a85e0593de22fa13303928b9222bf5231eb715f00932de0b1", 0xca}, {&(0x7f0000001780)="00a0eb6ce4740140427df5c1d61bf9f38e1126711e0712354ba1d32830946f83669d21cce8bc4180758310548e84690b2c3d2d4997db22ffe9b29948d4b5311544bad7f653123a5990d4f99708e5f9b8", 0x50}, {&(0x7f0000001800)="9ee69dc3d6bcb8985f1e6cc5a529ca4de2b6b68ee5909c6fdf14364414fe7d039d0ffbcd3863448e999a5f3ad8e137621870f9071c11f0ebdc52a1995e6798a5dd83ecef5a5e32ca671f9ee5486254f55a45a5f6", 0x54}], 0x8, &(0x7f0000001900)=[{0x78, 0x0, 0x1, "9ddc63e27c83ae32e7b97cfdfeed0462e1212f4abe78ae8b32948ceadab3bf59d94cda057776f2de38493870a12b7cd1df130f32ea2147dec8c4b7514225914d01f0d26f80811cc1e62434a8e823fcdf3571e651afab9f56458b0f3e3706522b1f6316b0"}, {0xf8, 0x87, 0xc000000, "59b2235a6dbe86001dbc3b8f241ca34eddb712de49566268cc660ee129599a464b69c6b91d7db94096efba923e2c4695c15661e95828c7b2ff14bc0d5824894d6ae816fabb9384dadd66c06c8b9b146a86b0999e3941b6f58812e2e099c578bcd53923137f2686598141d4abaa83b6b98161f21b37b584904afa315197a162446356cf7f8d1d4b867275969d4e5f04bed32d6c142659b5296fae860555bc86a8d9e1f54653036a3f5a186d321850dbf390ba30c12f992c9b2f24e2713743ba07ea178b7f91708f77c22fbcfed91307f6f1ee3767222e37a8d1934bca78b458800c5fd5650e20"}, {0x1010, 0x1, 0x7, "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"}], 0x1180}}, {{&(0x7f0000002a80)=@tipc=@name={0x1e, 0x2, 0x3}, 0x80, 0xffffffffffffffff}}], 0x3, 0x4000000) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 00:37:15 executing program 0: syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) timer_create(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000010000000008000a00", @ANYRES32=0x6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) fdatasync(r3) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={r8, 0x2, 0x7}, &(0x7f0000000140)=0x8) inotify_init() ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc0000080) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x8001004, 0x80, 0x2}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) [ 542.778972][T18686] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.788750][T18686] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.839076][ C1] sd 0:0:1:0: [sg0] tag#7598 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 542.848743][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB: Test Unit Ready [ 542.855362][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.865117][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.874854][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.884600][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.894346][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.904077][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.913799][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.923555][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.933382][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.943143][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.952925][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.962693][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.972484][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:37:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 542.982215][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.992010][ C1] sd 0:0:1:0: [sg0] tag#7598 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 00:37:16 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) tkill(0x0, 0x15) 00:37:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d8", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 00:37:16 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0xfffffffb}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) 00:37:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r7}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, 0x0, 0x0) bind$inet(r9, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r9, 0x0) r10 = dup3(0xffffffffffffffff, r9, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) readv(r11, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r11, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r10, 0x40086424, &(0x7f0000000300)={r12, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r8, 0x4010641c, &(0x7f0000000200)={r12, &(0x7f00000001c0)}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000240)={r12, 0x4, &(0x7f00000000c0)=[0x0, 0x7fffffff, 0x9, 0x1000], &(0x7f0000000100)=[0x0], 0x20, 0x5, 0xfffffffe, &(0x7f0000000140)=[0xfffffffa, 0x1, 0x10001, 0x5, 0x8b], &(0x7f0000000200)=[0xfffff6b9, 0xafe2]}) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321e22e2f6681c1b3bb80faeff90b0002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:16 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/915], 0x18) [ 543.707950][T18709] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.717664][T18709] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.744554][ T31] audit: type=1326 audit(1574555836.802:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18702 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 00:37:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) setns(0xffffffffffffffff, 0x40000000) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747b2b247c888c96001ba3f3d98"], 0x22) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) ioctl$TIOCLINUX7(r9, 0x541c, &(0x7f0000000200)={0x7, 0x20}) ioctl$TCXONC(r5, 0x540a, 0x1) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x101001, 0x0) ioctl$SG_GET_SCSI_ID(r10, 0x2276, &(0x7f0000000100)) 00:37:17 executing program 5: r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="82022e2f6669030000000000000019c6d30c583f42412447078c51092949aa033f10b1b518cccd9eb50d9e7fd6f721943ff99d"], 0x10) shutdown(r0, 0x2) 00:37:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) 00:37:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000063c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x4}}}]}, 0x34}}, 0x0) 00:37:17 executing program 0: socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xae, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000000300)=[{0x58, 0x101, 0x1, "6d5017fc31e6c1d08b3597e23f06ee6aae00929476aa559afc248082e3fda0c2fa814b0d445a5d49b105de350ae3aba9169e3f3e33e1c40610a96febd067924458886da93677"}], 0x58}, 0x24001854) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000}, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) mkdir(0x0, 0x6) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 00:37:17 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r3) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) tkill(0x0, 0x15) 00:37:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 544.409457][ T31] audit: type=1326 audit(1574555837.462:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18702 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 00:37:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000063c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x4}}}]}, 0x34}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 00:37:17 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x1d7) sendmmsg$inet6(r0, &(0x7f0000002040)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="8a204ae35741eb97279d2e8aa90cdb1e"}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)='>', 0x1}], 0x1}}], 0x1, 0x60) 00:37:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xfffffffb, 0x8000001, 0xfffffffe, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc000000, 0xfffffffd}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8ec0, 0x0) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x77, &(0x7f0000000040)={r11}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r11, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r12, &(0x7f0000000280)=0x4) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 00:37:17 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x144) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/19, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)={0x77359400}, 0x10) mknod(0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/gro<#\xfbW\xdd.\xa5\xd4\xa3\x10\x1f3\x9dhc\xaf\xa4\x1b\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5', 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000100)) fchdir(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x42042, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 00:37:17 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, 0x0, 0x0) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x10001) 00:37:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) socket(0x0, 0x0, 0x0) 00:37:18 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x2db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x4000000000000c9, 0x0) 00:37:18 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0xd) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r12 = gettid() tkill(r12, 0x15) 00:37:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) 00:37:18 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@loopback, 0x8, 0x0, 0x0, 0x4}, 0x20) syz_open_procfs(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000100)) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000600), 0x0) [ 545.452973][ C1] net_ratelimit: 17 callbacks suppressed [ 545.452994][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 545.465046][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 545.471443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 545.477720][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 545.484260][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 545.490558][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 545.497070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 545.503339][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 545.509720][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 545.516040][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:37:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x69, 0x0, {0x0, 0xfffffffe}}, 0x14) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:18 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, &(0x7f00000020c0)=""/35, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = eventfd(0x0) r3 = dup(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r5, 0x8200) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r6 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8000fffffffe) r7 = eventfd(0x0) r8 = dup(r7) utimes(&(0x7f0000000300)='./bus\x00', 0x0) r9 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8000fffffffe) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000ac0)='trusted.overlay.upper\x00', &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1, 0x1) creat(0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) 00:37:19 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 00:37:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) sendto$inet(r3, &(0x7f0000000000)="d33aead643afb01491cbae6df18d094271b6f438166fd40ba41a452d9061cee960303e9b6836189745adb7e4c5bf", 0x2e, 0xd000, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b4091d", 0x30, 0xffffff3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2d]}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "f366ff", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 00:37:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x5f) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:19 executing program 5: fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) creat(0x0, 0x10) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lsetxattr$security_ima(0x0, 0x0, &(0x7f00000003c0)=@v2={0x5, 0x1, 0x0, 0x20, 0x3f, "d237e18bf546926f6a62de7fde2b4d93a9f459a4646018c71b802f833c22127728b0d83eb9eaa61ea78fbe4e83b0fcb762cf5235fb821616a0e18bccfbb61f"}, 0x49, 0x5) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x68, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a77, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT=r2], 0x23) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000440)="ed088912a629afb123be9f1e9ca1096aed44e850c2fb8332bbe0b92ba30dc36607a080ba99b577945c954f586a433deab493ebe56001681bace86207ef0405e148c9e1ac682c3817f0e8c514e84196e00221be5e8629", 0x56, r1}, 0x68) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:37:19 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$kcm(0x29, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xa00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02003f00000000000000000000002100000000000000c0", 0x31}], 0x1}, 0x0) [ 546.335263][T18819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 546.343030][T18819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:37:19 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r11 = gettid() tkill(r11, 0x15) 00:37:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:19 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) semget$private(0x0, 0x19a99d70a05b7f67, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@dev}, 0x14) dup2(r1, r4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000400)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000600)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) socket$inet_udplite(0x2, 0x2, 0x88) fstat(0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, 0x0, 0x0, r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) socket(0x10, 0x2, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000200)=0xc) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) getgroups(0x8, &(0x7f0000000640)=[0x0, r7, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r9, &(0x7f00000000c0)={0xc}, 0x18) r10 = openat(r9, &(0x7f0000000500)='./file0\x00', 0x0, 0x84) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000740)) timerfd_create(0x0, 0x0) r11 = timerfd_create(0x0, 0x0) fstat(r11, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 00:37:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x1b) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001940)="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", 0x135}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1}, 0x0) sendto$inet(r0, &(0x7f00000012c0)=' ', 0x1450, 0x3075, 0x0, 0x0) 00:37:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:19 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000002ec0)=@nfc_llcp, 0x80, &(0x7f00000032c0)=[{0x0, 0xffffffffffffff4b}, {&(0x7f00000008c0)=""/218, 0xda}, {0x0}], 0x3}, 0xffffff98}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) semget$private(0x0, 0x19a99d70a05b7f67, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) dup2(r1, r4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000400)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() setresgid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000600)) geteuid() getegid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000200)=0xc) setresuid(0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000640)=[0x0, r7, 0x0, 0xee00, r8, r11, 0x0, r6]) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@empty, @in6}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) timerfd_create(0x0, 0x0) setresgid(0x0, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') 00:37:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:19 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7fffffff, 0x400) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x12) 00:37:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x1, 0x400) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000180)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) io_setup(0x0, &(0x7f00000004c0)) getpid() ptrace(0x10, 0x0) 00:37:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) socket$unix(0x1, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="12000000faff000000000000000000007f7bd68524db8f0ef4ffa8f820213cf85ced6918b500243128e0897fa1599bb6703b4927d6c4a89c6aeac4412d504e1cae0ab8bef9f53ee7798ea9a5fd481ae1a49f2912b2daad7b72e310e84c14be5ed7463a6834dca2986a2e8ec32918e744026110d96138a904bfe949a6796529ed73dc0209e2012fbda4503863e425afae1dee50505cdd443fb5dfc078eed8a7a60a0726ff5aa6976e727b86c61d4690aec9e313392d80f47d80edfebb78c6851e9d1b9da68d13b658679e3dd9b61913"]}) r7 = signalfd(r6, &(0x7f0000001380)={0x800}, 0x8) fcntl$setstatus(r7, 0x4, 0x44800) ioctl$TCXONC(r5, 0x540a, 0x1) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x7) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x3, 0x1, 0xfffffff7, 0x6}) 00:37:20 executing program 5: clone(0x1ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/66) 00:37:20 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r10 = gettid() tkill(r10, 0x15) 00:37:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:20 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x144) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/19, &(0x7f00000001c0)=0x13) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)={0x77359400}, 0x10) mknod(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/gro<#\xfbW\xdd.\xa5\xd4\xa3\x10\x1f3\x9dhc\xaf\xa4\x1b\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5', 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100)) fchdir(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x42042, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0xb79}) inotify_init() r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x70bd26, 0x0, {}, [""]}, 0x1c}}, 0x4000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40015}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000001c}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004804}, 0x80090) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r4, 0x0) 00:37:20 executing program 3: clone(0x100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:37:20 executing program 0: ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x0, 0x1, 0x200, {0xfff}, {0x3ff, 0x1000}, @const={0x800, {0x0, 0x2, 0x4, 0x8}}}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) 00:37:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast}, 0x10) 00:37:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:20 executing program 0: 00:37:20 executing program 0: 00:37:21 executing program 0: 00:37:21 executing program 0: 00:37:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:21 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r10 = gettid() tkill(r10, 0x15) 00:37:21 executing program 1: socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc02b2fd0d"], 0x22) recvfrom(r0, &(0x7f0000000200)=""/199, 0xc7, 0x40012140, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:21 executing program 3: 00:37:21 executing program 0: 00:37:21 executing program 5: 00:37:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:21 executing program 0: 00:37:21 executing program 5: 00:37:21 executing program 3: 00:37:22 executing program 5: 00:37:22 executing program 0: 00:37:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) ioctl$TCXONC(r9, 0x540a, 0xfffffffffffffff7) 00:37:22 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r10 = gettid() tkill(r10, 0x15) 00:37:22 executing program 3: 00:37:22 executing program 5: 00:37:22 executing program 0: 00:37:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000004000)) 00:37:22 executing program 0: 00:37:22 executing program 5: 00:37:23 executing program 0: 00:37:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 00:37:23 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0xfffffffffffffeb1, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 550.112544][T18956] encrypted_key: master key parameter 'trusted:' is invalid 00:37:23 executing program 3: 00:37:23 executing program 3: 00:37:23 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r9 = gettid() tkill(r9, 0x15) 00:37:23 executing program 0: 00:37:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0xfffffffffffffffe, 0x7, {{0x10001, 0x0, 0xb8, 0x8, 0x100, 0x7fff, 0x80, 0x4}}}, 0x60) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) r7 = dup3(r6, r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r7, 0x540a, 0x1) 00:37:23 executing program 3: 00:37:23 executing program 5: 00:37:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000004000)) 00:37:23 executing program 3: 00:37:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x400000000080803, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d020b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) [ 550.755502][T18977] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 550.763854][T18977] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.5'. 00:37:23 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x12, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xfffffffffdfffffb, 0x32, 0xffffffffffffffff, 0x0) [ 550.873885][T18982] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 550.882050][T18982] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.5'. 00:37:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0xb9f67afda3d09ad2) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000000c0)={0x3, 0x69, 0x3}, 0x14) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000180)={0x108}, 0xffffff02) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r5, r1) 00:37:24 executing program 3: syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) timer_create(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000010000000008000a00", @ANYRES32=0x6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) fdatasync(r3) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={r8, 0x2, 0x7}, &(0x7f0000000140)=0x8) inotify_init() ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc0000080) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x8001004, 0x80, 0x2}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) [ 551.310711][T18995] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 551.323016][T18995] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:24 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r9 = gettid() tkill(r9, 0x15) 00:37:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xaddf}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:24 executing program 0: r0 = io_uring_setup(0x64, &(0x7f0000000040)) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x400, 0x0) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x81}, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r0) 00:37:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000004000)) 00:37:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r0, &(0x7f0000000000)={0x8001}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c001000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="980112000c000100697036746e6c000088010200080009002900000014000200ff02000000000000000000000000000108000800000000000800080000000000140003000000000000000000000000000000000114000200ff010000000000000000000000000001080006000000000014000300ff00000000000001b5fd02000000000000000000657bc88200dc09524a7719808b3b479046175ef19d39646e4145de20082ec6b7f78837f83f61a3d03c93f635128ddef209caa8bf1eeb04000000d68f2650971b2dce98993030bbcfe36ba203eb8620889af838791e09905e2794c88f61a772e01245aa94c354c375872a746049418e4a80ca23", @ANYRES32=0x0, @ANYBLOB="0800140000000000030004000000000008000500000000000800140000000000080007000000000008000800000000000800060000000000080009002900000008000800000000000800070000000000080007000000000008000800000000001400030000000000000000000000000000000000080010000000000008000400000000000800050000000000080010000000000008000200", @ANYRES32=0x0, @ANYBLOB="080014000000000008001200000000000800040000000000080014000000000008000f000000000008001200000000000800120000000000080014000000000008001100000000000800040000000000080004000000000046fd0f000000000008001400000000000800090029000000"], 0x1c0}}, 0x0) [ 551.561364][T19005] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 551.569580][T19005] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 551.577821][T19005] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.5'. [ 551.693257][ C1] net_ratelimit: 15 callbacks suppressed [ 551.693278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 551.705361][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 551.711735][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 551.717969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 551.724435][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 551.730608][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 551.737048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 551.743286][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 551.749652][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 551.755879][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:37:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000000c0)) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c10700000000000000f356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, 0x0) [ 551.996528][T19018] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 552.005212][T19018] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 552.013601][T19018] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.5'. 00:37:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000004000)) 00:37:25 executing program 3: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r9 = gettid() tkill(r9, 0x15) 00:37:25 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x200041) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @rand_addr="2cbd6f864165b789a94d239f17940a09", 0x5}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e22, @rand_addr=0xfffffffb}}, 0x1, 0x9}, &(0x7f0000000280)=0x90) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$EVIOCGREP(r1, 0x4004743b, &(0x7f0000d1df52)=""/174) 00:37:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0dffed020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x20000, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000140)) 00:37:25 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x789, 0xc208, 0x9, 0x10000, 0x0, 0x2, 0x1, r8}, &(0x7f0000000380)=0x20) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r9 = gettid() tkill(r9, 0x15) 00:37:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x854a, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x88e8, 0x7}, &(0x7f0000000180)=0xc) 00:37:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, 0x0) 00:37:25 executing program 5: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x200, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfffff000, @empty, 0x3}, 0x1c) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x541080) write$P9_RLERRORu(r0, &(0x7f00000000c0)={0x1a, 0x7, 0x1, {{0xd, '$*\\mime_type-'}, 0x2}}, 0x1a) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xf1, 0x8000) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x188, 0x0, 0x102, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xad}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x64}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb54}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd886}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x14d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x86}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x40, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000440)={{0x77359400}}, &(0x7f0000000480)) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000004c0)=""/12, &(0x7f0000000500)=0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000540)='/dev/snd/controlC#\x00', 0x4, 0x101000) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000005c0)={{0x6, 0x4, 0x6, 0xffff0e5b, '\x00', 0x1000}, 0x3, 0x20, 0x8, r4, 0x2, 0x5, 'syz0\x00', &(0x7f0000000580)=['\x00', 'mime_type\x00'], 0xb, [], [0xa1c, 0x9, 0x7f, 0x1]}) r5 = socket(0x1, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x8000, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x127}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb43}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbc}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x769}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.max.descendants\x00', 0x2, 0x0) signalfd4(r7, &(0x7f0000000900)={0x9}, 0x8, 0x800) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x92d01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f0000000980)={0x3f, 0x2, 'client1\x00', 0x3, "895fc26f9f3d12a1", "b0d07d44c8b7293d097bebf7561e97952ec5c5f7cde7885b4394ba5c91209203", 0x0, 0x1}) r9 = syz_open_dev$vbi(&(0x7f0000000a40)='/dev/vbi#\x00', 0x3, 0x2) fchdir(r9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r2) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/mixer\x00', 0x40000, 0x0) recvmmsg(r10, &(0x7f0000002340)=[{{&(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b40)=""/150, 0x96}, {&(0x7f0000000c00)=""/45, 0x2d}, {&(0x7f0000000c40)=""/185, 0xb9}, {&(0x7f0000000d00)=""/159, 0x9f}], 0x4, &(0x7f0000000e00)=""/71, 0x47}}, {{&(0x7f0000000e80)=@isdn, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/188, 0xbc}, {&(0x7f0000001fc0)=""/200, 0xc8}, {&(0x7f00000020c0)=""/191, 0xbf}, {&(0x7f0000002180)=""/81, 0x51}, {&(0x7f0000002200)=""/72, 0x48}, {&(0x7f0000002280)=""/61, 0x3d}], 0x7}, 0x9}], 0x2, 0x1, 0x0) r11 = semget(0x1, 0x4, 0x8) semctl$SEM_STAT(r11, 0x4, 0x12, &(0x7f00000023c0)=""/96) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002440)='/dev/sequencer\x00', 0x204d80, 0x0) readahead(r12, 0xffffffffffffff05, 0x4) [ 552.738980][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:37:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xc0000, 0x0) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) r6 = dup3(r5, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r7) ioctl$TCXONC(r6, 0x540a, 0x1) [ 552.885577][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:37:26 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c654dcb6c5f8843356f7164206563727d7074667320747275737465643a757365723a2030823d24cf0323f9a030303030303030303030303030"], 0xfffffffffffffe8a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) 00:37:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000008000f98ad56dbbe4924455d0000000b78f0051ea00", @ANYRES32, @ANYBLOB="0000000000000000e3ffffff0214a4b3009bc13e04000200"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$peek(0x1, r1, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "11ff4e", "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"}}, 0x110) [ 553.327044][T19068] encrypted_key: insufficient parameters specified 00:37:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='bcsh0\x00', 0x3, 0x200, 0x81}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="00000000008000000a00200eb88c8f00280016000c0ce69aeb92ecaa44001f00000000000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) [ 553.415451][T19068] encrypted_key: insufficient parameters specified 00:37:26 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r9 = gettid() tkill(r9, 0x15) 00:37:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000100)) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000140)=0x80000001, 0x4) [ 553.614543][T19075] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:26 executing program 0: exit_group(0x80000001) keyctl$dh_compute(0x17, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif_(_\x00'}}) 00:37:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, 0x0) 00:37:26 executing program 3: mq_unlink(&(0x7f0000000000)='\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x4, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80230}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="14758b7500003af41d159eb7a68e6b6e8a7f3d331efdef12b49a9621634a9192ed0ac131f6776f668b34e28de5870c671c6b4798bdbda2b4a577a7e84b4b84375962903e7c0be6eafbb98a0675e4555d28fd77358c543f9042c6dc44dd2fabad24a2b01c3296ebbc23f903982b000000"], 0x14}, 0x1, 0x0, 0x0, 0x2004}, 0x2000c040) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) r5 = socket$kcm(0x2, 0x80001, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x82, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f00000004c0)=""/105) fcntl$getownex(r6, 0x10, &(0x7f0000000740)) r8 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = accept$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, @empty}, &(0x7f0000000840)=0x10) splice(r11, 0x0, r10, 0x0, 0x8ec0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000700), 0x4) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000680)=ANY=[@ANYPTR64, @ANYRES32=r8, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES64=r2, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESOCT=r12, @ANYRES16, @ANYPTR64, @ANYPTR]]], 0x8) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfe, "4ffa3c", "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"}}, 0x110) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000780)='/dev/audio\x00', 0x22000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r13, 0x5411, &(0x7f00000007c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c0000001400090500000000030000400a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7c}}, 0x0) 00:37:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="a60c7e87c21200007e0000000000004a658e7b0000"]}) socket$netlink(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000540)="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") r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r5}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) [ 554.129293][T19096] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 554.137708][T19096] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 00:37:27 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffec1, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a28093020600f2ffff7f01020b00000a0012000200280014000000190005407fffffff0022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x300111, 0x4) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 00:37:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r3, 0x4000000000000002) r7 = dup3(r6, r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setxattr$smack_xattr_label(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000200)={'/dev/ptmx\x00'}, 0xb, 0x1) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0xfff9, 0x6, 0x7, 0xfffffffa}, {0x6, 0x0, 0x7, 0x6}]}) r10 = syz_open_pts(r9, 0x100) ioctl$TIOCGPTLCK(r10, 0x80045439, &(0x7f00000000c0)) ioctl$TCXONC(r7, 0x540a, 0x1) [ 554.276885][T19093] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:27 executing program 4 (fault-call:17 fault-nth:0): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = getpid() sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000013000100"/20, @ANYRES32=r1, @ANYBLOB="0000f40700000000080027000000000008001300b7c92a52aa75b96ca723e27232810b1429e664a97879dc41950456edfc7a14d1cc3f8a73c8e0ef0fa99f1ea05601d0bdc81c88d9161c1876f98c7e", @ANYRES32=r2], 0x30}}, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0xfffff9c7, 0x2, 0x64}) [ 554.435681][T19109] netlink: 'syz-executor.5': attribute type 39 has an invalid length. [ 554.465451][T19109] netlink: 'syz-executor.5': attribute type 39 has an invalid length. 00:37:27 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000002680)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x3c, 0x0, @rand_addr="4e04bc2e787a7ad7a136086940632b44", @local, {[], @gre}}}}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x10) [ 554.561594][T19101] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 554.585792][T19106] FAULT_INJECTION: forcing a failure. [ 554.585792][T19106] name failslab, interval 1, probability 0, space 0, times 0 [ 554.600683][T19106] CPU: 1 PID: 19106 Comm: syz-executor.4 Not tainted 5.4.0-rc8-syzkaller #0 [ 554.608603][T19106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.608603][T19106] Call Trace: [ 554.608603][T19106] dump_stack+0x1c9/0x220 [ 554.608603][T19106] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 554.608603][T19106] should_fail+0xa3f/0xa50 [ 554.608603][T19106] __should_failslab+0x264/0x280 [ 554.608603][T19106] should_failslab+0x29/0x70 [ 554.608603][T19106] __kmalloc+0xae/0x410 [ 554.608603][T19106] ? kzalloc+0x7c/0xe0 [ 554.608603][T19106] kzalloc+0x7c/0xe0 [ 554.608603][T19106] tls_get_rec+0x10d/0x9d0 [ 554.608603][T19106] tls_sw_sendpage+0x5f2/0x1b70 [ 554.608603][T19106] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 554.608603][T19106] ? bpf_exec_tx_verdict+0x1c80/0x1c80 [ 554.608603][T19106] ? bpf_exec_tx_verdict+0x1c80/0x1c80 [ 554.608603][T19106] inet_sendpage+0x1ab/0x2c0 [ 554.608603][T19106] ? inet_sendmsg+0x2e0/0x2e0 [ 554.608603][T19106] sock_sendpage+0x1f1/0x2e0 [ 554.608603][T19106] pipe_to_sendpage+0x342/0x470 [ 554.608603][T19106] ? sock_fasync+0x250/0x250 [ 554.608603][T19106] __splice_from_pipe+0x484/0xe80 [ 554.608603][T19106] ? generic_splice_sendpage+0x2d0/0x2d0 [ 554.608603][T19106] generic_splice_sendpage+0x1d5/0x2d0 [ 554.608603][T19106] __se_sys_splice+0x2141/0x3320 [ 554.608603][T19106] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 554.608603][T19106] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 554.608603][T19106] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 554.608603][T19106] __x64_sys_splice+0x6e/0x90 [ 554.608603][T19106] do_syscall_64+0xb6/0x160 [ 554.608603][T19106] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.608603][T19106] RIP: 0033:0x45a639 [ 554.608603][T19106] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 554.608603][T19106] RSP: 002b:00007fc2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 554.608603][T19106] RAX: ffffffffffffffda RBX: 00007fc2bf26cc90 RCX: 000000000045a639 [ 554.608603][T19106] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 00:37:27 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r7 = gettid() tkill(r7, 0x15) [ 554.608603][T19106] RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 [ 554.608603][T19106] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2bf26d6d4 [ 554.608603][T19106] R13: 00000000004ca797 R14: 00000000004e1bd8 R15: 0000000000000008 00:37:28 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000002740)=ANY=[@ANYBLOB="ac1e0101ac1414bb00ffffffaf00000004ac1414aae0000001b3fd22288195225d660ed4fbecd2fb985fd352d36f0ee8454f5d55b63378c8b8f77eb5bc56fe7469ebcbca923ca6b7100a412f6dbf9d54104d33344c614ff8557fb51b2c42fbd4"], 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x200, 0x0, 0x10001, 0x8f41}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x18c6, 0x5, 0x0, 0x8}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) r6 = dup3(r5, r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8ec0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000000140)={0x400}, 0x4) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x0, {0x1}}, 0x14) fcntl$setstatus(r1, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000002800)='team\x00') accept4$packet(r8, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002880)=0x14, 0x290ff9410f7b99e2) getpeername$packet(0xffffffffffffffff, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002b40)=0x14) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r14, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r15, 0x0, 0x8ec0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000002c40)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000002d40)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000003f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003f80)=0x14) r18 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r18, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) getpeername(r18, &(0x7f0000004080)=@hci={0x1f, 0x0}, &(0x7f0000004100)=0x80) r20 = socket(0x10, 0x803, 0x0) r21 = socket(0x10, 0x803, 0x0) r22 = socket(0x10, 0x803, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r25, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r22, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r25}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r25, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r25}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) r26 = socket(0x10, 0x803, 0x0) r27 = socket(0x10, 0x803, 0x0) r28 = socket(0x10, 0x803, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r29, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r31, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r28, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r31}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r31, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r31}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004800)={'yam0\x00', r31}) r33 = socket(0x10, 0x803, 0x0) r34 = socket(0x10, 0x803, 0x0) r35 = socket(0x10, 0x803, 0x0) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r37, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r37, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r36, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r38, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r35, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500200000000000000a000000", @ANYRES32=r38, @ANYBLOB="1400020000000000000000000000ffffffffffff"], 0x2c}}, 0x0) sendmsg$nl_route(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r38, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000028c0)=ANY=[@ANYBLOB="344b671e6c00b595000d6cc7185011cad13c1c9b81080000000000000a000000", @ANYRES32=r38, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffff"], 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000004b80)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004b40)={&(0x7f0000004840)=ANY=[@ANYBLOB="c8020000", @ANYRES16=r11, @ANYBLOB="000329bd7000fcdbdf250200000008000100", @ANYRES32=r12, @ANYBLOB="80255932c007030d00020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726e62696e00003c00010011000100656e610104656400000000000000000000000000000000000000000000000000080003000600000004", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="240202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400f7ffffff08000600", @ANYRES32=r17, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r19, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r25, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r32, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c0004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r38], 0x2c8}, 0x1, 0x0, 0x0, 0x20004986}, 0x20008000) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r39, 0x0, 0x8ec0, 0x0) sendmsg$tipc(r39, &(0x7f0000002700)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x1}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000240)="ef4022cbf6ff9d1735464d50cd7a22ba6bfbe13f9d0987205d14d80e6d29a73760fb3d51dd971014489233eb8c73555f51e4d2ec1787cab0ecae6fe14a568cb7ae3f20ba91132987cc57e86a88b3944f1d8ada8e4ce790cfd3e614981b2557de46f0ae", 0x63}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="8ac9ff9297efe4dd896f3acd2841308767ee146228e891aa49d50804a508b0567aa2c5b8cc6176e219a14eddf4052c1d1e2ed811457dafc87507044e3c2af4f06498cb0a197b803d9723095c834e01689ec5431f0f6035b534554d2bd7638f4360634618bb55bea0683e8a2da1730db5b1f25b3dab02491278a209973a3efad8cd5bd5466a046d0e3304d41d06e92c28", 0x90}, {&(0x7f0000001380)="06f9d359b5e597631c217dde811787cbcdd76afa33a25969fbcef95f0d50300a47f4c9bb69403229928577946e60e27edb899f05286b63cd543a22eb5c50fb9f06e73cafc979cc323ac75dadff4005b4d20fc48c5e1f9f6f5a4f65bea7644c7751748695a2c04a69b3cde9a37594b13617721750a6f66361fb5129e4a1ea0614c47fcfc7f86a314cc55e1c4354f7f20338269c27c296053a51c53149882f12a5cec091e033416b84bc9f105de50f5983097f966b9c8d41ff1d0b128517f31345723d90a1f4df1d6c0f2bdf2986017d1575400ce1883c208822dee2d122d1", 0xde}, {&(0x7f0000001480)="92e31770a2b5d020b374a7801057e77eb6f72b816855f7b05af06bb81c9c4c10904623dbddad7f143cfdc38d95cfaa2aad2253aef753a6acbf138149d0319aa9aa8b7f2f", 0x44}, {&(0x7f0000001500)="e777bd5296ee8bae97fe62935d9f6585fc86583d30a5a9cbabbd817a53af8331f8f7cd680f6d0639ad9ac3f1a96a135d3d1725ef079f57f81174ca", 0x3b}, {&(0x7f0000001540)="aac2a9cc0d16dbc3f3c5d8db97b715c6b240194a38e3cff1d774d3650a837f5ce8aea94096774a75950757569ec8e790d96aa0c410c931be2876057c15085aaebd9192bd3525ccdfce7b17e5e90c548217ca6513d93025fb613a5f6f9c178765bc172670efa20fe0f2a6dd62216d2b641aeb94505b66907416df3e5dd1b72a5e44242d2a8e384bc4965c96a608c53111f093c525df91c6aee9682dfb66bfa1886ca433da4fe1d051e8a7658b1083bafee60a02623e656252d9ee", 0xba}, {&(0x7f0000001600)="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", 0x1000}], 0x8, &(0x7f0000002680)="2b6898b0387addcf457bed4aa408c1d449e40887c6fac5e6089b8fffe5f877d98427af9ee96cb8135bf7b009c9ebc1fe338fd003157deb395f4352691eb2bcadbd8d7151629d25d693ba05", 0x4b, 0x800}, 0x800) 00:37:28 executing program 4 (fault-call:17 fault-nth:1): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:28 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r3, 0x0) r4 = add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="f6cf386ac56aad0e2cc00254ad8ff863f5da3959b65aec90c963448b4d", 0x1d, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r3, r4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000100)="39000000140081ae00002c000500018701546fabcae5e5741af20f367c355fee27a04f7e0592616675e285af71583c7d06a6580e883795c0c5", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x3101, 0x0) 00:37:28 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3bb, 0x8500) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = dup2(r4, r4) dup2(r5, r0) [ 555.228556][T19130] FAULT_INJECTION: forcing a failure. [ 555.228556][T19130] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 555.242098][T19130] CPU: 0 PID: 19130 Comm: syz-executor.4 Not tainted 5.4.0-rc8-syzkaller #0 [ 555.250807][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.251966][T19130] Call Trace: [ 555.251966][T19130] dump_stack+0x1c9/0x220 [ 555.251966][T19130] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 555.251966][T19130] should_fail+0xa3f/0xa50 [ 555.251966][T19130] should_fail_alloc_page+0x1fb/0x270 [ 555.251966][T19130] __alloc_pages_nodemask+0x3af/0x5fd0 [ 555.251966][T19130] ? __kernel_text_address+0x24f/0x350 [ 555.251966][T19130] ? unwind_get_return_address+0x8c/0x130 [ 555.251966][T19130] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 555.251966][T19130] ? stack_trace_save+0x1b0/0x1b0 [ 555.251966][T19130] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 555.251966][T19130] ? stack_trace_save+0x128/0x1b0 [ 555.251966][T19130] ? kmsan_get_metadata+0x37/0x350 [ 555.251966][T19130] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 555.251966][T19130] alloc_pages_current+0x68d/0x9a0 [ 555.251966][T19130] skb_page_frag_refill+0x2b0/0x580 [ 555.344814][T19130] sk_page_frag_refill+0xa4/0x330 [ 555.344814][T19130] sk_msg_alloc+0x203/0x1050 [ 555.344814][T19130] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 555.344814][T19130] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 555.344814][T19130] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 555.344814][T19130] tls_sw_sendpage+0xb71/0x1b70 [ 555.344814][T19130] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 555.344814][T19130] ? bpf_exec_tx_verdict+0x1c80/0x1c80 [ 555.344814][T19130] inet_sendpage+0x1ab/0x2c0 [ 555.344814][T19130] ? inet_sendmsg+0x2e0/0x2e0 [ 555.344814][T19130] sock_sendpage+0x1f1/0x2e0 [ 555.344814][T19130] pipe_to_sendpage+0x342/0x470 [ 555.344814][T19130] ? sock_fasync+0x250/0x250 [ 555.344814][T19130] __splice_from_pipe+0x484/0xe80 [ 555.344814][T19130] ? generic_splice_sendpage+0x2d0/0x2d0 [ 555.344814][T19130] generic_splice_sendpage+0x1d5/0x2d0 [ 555.344814][T19130] __se_sys_splice+0x2141/0x3320 [ 555.344814][T19130] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 555.344814][T19130] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 555.344814][T19130] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 555.344814][T19130] __x64_sys_splice+0x6e/0x90 [ 555.344814][T19130] do_syscall_64+0xb6/0x160 [ 555.344814][T19130] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 555.344814][T19130] RIP: 0033:0x45a639 [ 555.344814][T19130] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.344814][T19130] RSP: 002b:00007fc2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 555.344814][T19130] RAX: ffffffffffffffda RBX: 00007fc2bf26cc90 RCX: 000000000045a639 [ 555.344814][T19130] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 555.344814][T19130] RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 [ 555.344814][T19130] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2bf26d6d4 [ 555.344814][T19130] R13: 00000000004ca797 R14: 00000000004e1bd8 R15: 0000000000000008 00:37:28 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x1a, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x10001ff) 00:37:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0xf8, 0x6, 0x100, 0xfffc}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x80000001, 0x40) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000200)={{0x6, 0xffc1, 0x9f3, 0x6}, 'syz1\x00', 0x16}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00d00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 00:37:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32], 0x2}}, 0x0) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x101800) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000480)={0x0, 0x1000}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000000c0)=""/110, &(0x7f0000000140)=0x6e) clone3(&(0x7f0000000380)={0x3a1800, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), 0xd, 0x0, &(0x7f0000000240)=""/122, 0x7a, &(0x7f00000002c0)=""/173}, 0x40) dup(r4) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 00:37:28 executing program 3: r0 = socket(0x8, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904001100000000080001000200000800040003000000", 0x24) 00:37:28 executing program 4 (fault-call:17 fault-nth:2): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:28 executing program 0: syz_emit_ethernet(0x72, &(0x7f0000000000)={@random="c5d32df662eb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x2c, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0x0, 0xffffff88, 0x0, @empty, @local}}}}}}}, 0x0) 00:37:28 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r7 = gettid() tkill(r7, 0x15) 00:37:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000100)={0x49, 0x29, 0x1, {0x9, [{{0x0, 0x2, 0x6}, 0x80, 0x2, 0x7, './file0'}, {{0x9, 0x0, 0x2}, 0x90a7, 0x0, 0x7, './file0'}]}}, 0x49) r6 = dup3(r4, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202eaff356fd280710efff0500fd5600"/28], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:37:28 executing program 3: r0 = getegid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() setfsgid(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000180)=[r0, r1, r2, r4]) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xfc, 0x102c882) r6 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82ed2a2ef63524fc21d680476", "92ef27daf4634f9065ecbc04c983083d390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"}) [ 555.969169][T19153] FAULT_INJECTION: forcing a failure. [ 555.969169][T19153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.972361][T19153] CPU: 0 PID: 19153 Comm: syz-executor.4 Not tainted 5.4.0-rc8-syzkaller #0 [ 555.972361][T19153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.000539][T19153] Call Trace: [ 556.003163][T19153] dump_stack+0x1c9/0x220 [ 556.003163][T19153] should_fail+0xa3f/0xa50 [ 556.003163][T19153] should_fail_alloc_page+0x1fb/0x270 [ 556.003163][T19153] __alloc_pages_nodemask+0x3af/0x5fd0 [ 556.003163][T19153] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 556.003163][T19153] ? kmsan_get_shadow_origin_ptr+0x168/0x4d0 [ 556.003163][T19153] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 556.003163][T19153] ? prep_new_page+0x7a5/0x9d0 [ 556.003163][T19153] ? get_page_from_freelist+0x11a9/0x1a20 [ 556.003163][T19153] kmsan_alloc_page+0xb4/0x330 [ 556.003163][T19153] __alloc_pages_nodemask+0x1421/0x5fd0 [ 556.003163][T19153] ? clockevents_program_event+0x652/0x6b0 [ 556.003163][T19153] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 556.003163][T19153] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 556.003163][T19153] alloc_pages_current+0x68d/0x9a0 [ 556.003163][T19153] skb_page_frag_refill+0x2b0/0x580 [ 556.003163][T19153] sk_page_frag_refill+0xa4/0x330 [ 556.003163][T19153] sk_msg_alloc+0x203/0x1050 [ 556.003163][T19153] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 556.003163][T19153] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 556.003163][T19153] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 556.003163][T19153] tls_sw_sendpage+0xb71/0x1b70 [ 556.003163][T19153] ? bpf_exec_tx_verdict+0x1c80/0x1c80 [ 556.003163][T19153] inet_sendpage+0x1ab/0x2c0 [ 556.003163][T19153] ? inet_sendmsg+0x2e0/0x2e0 [ 556.003163][T19153] sock_sendpage+0x1f1/0x2e0 [ 556.003163][T19153] pipe_to_sendpage+0x342/0x470 [ 556.003163][T19153] ? sock_fasync+0x250/0x250 [ 556.003163][T19153] __splice_from_pipe+0x484/0xe80 [ 556.003163][T19153] ? generic_splice_sendpage+0x2d0/0x2d0 [ 556.003163][T19153] generic_splice_sendpage+0x1d5/0x2d0 [ 556.003163][T19153] __se_sys_splice+0x2141/0x3320 [ 556.003163][T19153] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 556.003163][T19153] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 556.003163][T19153] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 556.003163][T19153] __x64_sys_splice+0x6e/0x90 [ 556.003163][T19153] do_syscall_64+0xb6/0x160 [ 556.003163][T19153] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 556.003163][T19153] RIP: 0033:0x45a639 [ 556.003163][T19153] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 556.003163][T19153] RSP: 002b:00007fc2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 556.003163][T19153] RAX: ffffffffffffffda RBX: 00007fc2bf26cc90 RCX: 000000000045a639 [ 556.003163][T19153] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 556.003163][T19153] RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 [ 556.003163][T19153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2bf26d6d4 [ 556.003163][T19153] R13: 00000000004ca797 R14: 00000000004e1bd8 R15: 0000000000000008 00:37:29 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x6ad56af9, 0x802) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) inotify_rm_watch(r3, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x6}}, 0x30) syz_emit_ethernet(0x140, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa01aaaaaaaaaaaaaa000800f300013200000000002f907800000000e00000018800907800000000"], &(0x7f0000000040)) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x3}, 0x2) 00:37:29 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000016c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) userfaultfd(0x0) ioctl$TIOCLINUX7(r2, 0x541c, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x28, 0x0, 0x0, &(0x7f0000000000)=0x700) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$GIO_FONT(r5, 0x4b60, &(0x7f0000000080)=""/59) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:37:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff35609000748f7a638bf8b47985fdc0e0010020002b2fd0d89fc9c4c89455dd9afc7d8275fa2fa942b28f6b8ea3aeceada44b71336182b48b3e1840619e18422c0984a0fe96575d607ea36fef33884055e67b044362b0ea4403a0c53822965949921d5b4c090f09f857ce1324ff8047e3b2dad4c964f2709e91f7e90b85cf16862a35ff082dcfc8c75dd169f55d2a47a6b4b78e81b7485d822c160f66cf73d2f0b46f998ba6d000000000000000800"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000200)="3f5df3982754f7a2731b09946a7c4d47cd925e2f9130f63d66e0d28925558565588666fe3b2ee7dd4c21fc2098f5d9ba0b1c187793a7be17f438e97841c436351ee306259e88c3af8cb63e1baf0aa1", 0x4f}, {&(0x7f0000000280)="ab8a1231b9120ae674272d55643f527d2240e13da04e284fb02c52fe5aeb4802a19a6175d567219c2c0ff8048183598284ea0e3df188eae02ca1aa62fc977ebe2e9e032ec8", 0x45}, {&(0x7f0000000300)="e049b0674a226e5f496b89d6e2c205ecdc50fc7c49f400442e3628ca945067d701410f60c64a9a5ed49f259efb4618a3518258050240658ebf9838912ffd2cad869b0d749e98f316156fd1fdef63d9cb7d154a3e381006544ee2b63db9545bd32fde68806147517e31bec7f65ded73293e1e90ab2ffb94292109d5b4673f64a995cfb2af3bd19e5c57016128e03f434c119ef8dd55693fada1a45f08c8fcd08818667a8cd28b94809d96a87f11486bedba714d43bdf07970f92553745fb490f5aaf6c192cc2af0803780652e8f330742d0", 0xd1}, {&(0x7f0000000400)="4db1588d585c2b5aeea3edf6add83139d9e82d83028bbd194f71cbf8fa0220b6ed6b28c99997c9c6506061392399cb05f09b6ed60cd0a9d626f56cfe0b565108d02227f6dda802fc160f8d05fc90daf819957e45a26918c76d0fef7857221bbf289f72fa01cf3451c6f2fe03dd3e6c33fccf9baa46d2cf51bd77b10e328db5eff9c1588c6025583773c56ac4017b0982c2", 0x91}, {&(0x7f00000004c0)="049218e24b5d9596e0826092e6f6e07361e67f58e60073f00b716e89afad37c1d66ea025dc7028842725870ea1a43342bc4884fde95bab8ec5f9ba6c622e8c010d97105745f8071682b121e7ddb1a2b847c53622d3ee3f1f51212c2a92fc4e6c09207a4a16d2cf9a8915720fda99", 0x6e}], 0x5) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x4) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r2, &(0x7f0000000000)="1bdc29ab8ec24165ded88e86ec36604bef851353e3c0fb9f5f10f8003b71edbc07b05b700b8887a299e190a0a9834c04e3c2d8ff2ce96c37df404a7f75eda3eb49157207cb5475b9f734106502c5c0b8c12558b28acc0624b6dcabc81a7a0d5af18cae6578dd", 0x66, 0x4000804, &(0x7f0000000080)={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_mempolicy(0x8002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 00:37:29 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x15) 00:37:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) r7 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x5, 0x1, 0x20, 0x1f, 0x0, 0x7, 0x0, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffc01}, 0x212, 0xff, 0x9, 0xe, 0x4, 0x7, 0x6}, r6, 0xd, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000140)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = dup3(r4, r0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r8, 0x540a, 0x1) [ 557.126932][T19185] IPVS: ftp: loaded support on port[0] = 21 00:37:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000080)={0xa7, 0x5, 0x7}) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000640)="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", 0xfc}, {&(0x7f0000000740)="1f3b21cb729c88886e9b2a723fb76d543d8794d72eb66c0796b5430a63cdb9b881c01c28636b1f9ce86096a7171bb7593bd77fc3c09c235a2487616dbda8a6b889fe0893066383594841097ede82a048a177508f0e808b8c20bd588dba15febc40d0236760673e36a167b08923cb9372652948162e57a6ec8c4c3efa17e8d132ccdbe80370f08d9eab4a930a06a477c3ac7063b2fd4b5791709f3bb3e9d9bea0e64eef088c50b54b9306f808b9d8dbc1cf54afaa381fe786c89ccda3ea2ebad086ee4e8f2e72588412ae17196b804bb1d333", 0xd2}], 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='\x00#\x00\x00\xec\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r5, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r7, 0x0) r8 = getegid() setfsgid(r8) fchown(r2, r7, r8) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x8ec0, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) sendmsg$TIPC_NL_MEDIA_SET(r11, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000ec0)=ANY=[@ANYRESDEC=r12, @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40140}, 0x4000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, [], [{0x5, 0x7, 0x2000000000000004, 0x5, 0x4, 0x9}, {0x96c, 0x80000001, 0x9, 0x5, 0x3, 0x81}], [[], [], [], []]}) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000000000000000040000"]}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r13) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_STATS_ENABLED={0x8, 0x29, 0x1}]}}}]}, 0x3c}}, 0x0) 00:37:30 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x10001, 0x4) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) connect$unix(r0, &(0x7f0000001240)=@file={0x2, './file0\x00'}, 0x6e) [ 557.311516][T19187] IPVS: ftp: loaded support on port[0] = 21 00:37:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r3, 0x4000000000000002) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r4, 0x540a, 0x1) 00:37:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000280)={0x18, 0x1, 0x0, {0xffffffffffffffff}}, 0x18) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 557.475661][T19197] netlink: 'syz-executor.5': attribute type 41 has an invalid length. 00:37:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r7, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1801fed9e7ff2420048ea908e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1e0}}]}, 0x34}}, 0x0) 00:37:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) write$binfmt_elf64(r5, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x52, 0x3f, 0x1, 0x100000001, 0x2, 0x6, 0x4e000000, 0x1be, 0x40, 0x303, 0xff, 0xfffc, 0x38, 0x2, 0x2, 0x7, 0xfff}, [{0x7, 0xd53, 0x6, 0x50, 0x1, 0x0, 0x3, 0x8}], "b0f0c8b77d261f9cb94e268dde9658ff7129abe6c2bfd3ea8d2efe3b5e17a20820547cc738884198956becf12c0005dd678d02a2c1446ccd0e9e4306cff6"}, 0xb6) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8, 0x5}], @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r4}]]}}}]}, 0x40}}, 0x0) 00:37:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90bbff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 557.867897][T19219] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 557.891433][T19217] netlink: 'syz-executor.5': attribute type 41 has an invalid length. [ 557.933080][ C1] net_ratelimit: 16 callbacks suppressed [ 557.933103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.945277][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 557.951773][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.958168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 557.964835][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.971104][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 557.977710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.984045][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 557.990578][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.997172][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:37:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xd7c85, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x7f, &(0x7f0000000200)="ad9bdd924635bf5063a00c1eba96b5af5cd85a5cd61b6edef00b39638b53264b324df2d47e75d31772211ecda06442b728382cff5a79cc29ff45f9392aba0b1251ebe449b8c9af95d7fae2d3bbd7e4af249eba3f81333344410d70ebab9591dd5549feec076062e4840df1e99f7d3afd0461866b5721c9bd62d92b6e93415decee1da0464861fc3682215164cd623e37293433a3740220c24760824b461a772a50b190c232bd16d6295a46efc302b57b55"}) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = dup(0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 558.159076][T19235] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 00:37:31 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x15) 00:37:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'ip6_vti0\x00', 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8}]}, 0x30}}, 0x0) 00:37:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000080)={0x0, r5}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x100, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8d, 0x0, [], 0xff}]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:37:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x140) sendmsg$alg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1f6, 0x24050}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x0, 0xc0766b2f1aef30bb, {0x0, 0x1, 0xfff, 0x0, 0xffff}}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r4, 0x40047459, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xbf7f, 0x11, 0x0, 0x27) [ 558.402716][T19250] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 558.411465][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 558.448795][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 558.481182][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.489475][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:37:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x8ec0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f0000000100)='./file0\x00', r5}, 0x10) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x1000}, 0x6) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000000000001f000000008107bed43dddd5189ee1c71f0f26cc844c4ab4ff70a16f5a1cf016"]}) dup(r6) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "9007000000859801"}, 0xfffffffffffffd5b) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) [ 558.757961][T19250] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 558.766865][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 558.804512][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 558.839936][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.848218][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:37:32 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5500000018007f1de7fe01b2a4a280930a00030000000000000000003900090035000c000600000019000500fe800000000000dc1338d54400009b8413200000008307008daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x41) r0 = socket(0x10, 0x80002, 0x0) request_key(0x0, 0x0, &(0x7f0000000500)='em0cpus1\x95\xeb\xe6\xa2\xa5\x12\xb7V\xda\x8eo\x9ce\x0e\x8a\x9e\xc6!\xae\xe8\xf9I\xe4e\xb2q\xb9\xd9c\xc1n\xddg\xf17\xbf\xac\x19\xf8\xb0\x84\xad4\xc4\xa27\xe0\xdf\xfd\xf1\x98\xdb\x19\x97\x89\x9f\xf6Rr\xde7\xcb\xed&0\xa4\xb4):\x15\x8a\x91@<\x00\xbb\xbfm\xc8H\x95\xbb\xdea\x96Q\xef\x8a\x01\xf0<_\xfb\xb0\x98\xbc\x81#.\xc9\x93\xf1m\x91\xc5P\xe834\xcd\x14\x01\xe9K\x16\xde\x87I\xbf\x0f\xeb\xbe\xb4\x914\xa7>\xac\x16\x01\x9a\xe98]\xb1\xd4 \xcb\\\x1e1\xc3\xc91[,2w\xa2\xfa\x04<\xd0\xea\xe4\xb4', 0xfffffffffffffff8) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x40000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) 00:37:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e, 0x0, 0xfffffffd, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x81}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81, 0x0, 0x81}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000480)={0x2, 0x18, 0x2, 0x8, 0xfffffffb}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:32 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x15) [ 559.187317][T19271] picdev_read: 6 callbacks suppressed [ 559.187329][T19271] kvm: pic: non byte read [ 559.226816][T19271] picdev_write: 6 callbacks suppressed [ 559.226828][T19271] kvm: pic: non byte write 00:37:32 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) [ 559.265439][T19271] kvm: pic: non byte read [ 559.279643][T19271] kvm: pic: non byte write [ 559.292524][T19271] kvm: pic: single mode not supported [ 559.293091][T19271] kvm: pic: non byte read [ 559.306460][T19271] kvm: pic: non byte write 00:37:32 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x8, @mcast1, 0x2}}, 0x7, 0x9, 0x2, 0x101, 0xfffff000}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x8, 0x0, 0x0, 0x0, 0x8000}, 0x14) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x60, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000280)={0x8001, 0x3}) [ 559.312042][T19271] kvm: pic: non byte read [ 559.321069][T19271] kvm: pic: non byte write [ 559.337869][T19271] kvm: pic: non byte read [ 559.351884][T19271] kvm: pic: non byte write [ 559.371649][T19271] kvm: pic: non byte read [ 559.377477][T19271] kvm: pic: non byte write [ 559.395783][T19271] kvm: pic: non byte read [ 559.414760][T19271] kvm: pic: non byte write 00:37:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000100)) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 559.421665][T19271] kvm: pic: non byte read [ 559.433252][T19271] kvm: pic: non byte write [ 559.448659][T19271] kvm: pic: non byte read [ 559.470463][T19271] kvm: pic: non byte write 00:37:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bf", 0xb}], 0x1}, 0xc100) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="509a19631f550200000000000000000000000000d50000", 0x29e}], 0x1}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) [ 559.493604][T19271] kvm: pic: non byte read [ 559.498143][T19271] kvm: pic: non byte write [ 559.713872][T19271] kvm: pic: single mode not supported [ 559.839291][T19271] kvm: pic: single mode not supported [ 559.848166][T19291] __nla_validate_parse: 6 callbacks suppressed [ 559.848185][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:37:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x3f7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], 0x58) r1 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x375}, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002800)='\x00'/10) getdents64(r5, &(0x7f0000000000)=""/37, 0x25) getdents(r5, &(0x7f0000000040)=""/123, 0x7b) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x401, 0x100) write$char_usb(r8, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0, 0xfffffe27}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce, 0x63]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f00000006c0)={0x1, 0x0, 0x2080, {0x5000, 0x6000, 0x3}, [], "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", "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"}) ptrace$pokeuser(0x6, 0x0, 0x4, 0x100000000) r11 = socket(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(r11, 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udplite\x00') r12 = open(&(0x7f0000000600)='./bus\x00', 0x60102, 0x90) sendmsg$IPVS_CMD_GET_DAEMON(r12, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400080}, 0xffffff0d, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) 00:37:32 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r3, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40020}, 0xc0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r11 = dup3(r8, r4, 0x0) ioctl$TCXONC(r11, 0x540a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e00100286951a920d425e033328559fdd6fb1f8f03775f805e6298671e10e60574e40ef248ff0a36015e11b712762b1ce47a331f6f6c534ec47cf670bd14166ad091c0320c6648e52f19a97c2b2bccdddfd7f9e5e07dd5b7b5a310abd0d2132cd06ea6d7768095a0775814042f431f2acb4c92bfbfda170de0ec8f906c90602a6632abcc5d7a1a4e8c9742eb89936d4758865f7df4def3f9ba5"], 0x22) write$P9_RATTACH(r4, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r4, 0x4, 0x40800) ioctl$TCXONC(r11, 0x540a, 0x1) [ 559.881460][T19271] kvm: pic: single mode not supported [ 559.952644][ C1] sd 0:0:1:0: [sg0] tag#7558 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 559.967723][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB: Test Unit Ready [ 559.974423][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.984671][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.994457][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.004249][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.014021][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.023795][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.028278][T19297] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 560.033559][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.033643][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.061223][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.071065][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.081309][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.091127][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:37:33 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/dlm-monitor\x00', 0xa20c0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001a00)={0x0, 0x53, "af36a695fbb89c8b85d140a6e48cc9cb9804eecae7cd6636e7e33d43db29a7a0c7bf194664447663eea8370a1609c4e54d2d00f3bcb7bd2c6592c51e1a3554b0dbc134f3faf5882b21d31e4842fe58a3ce9689"}, &(0x7f0000001a80)=0x5b) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x2948, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000800"/16]}) sendmmsg(r4, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="2bbcd3ac7500968ff98b30acfa894fbd6edaa5bac6a38baa99ff1f6a519022f6eb0e0a09dafcece96303ee1cc8990726ec50edf58e006ad8597d58a46d667831686dda4124c050e2ff2d0cbeeec566b42a00ccde0a157683c4234ea95a0f", 0x5e}, {&(0x7f0000000280)="6feb86919bf3bf2d6afbebd1c579ee4c9fc6213157194ffc462169d6b3d7c74b69cb5b0c11d2632d36a218b91f9685b98620fce0a04740ae375e8b7a93d0ac4a7d43c632ac107b9081a60994b1a740cd7c0402027b59d2a7188c580c065eada8b30f8980d34825eec3d06d2294b1b603c9cd0de9586baf322eb569ea3b54845e9b7fe9db31c27d0b17168b734b8e36c7bf0448641f6fa86624ea10a47e83c10d4176589c212010d905e17520e1e32ef9cc1aa2dd9f62af2eed819a04336e554b34370cb8ec", 0xc5}, {&(0x7f0000000380)="905d1df6766600ded662e74ee9ff4cfc626705364be1da59a3742356e18c11ff380a73984e0e6b27d6ff053612fa746b44f97b886d0774636b7ebe85f385449e3746c3cc91fe92b8bf9a49c0", 0x4c}, {&(0x7f0000000400)="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", 0xfb}], 0x4, &(0x7f0000000540)=[{0x10, 0x29, 0x2}, {0x1010, 0xff, 0x874, "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"}], 0x1020}}, {{0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000001ac0)=[{0x58, 0x10e, 0x6, "af88f50a2657df523bb5af4e904d1c3d5b75a567bd766aec80e4f22b4bcb426c351f8183d9ab4c94fbf62981104915b6850984dd290bc3dee392d4331ce974f0237801f68d071e99"}, {0x90, 0x110, 0x5, "77e1f3729da7266a7674878d293fd9dd12cc2093bf067a9952e46b1a00007bd599aa2ff2cd5ce2936822be024eba22f5a9af02608ffe9d635382aa6b12c6a77fa366f084cb9ed8e99f3e107ac37861948d4ec02fb3f16fecd40d2ba53a27e8f11e664816a6ec08964b0e549658650ebf55f8abecc50000701b2b051f5f"}, {0xc0, 0xeb1e84896d3df4c7, 0x4, "600e9741f3b192fc94df99a28912bbcbb50416412259415f24cbde010d01f6ade34b2fd181129f0fdf9dbe11b49342187f6d0da8e5fc4502bfd47a7404e2674d4e8532298f9f81b2b9d8f197b52ce4d2dcbe6d005c6ca812d0362549be124efa5261cac3681edfadf4b8f6c3e01588f8f87359223730dbe2fc487614ae4f05581bf61444afb6bf5aa132233b3852d52954e7d49db5150be7ba133fb2026cf61018e0f23b127dd42ccf69d6cb3d24"}, {0x78, 0x6, 0x9, "bc26d1bc496977419e968f7eff80bdb80d62eb2e071e266493f944ae48bdac8abe78e85bf9df5b99c330a2233ef8a543267547ec66ede3835d3cc75386672f5adeb731686cb8998f72c65642933aeb6025ec26d53ddfb0d7b68fc4ec2fc29c649439c8"}, {0x50, 0x915a58cb7bd941f4, 0x1, "2611dec676ef8ae4f5222b36cc3275dd86231f9fe20c2b79b70a36277fe231890960f0d0da697516b3aedbb22bdf21a07be1ac4cdc0e57b11d6a45"}], 0x270}}], 0x2, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="1200f1042d745041f9d23c6a641d8081a6ffffff000000"]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000040)={{0x3, 0x0, @reserved="1cacaf7b70f80089be3e4d70361d77ae55d89f208b76c3da95e5c9158698b25e"}}) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="f67f986af9dc3ba1fe8000000000000087209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x28}], 0x1}, 0x0) [ 560.100924][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.110709][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.120480][ C1] sd 0:0:1:0: [sg0] tag#7558 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.159819][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:37:33 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r5 = gettid() tkill(r5, 0x15) 00:37:33 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@setneightbl={0x14, 0x43, 0x101}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x120, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6e}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd826}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1028231c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xafb2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb141}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x919}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x0) 00:37:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ftruncate(r3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r4, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 560.370214][ C1] sd 0:0:1:0: [sg0] tag#7559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 560.379921][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB: Test Unit Ready [ 560.386627][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.396426][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.406226][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.416053][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.425828][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.435629][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.445384][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.455166][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.464923][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.474686][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.484941][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.494712][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.504471][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:37:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321a52e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000000c0)) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 560.514253][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.523997][ C1] sd 0:0:1:0: [sg0] tag#7559 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.543781][T19304] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:37:33 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='\xff\x01ev\xb8s\xe6\xd9>\x00', 0x479af55d9bb406f, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='bcsf0\x00') socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000000)=0x7f, 0x4) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101000, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f00000002c0)={0xb, {0x7, 0x2, 0xff, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xefd3, 0x400000) write$FUSE_INTERRUPT(r5, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080012000c626f6e64000000000c0002000800122e5bf67885b1c5e5dd41d64053b0327909ba3bca1f31d1cc2659ffc5aff2a0651f37b3853ce9f19bb86cac7a2fdcce74873a138fb821e01c1ed4a0fb41e4e1d3085a589ba7f79379dab9a9035e76be2da0825d1ecc1e6da52cf9c79225d9438611bf99c212b5357069757695edc6df6deaf9894be973884f268d27abba8092f009d7c0ddcabe1dc9917a1cd053970c42061adbf79aed67516ed9eacddae79a45af6a0f6cf10f56e209b03648c5f54861e9c66cfa921de4"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 00:37:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0xffff, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'\x00\x00\x00\x00\x18\x00'}) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x8, r7, 0x1, 0xff, 0x6, @random="a0f253042191"}, 0x21401b5d) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendto$inet6(r0, &(0x7f0000000100)="05030e0006063e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) 00:37:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r2, r1, 0xa, 0x2}, 0x10) r4 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000200)=0x20000000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90bafe356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 560.865642][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 561.005277][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:34 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500000006907800000000e0000001000000000401907800c8d1f6ff071ccdc1188f869a280ebca23c09903661233c6227b94859beea48a6f2c0f1fa8318c20f8b50dabbec7066539b69040000000000"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000180)=""/134) recvfrom(r0, &(0x7f00000000c0)=""/63, 0x3f, 0x40000041, &(0x7f0000000100)=@ipx={0x4, 0x2, 0x7, "28a19b524cbc", 0x4}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x8, 0x200240) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc078}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x3600c095) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) 00:37:34 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000081108001b0000000000"], 0x28}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) 00:37:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) r6 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000100)={0x5, 0x3, 0x1}) [ 561.585707][T19351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 561.598997][T19351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.606836][T19351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:37:34 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r5 = gettid() tkill(r5, 0x15) 00:37:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x80) r6 = syz_open_pts(r3, 0x200000) r7 = dup3(r6, r0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f00000000c0)=0xf02, 0x4) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r7, 0x540a, 0x1) 00:37:34 executing program 3: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x401}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x418800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xdc, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xef7ff53e682c024a, 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004881}, 0x2000c000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x1c3000, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x6, 0x0, 0xffffffffffffff9c}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x2000) 00:37:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x803, 0xf9) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db982000000000fab53b08d403ffff633b27e50a5d0da20a9683768c99f9768993c394780d445e9aa144175dd106736d17c3f2c876d69925143f0dc7ec6e2656578000000d000000"], 0x61) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x50a, 0x8}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x80) close(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_open_procfs(0x0, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x800) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f00000004c0)) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000440)={0x3ff, 0x3ff, 0xe28b, 0xfff, 0x9}) getdents(r7, &(0x7f0000000500)=""/111, 0xffffffe4) pipe2(&(0x7f0000000300), 0x80000) keyctl$get_security(0x11, 0x0, &(0x7f0000000340)=""/214, 0xd6) 00:37:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x2, 0x9b11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) getsockopt$inet_buf(r0, 0x0, 0x61b604c25baa1803, &(0x7f0000000200)=""/4096, &(0x7f0000000100)=0x1000) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 561.907403][ C1] sd 0:0:1:0: [sg0] tag#7560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 561.917217][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB: Test Unit Ready [ 561.921565][T19369] x86/PAT: syz-executor.3:19369 map pfn RAM range req write-combining for [mem 0x44fe2000-0x44fe2fff], got write-back [ 561.923902][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.923980][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.924058][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.965587][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.975360][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.985097][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.994838][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.004579][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.014330][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.024073][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.033804][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.043538][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.053277][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.063027][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.072787][ C1] sd 0:0:1:0: [sg0] tag#7560 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 00:37:35 executing program 5: setrlimit(0x7, &(0x7f0000000000)={0x8, 0x1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='}-\x00', 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20986900, 0x0, 0x0, 0x0, &(0x7f0000000080)="03846bd5527d92719207005fa8b2d94c22") [ 562.439676][T19380] x86/PAT: syz-executor.3:19380 map pfn RAM range req write-combining for [mem 0x26622000-0x26622fff], got write-back 00:37:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 562.510983][ C1] sd 0:0:1:0: [sg0] tag#7561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 562.520906][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB: Test Unit Ready [ 562.527590][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.537354][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.547173][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.556921][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.566686][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.576449][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.586233][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.595975][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00:37:35 executing program 3: getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}}, 0x84) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x444021, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f00000003c0)={0x40, 0x1, 0x2, 0x7f, 0x20, 0x4}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "dcfcffd4c86df4ef", "5f85b0247f180444d0044f1593e7439b", "0ba7866b", "5567676532af4371"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xfffffffffffffd01}, 0x48) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001840)={0x13c8, 0x3c, 0x2, 0x70bd2d, 0x25dfdbfc, {0x4}, [@generic="fff39d3e01f790f95801868904f44846eb5a19e88e659b4c9063e892b27c37a40c55f545c49f3fc463b182f082734e4e3baaae542ccff541f5a562c295d66dc61398ac06b2ed3a8df2ba3d9b90494d9cb9cbe187ff750cc789f9cc74e410cdf321f2fa2263f4b8fa416c41b6f8cdefb08fe2e05a4887ded90d83a9556d855503883777a991a110df1992d457158a3fdfe0dbf8eb5cffe0c3c5e24131a806500aadf67d6af5523b500043921e0ee51ca95df714037de65ee6c47452606b51fb9bbd8e5b0b77172d707960583c92c4b123e5f612765e8db0b7cd5569a7f27c262a7ff1ec9804c863a74fb7556cc416b4bbd5d35423a5de4765d3", @generic="ef9877fd8c625160be906aa29d1b37662b51edafb7ae9a5bbcfc2e08e087707640656b0a6b5cdca05c6b8d1bd655f246727c83e1cb9598531c59f6f4464a056e37c9677f0a380b4b59aa96ede22bf168a30423dc44ad12002c884082d5ea8b33", @nested={0x190, 0x6c, [@typed={0x90, 0x45, @str='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, @generic="adcde364645c522aa960884c", @generic="cb84508d012f4d0baf325e2e647b21d171c6c71a46642441879dd3445439e43b66a5464913ae62bb554d2977cf76d638617cbe58fbd425839123892d0d1e1f55d5e95d7cf08a2624348822d885419a6d0b76510bdd12fc3a7ff098b5c52adcac940f90679357592244bb31593acc1cfba4c73dc1ad3b2962af4505d53d9f6547f71d5fcec13021ef8a50ed8c076cd705e68ad62daec495eb305ea6a0397f6f16f18c99744fc21b539cab6513d13d92118ba53f16b4dcb884aed77f78fa9d56be708dc9cf31a365ecfd2b6c77d916066c185d04fe23d0e2eb14f8bd8299845c739027946d1bdb13b500000000000000"]}, @nested={0x10c8, 0x3d, [@generic="6fb7c63ea5b2444c723095e655dfc579f79c33fa3db7bfc0c6463364f2e3e11cf972c61181d4bfab53bad48400b58bd53a8c0f35c1e4b0736dcf43df2247cc23414b6ac9983a2c1977ffc43d8a1e5181d3190fed7867ddb4c36a009adf94aa8a8cab0ffdea2b0f1b556a9eb16911c4bed07891be1639ab74d35549d488022894c6de50b736114d9614c48ddf743589e4e71fa5502cdf95a4eb9ab1f1c6b24918fb8b4f8b2c67a27e5e0567c51398ab3cf913a5d60c4abe0e5d6e8ee9", @typed={0x8, 0x45, @u32=0xffffffff}, @generic="d5a259faec8731dc2a8d1fe54b2856b6ae0904c75b93f4c5ab8e960e15f54d6d986a4bb3b5d16a3da81126c66221f5d2b3f5939ed978b7b312941d20e8817df70d862a9e3a4c5e92c20c3a40b97a9a558da92df802d43e46976155aea97224cc95e804f93e1fd911ae5d002e29a460b74bdcbb553459a9602aa94b9b36d89a0aa71277938aab586ea5e7f9fddb64218fb4c7b20920029add44ec2e41c49a4da58ec708b8f02631cf5bf1d7369bcfc3f3f1af970224b275f97ddff2bee604ac8fde50520c965526f0978e0bee1099b36306581311f43dc4a601c9f221dc24d716fa3a6bf080cce9f937ddf38a3b1763ff928843f2be3d8283a1594e75f1c6e80b5bc39f0cfec05daa0e1c28575ab8b036c61364073615eae02230625c84b16f4dd40dd7c5f77c837f16991b9e7becfb34f86e97f9784bbd9b9b4eb15f46d237e65f4d6ae361f4cc545e77a7ef5d7a93099c4d9cde7af3d10d69428435de0f380ae257785f9b67c13c7203d92fc5b0df3d299ae728ca200bee096cdf99b38518f1dfdf4ad731470ed2f02ebb7726e774a5b163822e5ac9510ab3f15a2a92c2ba00552ebe4e3c1b3f519c05b37575298c3087abc07b7f02a7058e0745910b1fcf787ec6ea2412597359a9f04cc101c627f35b01919e775fee601db1050bb34d23d1b5872c2c21e1b62c83b68c5d2176046cc085c716007eb7150953325e28ec8175c45159bc837c54bc2e152da4bfc54feb34f0897e5cb6f66ef7a531ede53a2ce5c0aafa83ac8641c975c71cfc0d76772296ec08631583a9eb2194f7200640ff93e03567ab9e4e58085aaaac20ee2fe93f5412115d2410a824b86c840978f07969abf6488966abcffc9a8827d05e34c5e613e61ed3f3902d6dcb0912ee24121d77a7744d9cfa355eb3ff2f3242baa858cce7737e234fe9fa21660e4fa4f9a3df812bdc02bc7bb85b1416ee3113a52c1847aa8326c0237b62d7b3f2b35ce89af522198ca5fe9a591356638e366e366bd71a543a1c1e7ebcba9e03f58b829a9bd1ce06d3951c4acfce934817aee16fd4ddd89867914d2ebbbefa18b2f750f86e1c9333c93db73d314d1307e18ace2debdf73255c547d6ff976d19b21d314a86b552d3b87fd20d383a68efc03934186989e323ed3bceec1712c439268e8f821e58d725d02dd892fff7de1c8141f32386a40921c242726e820d1f962a81f9de6d73b4503f31f0f1d81bab741e1c4dfc12827407c0ffe7e9e508cf22cfde5ac81ce829af4ebac1550760f4306e6a78dda204716e53e6ec5e8b8d1fa02b18f7815f28fb7195156df171b3d58980efead1f8cac7ccfc8ba7cb04cc6c4569b241022de37fa9e22e2c228e4b8d4db8d21780cc7d71fbc00b46f1fa6471dc34327e9f44e5cb6fa9f114d658d8eaacdbf6cb16a0e4183328801efe59bda8284a24141a329d5320657b5ce696e0d5bffcc276d7a859fa33ff444bdb9e437db1a4d7295edfc645e3a0f8066d7e3521fc1e7e2d4dbcf5fb12ecd25747fc1e3c440020e468fa96953ba6b00ddd0789eb0f91ec6096e26514ef72419dd07e7148635fb73471fbae004e376e0aaa33ddc000e8f4ddf6335c26f358d727cc514f0b25c72cea919ee0ee7eb7693ab04e01a01b948f9f222f8f01986fc4ec199fa6231d8fd06adcedab3274b4ce90d1441c02ba4afd17ea8ff32e3ca2aae7befc040f5c51d18769d98f55772175121288049604d7d6b8244e8c44be1bcf6d652555183dded7b468b2a3e7e930a9daea57d59464df585e2924c1a442978c261375faef5b91c63665449906d5f34457ca840b0f170b6b5e76dbb717fb62d17d849cb46c14db3280f076fa7b82fe4f2df16cd3b9a6a50bba801c417b998562dfe23918156144c6a7d70ac9d6584c4e96f444e552cdbefe37e1a6c8202ba4bb82f998f72b762f16fbe788bb9851835dc560e54fa1c67bfcaa033ff2d056038f350a3190e7821e2a3f54ab863fef633ad46ff6ca3edb6efb45441b8204dbba764551c3124ac6aa1411bd8b06a4e1c63867ec116db2a46f72f3f170e6dd04b7273d22ee63a22d4c44db856e34435d7e93accfdaa7781d78afcd99ec5d971677095f072b472755e3229ec51c782b9368ed2464c62995869857a5666d24023bd02d0856676775cf7dd6e9bd5210334958057da7d74b84603b7c982f201c55f361ab1f5c96e05078c95c6d7c5a5b60fa299ef40bd019f214e6f2c34d6de8e64b8e35411855deafedd923aaff75d7b1158aaa4938cb23c4e1581fed48cb22fd0ee85b3ce0b1fd1d9ce1d3087a7f09f88596f19219da6ea7283895ee943182ef8795df2953b45301469da54b89d975d6715e19fcb33f638cf6004b77fc4aa6991cb1ca72d08e330e3f0c43544feab0bdab8bc8534cdbae11ecb30abb04129fe627235418d65d59d1026b93f4ff9f81251462c1d160f0be749b221a3b0ed19537ac24a6500e1ee5dd3f4a53316c8adadc4e7fa1b99d08cb52bbe58244ce542e008b685506b40ae9471556f3348311afa8c70a610e4c627a11c0bc85b169a0705cd5f44fb479abd6a7e631b2d671be7593776873bd97612cf5284f7180bc08af098cc986f42950e847d0ec9b6b75e155c226f5592f98fdfa338f46374ccfb11a2a58a1b0cdcf33aa7f66b78e7521e1c1f8f0533025b0fbb10418f84049e43186f55b5714863ede4683825ab996659ebd15ddd6c3c086377e09a652483557db451f6be43e0c25db44c4d1ccb82282b6210ee56b48bec7c5d0f0bd2d34250b180adc62571eb1ec34071430f3bee243bfbaf16974e8c4fe260f105d0f059734e26fd72893a7dc12f1e83082c5516ee6950174aad7090646c84db13c2a9f975cee8fa686b4c5038cbf53920cd0073fcfc5090fc6c3c0311821cd9da6985af4a569eeb46ffe4793ecb014975e05981b2fade3cdcb79910f9f2113f410860f5cc2cf559c0a80b78ad8ee8882d84aee469d2424326269fdfbca42e67ed0289201c8a9f39192540dbf96f073b9a1562fe49eeff463725e2f58950ac80abad34fbda54e37c55a9b629cbca14c29dd6565bc943f92811eea5b105648c05b6a851df7044e7508a41317ec2654e76bd2d9fd47ab3f8c6a9a063d66c74990361ce1a9f0eda5b33fe740983960b4d37de29035aea40500907353f9288c5aeb2f4cd6e25323c69f4287389e4c89513755bdf25a9f70aab8e13542806b0b768ede40de3d5db98d3e2e366559d98489d68ccd7f8edf821dac3b224f0801ef3ac13045078b0b526fbb20332aeca69e71f2c0094a9d4a84369ef32731cfa8949b24bfb9784096ecc4e58ff271c99f2e74fe534e63c76bd79d9b940bbc4a5493a44134785a9fbc9acb24bf9ac760b1f6b38a0bc5d35d25137852baac03524a2201123476371799851f3cda57b21298f47ba2ae4c7db9c17c1ad1bf3dde5909fde99674795ee611c533391f4a95de74714e90914805e093e85a00ac0dfd42b0da208866a21a16cd08c559d50c4ad3fc9a61c8f6edab66dbd2bf9ea3832766593511c8ec6622da19e03b0a6be787da27f6c2de7d7a066d47e1d0dc7d194b091474075aeda80627a26ab5ca24d5634eb636504b509af8f0b003ea8c13898f14119f657a93b9f1a499f78cfa0e923100f445e65ef23403e9cebb0d5124951befeadc9d924fdf1ee1c22cf40dc796df0de2aa8cdba7751ae7373bfe398056fb7810676c362a7dde0b145a67342258c0bfc703e7364e047f8a6f81a3cafb836af878d3c44130a410d8029f023cb2a8e3a73f0a46a8604a0e42373778dd0843f8c1a1ca187fc3345bda8c80c1b6dc3ff55931e8867c6ebf67958345e975ab79489198c757bd70c9ea07b94ddbfba2f00bbcd9b14dea39bcd20eb5ad0d28dc233ba37907527c73da3d690c1a1a74e94ee5c422fa814b9651dbef7e4972bc194642a83070c72e48f2980d619666e9709031273f795b633db7a54dd2e1e720543b12ca05ffd686684244f9de55c71a735421c884c662d35d23efa048aef82d6d628b698d4f3105abc916671d955a4fe86d3368793c03e3404229ae527ce5e5330a273a0969395b1c85a26890c46a2c7ff5a0c50c9a3df8f3aa0cbd9d31f692667160d29ef1d5278b459f7aecdf3cc3fe16600186fac6945a7b316b5c393e0553e4789c4bda2ef651e88aa53efc1cf8cf7a1d97f016b86bbe36fbb7b21a2c65c2887a49fcd629cae4b95f14304e7aa90062e9fa985c41537354170f2b21908697a64255eeeac3725070c46b83d4e9d7809e45c497e4ba00c8f183fee526ebc9a2b797efc21c80f5c4e547fda4a1829206bf24b7197f1168664ed32be5cba712e77dd2f2015ff1c20557de7256984bcc3caf0f0f6477c8cd7413a910dc9df47aadaaba7afda68f5f497ffdf98083a95414f54cb360502dae8fa2366e48ee71d769336647dc7096e19b4679dc0918370abaa648dd6059a499f61576627c8b407db5ff19c2646204c1b2f55ea6a51a2bf524977255288540c75b8f3f6e35ea2051691a064ade248d1663695d03985046f59c22f26b36c8a5d66b7ccfc1d13d35ad5fcae22dff6c4ce2e98c321002195e4ebe9348415de40c67cf5443bea5d419662c7b6b62ce5c9d8207942c29ae2d6e533f7b4d8150258333cc6ec30ba2fca1e22b796fe79eb0547d3514cc108fb6ddb8099810c9d84888ffb52c8adb339e173e0b4f40cd7e712c822240568c69b1b74a02e33abca34f3a3b7ed756942f53c127ff68427816c6e43ca7a17ca52ae702ddb9836eed758ee225b1155f6c43033fb2aa57ad7d24378e669117afa7f4bfd7f267aa6aa5b137d3d49930944cbdf0389b35cd705edd46e01cdc3b0f54c833a5c3d1e7c79e98c74561e592959745ad479967b0010fa4598aec9071e64d03903a18be9c728f86e207cd688d17af707e3589ffc36cfbc46023c25c1dd550864b69a593008ffec83d55309cf649cf4208abb4b01f75e733230b97ad6edf308dd2a8178c9c7cf25d94e0f7fd390f8862dc22b237b807995b7f1be51c570401f7bff5715c49115ffe471c12a430cc7e2aac1c904083e21daff2036db90440cb19be372790f549d919cfc4afe6495f81be0a484ee0554919a766c19abc3342ea69093b41b6353cea5cc0c7ad3e3ba061cc06b0b595417320fa0674a70b0903041dc5954671df0eb6ec459ff4a574438563abd2bf704a9c6c05b309e93c77b2eae509bc653a44dcd4c696045420854bdbe2bcbe436e9c62b53528268ee1e39c261aef015c8ea463616fc2081a8ec6d03f3b7567a34c24e45ef02dc39303d25910b7b788f0204890cd55790a19e7d27051ebd6b91fa4acc2f460dd0f0825eb9cfee97dfdd05c22649e6c83fa5716ecdd051abe34012182e75b16dabb44615a4c97d8a9c1cee52a134e5201457751dc18e54f3d6d553c4e7710bc4b3a05aee650de9788eadb2398c54ff1ac69d2c20cc2e69f331453930c580825b741dc340272fdaf1c5d77ca3dd6993f2aaa8df98f3ee5d70aeb56cb261ccb9ab13e0cb1fa4c2018a9ceba5db61b5b7972f639d395d4469234f3a085c2ac8d2808d7c2350bf0bd472ae5e5a2ab073fbb3ffe78b0830bd23ea621abcd8cbce3abaad2bc05ad3a66c2f59a67d6cd79d844274de7a4315fef295aa1aba43c1197a8ee28a9323e7ed4ff0367df4da6caa596d4026cd3982f1700f042cebda0977e043585e654e7374895819a9b076c4b6bbba63ef4aacb82d29c210755806d3218f7f7709ac90d29d0a554c6f2ada4127e3d1ea813d17909bd160e23c1824"]}]}, 0x13c8}, 0x1, 0x0, 0x0, 0x40000}, 0x100) [ 562.605751][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.615501][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.625300][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.635049][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.644826][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.654567][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.664392][ C1] sd 0:0:1:0: [sg0] tag#7561 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 00:37:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e24, 0x8, @mcast1, 0x92}, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x21}, 0xfffff760}, 0x0, [0x5, 0x0, 0x8000, 0x73b7800, 0x81, 0x3, 0xb6a, 0x81]}, 0x5c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:35 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r5 = gettid() tkill(r5, 0x15) 00:37:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x8) fallocate(r3, 0x0, 0x0, 0xa6ba0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000000000)={0x18, 0x0, 0x5, {0x2}}, 0x18) 00:37:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000240)={0xffffffff, 0x7fffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000280)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r9, 0x401}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x40) 00:37:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0xc01, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000001c0)="100000000300000000", 0x9}]) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r4, 0x0, 0x1}) 00:37:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000000000000290000003900000021020201cb009f0000000000000000000000000000000000727eea"], 0x28}, 0x0) 00:37:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0xfffffffe}) syz_open_pts(r3, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000000c0)) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 00:37:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000d00000000000000080009000d000000", 0x24) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0x4, 0xffff}}, 0x28) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:37:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x9}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x4a0, 0x140, 0x0, 0x278, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000000100), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2, @remote}}}, {{@arp={@rand_addr, @broadcast, 0xff, 0x0, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0xff, 0x0, 0x101, 0xff]}, 0xc7, 0x7d, 0xff, 0x8001, 0x4, 0x4, 'tunl0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xa4}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00', 0xffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, 0xff, 0xff000000, @mac=@dev={[], 0x26}, {[0x0, 0x0, 0xff, 0x101, 0xff]}, @empty, {[0x1fe, 0x1fe, 0x181, 0xff, 0xff]}, 0x229a, 0xfeff, 0x9, 0x1, 0x7fff, 0x0, 'netpci0\x00', 'teql0\x00', {0xff}, {0x1fd1a8e6a326a8c2}, 0x0, 0x92}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) perf_event_open(&(0x7f0000000040)={0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r4}}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x12) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r6 = dup3(r1, r5, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1000, 0x3}) 00:37:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f00000000c0)=""/52) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:37 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r5 = gettid() tkill(r5, 0x15) 00:37:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) splice(r4, 0x0, r3, 0x0, 0x8b70, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpgrp(r5) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8ec0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r12 = getpgid(0x0) r13 = getegid() setfsgid(r13) sendmsg$unix(r3, &(0x7f0000000a40)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)="d88c0c587591c8d6fa0e3bb7be7bb76cdd7732d66e142b08bb84bacf124863ed8a04d829694685ccf9f8bfc934d4a49072d20955e06f3c4916a9c2872b55e5a7808b3113d06ef33876b1c982cc60a50e73ee7c69e921c99e14055d4b04aa52bfc5706caf629ef4f2803bf9cccc48e4b14eb562792375fe9634b5955beee67117ebf86959bcf98e0a937565b89b15f89e1c2a983e49934a5907cc4c3a53c06955fe7d45f948320aa998882664fd80e85c06a489aa048f31cc085f2423", 0xbc}, {&(0x7f00000004c0)="e39a2a72b9849492461de50b8d36ad7c58ae80edcdfb56ee1e2f90fd5942b74efb7bd175463b62c7a309f61e95220df89f4351f059373550bc5f71cfe4a6ad3efeedb4066db233526f9e67084a8cdf0329ddf8f3aa406a8ff51492a119726048f1c4870fb1c25db24e102915bc8c8b183abb23eff29ed718c3911acb994d4e09bb12d9a1c616b67ab452dd1c70dfd9052325d24d96e2ad14e42f14b100344ae66df8055d1bb4bb58e0fbf4d5b73b9e556cc11f6666c96ddb5a1ee446bd0668764072", 0xc2}, {&(0x7f0000000240)}], 0x3, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r13}}}], 0x70, 0xa5a1cd35f23fb83f}, 0x800) r14 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000014}, [@ldst={0x5, 0x3, 0x1, 0x0, 0x1801}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x135}, 0x48) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r15, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r15, 0x0, r16, 0x0, 0x8ec0, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r17, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r18, 0x401, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffff8000, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r16, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="22f7b2a41fa89647c428e0ad6b2bf9f88f68eacba47a68d8596f8d0290c4ffbdd1eb3ba372f9845bff070000000000007e000000000000000000000c0000000000d600", @ANYRES16=r18, @ANYBLOB="ec9328bd7000fcdbdf2501000000000000000b008cebb6d6001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x60000c0}, 0x800) 00:37:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r3 = inotify_init() read(r3, &(0x7f0000000200)=""/149, 0x95) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x77, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x66b, 0x811e, 0xcb95, 0xfffffffe, r4}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) [ 564.413009][ C1] net_ratelimit: 16 callbacks suppressed [ 564.413031][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 564.425037][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 564.431271][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 564.437623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 564.443985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 564.450199][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 564.456778][ C1] protocol 88fb is buggy, dev hsr_slave_0 00:37:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) geteuid() ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x101000) write$P9_RCLUNK(r6, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="3c21202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d5a783bce2d6daf05123a0dc942ff9f45da3c93fae6b6edc82f44f0ce4d06068f5afdf10457110f27e85eabfa7e20ecdd54ab3840a8800caebade8fb738858404e5cc946e3018986e722d4c3e5efc6a1283652212b640ecb4418f9e7943185fccaab7"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f00000002c0)=""/157, &(0x7f0000000140)=0x9d) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) [ 564.463245][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 564.469541][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 564.475757][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:37:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r9, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x20, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r9, 0x1, 0x6, @local}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) quotactl(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x8000007, 0x0, 0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) r11 = syz_open_pts(r3, 0x4000000000000002) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r13 = dup3(r11, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r13, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000"]}) clock_gettime(0x0, &(0x7f00000002c0)) 00:37:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) r4 = semget$private(0x0, 0x8, 0x0) semop(r4, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(r4, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) semop(r4, &(0x7f0000000000)=[{0x0, 0x1f, 0x1000}, {}], 0x2) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000100)=""/44) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 564.709558][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:37:37 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa3, 0x2, 0xf8, 0x2}, {0x8, 0xff, 0x3f, 0x7fff}]}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="f0ad1d3a6b98ccaa66b134e273f1469aa17d2e79bfb6244bc1e21ddfade70ad228091fba9611af007d6d6e9f357aef6f15affb5ee5b1a26167e9f606f92040e1911a40095d81bf247e653147", 0x39}, {&(0x7f0000000100)="c8e0818b052768945be28166845fa6c714cd7e3c0333582dc6a7dce9a87d6347c5eefd66d751cc3ce5c773184beec2", 0x2f}, {&(0x7f0000000200)="36b2ca352b0b09358b4db04d36df2773e36ad833e1ed9aa6eda7c87670eb8e5d5532c396be44c94cd394a0c768161f8f24cf6049a1366cd19ff145da6f02888b1a08ade3c231c58104abb535529bc689321281f94c151b48b534db6e0b7cde58abdb55cf60ffc44eec35a0783b848fce25c2d3aefdc2bb030b83010695ae9f28b3eed93eee9e88d267794d156903acbd912b489154950048d5b1d43c1bb58544b6d14325fcd45d7c4a7e17750cc2758c2594c87b3ee7a6af0a4c7353db5c492be4cf04205339fc244d3eccb5d439680e00930f3e429975eb496e0303a9b5c36bc2911edb3f30482ccbb012256487d6d44f781677d253d8bebfbba40bbbd676", 0xff}, {&(0x7f0000000340)="ed9c95b7153090f22cac5664cdfd1a90709c5a3b8b9a683cbe7d305a14fc2b28c4e586b0639b8edd292acd5d1a65acaa7cd51d4fa853c01105633127555d2a17e016aaf5893f74feff7583666168f4f5531099873c569755c7622a5a342e7b0a38d3a7757ce12d2bd9802b7eec0e2483dd1de79cd4371a559ee47a951caf0eb5fbf232234e0ec5203612cad6ed39a83c4be1acbf28b72f8677da9286ba5786bcce0b290a606d48affe", 0xa9}], 0x4}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) [ 564.759189][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.881084][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:37:38 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) 00:37:38 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0xffffffffffffff89}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x6}], 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x480, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x110, r1, 0x80000000) 00:37:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x620000, 0x0) r2 = socket$inet(0x2, 0x2, 0x38) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x5f, &(0x7f0000000040)=[r2]}, 0x1) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x0) sendmsg$alg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)="084b6cf2", 0x4}, {&(0x7f00000006c0)="2cc2a43ecc0b4e9be1eebab5512921", 0xf}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x19e, 0x24050}, 0x10) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xbf7f, 0x11, 0x0, 0x27) 00:37:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="23a1202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) sendmsg$unix(r4, &(0x7f0000001400)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000200)="2da366c98b301d1af867ed202e6d0b810ff09405bb046b29b861b04e6a8d94346540c5cdb5fd5cc50ac27982f160f713322faa0bddc7cc605f7cd4ade96607cd66eaf2b7efa71749bc583cd91c6b37c32ca5451efa1f03c147ff3365aa6cab28a1fa027b6968a7730b6a23e246ccfb3f86bc211d7f0c9c3dc591a2199113b3f897cbcde36df011a92b356f8fb564104e794034faf4f93df89746fce97440f9cb00303df0464dd596ad21e2237c17d1bc654f1660aae0b849e20e446815978a9d65525483b435f0a91ad5a604901034f06c", 0xd1}, {&(0x7f0000000140)="062cae219ecc724c45a8eca6c312daf38dda00ea272d3348f2da", 0x1a}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="3af7aff8d5f621e478e281320b48d36120367f371be45844afcb8ab72f9b1520a09948255b8154f5f79e900c48d4716a7e74df447dcb59c82e23dd3cfc0666374c1e599ce031f54876db418b381f5439a8e5548fcb0123825f4a532d6aaca2b617c0d36257172dc3bd5dde8b7921248d288f3f29df9b03ce8f3e682020de6a6d1ce2164f768937a704be1de9d3b3a6370697589b3fb2268d0ca607c46a24e13605a047cca56a418c378316", 0xab}], 0x4, 0x0, 0x0, 0x4}, 0x20010) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r4, 0x540a, 0x1) 00:37:38 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) 00:37:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) recvfrom$inet(r2, &(0x7f0000000200)=""/226, 0xe2, 0x20020101, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) 00:37:40 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x81, 0x200) sendmsg$inet(r1, &(0x7f0000007500)={&(0x7f0000005180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000007400)=[{&(0x7f00000051c0)="df", 0x20000}], 0x1}, 0x0) 00:37:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202efd2807471b5f8b3c6a19dbdc0e0010020002b2fd0dfecccd7f09760f5472f34e7e56a5a741cbba6d9b7d15486219a7939485452591f73586a60d3e6fc7f3cd80b1022a27e8d489b7ace930833adabc65c7f3a386191a233506634a5eef877a9de94c3ca05e824c304f8b04d28a2acb84863726766bc78939d67b32c3206f87"], 0x22) rt_sigprocmask(0x1, &(0x7f0000000000)={0x3}, &(0x7f0000000200), 0x8) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xd, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000240)={r4, r5/1000+10000}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000000c0)={0x7fff, 0xc1d4dfe1df632390, 0x4, 0x4000, {r7, r8/1000+30000}, {0x0, 0xc, 0x1, 0x40, 0x1, 0x3, "69a7e3d5"}, 0x80, 0x3, @fd, 0x4}) splice(r3, 0x0, r6, 0x0, 0x8ec0, 0x0) r9 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x84141) ioctl$KDGKBSENT(r9, 0x4b48, &(0x7f0000000180)={0x54, 0x5d, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x1) 00:37:40 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x406000) r1 = geteuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000480)={{0xcda, r1, r2, r3, 0x0, 0x1, 0xfffb}, 0x2, 0xbb, 0xffffffff, 0x8, r4, r6, 0x8001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8ec0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video1\x00', 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=r9, @ANYBLOB="080429bd7000fcdbdf250700000014000100100001007564703a73797a3200000000240007000c000300ffff0000000000000c00040001000000000000000800010001000100280002000800020009000000040004000800fe7c738c1e63252c7f40cd15010002000000040004000400040008000100080000002400060008000100000000000400020004000200080001008f0000000800010007000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0xaac4c6e213459a2d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000080)=@raw=[@ldst={0x2, 0xf0a211d129c03265, 0x3, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x1, 0x9, 0x6, 0x100, 0x4}, @alu={0x7, 0x0, 0x5, 0x8, 0xb21cccfcee3ea016, 0x2, 0xdcfc7dbef4c49c99}, @ldst={0x3, 0x1, 0x1, 0x2, 0x6, 0x8, 0x8}, @generic={0x0, 0x7, 0x0, 0x3, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0xad2a3d83a7fd392, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 00:37:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @rand_addr=0x8000}, 0xc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x4b452dd05aa69ad9, 0x4) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1422, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000380)=""/255) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f0000000240)=0x3) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000100)) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r4, &(0x7f0000000140), 0x1c) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2, 0x4], 0x2) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:40 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) 00:37:40 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) 00:37:40 executing program 0: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000100)=0x93, 0x4) r0 = socket$inet(0x2, 0x3, 0x800000800000001) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) getdents(r2, &(0x7f00000001c0)=""/14, 0xe) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000000c0)={r4, 0x2}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@caif=@rfm={0x25, 0x0, "9c337b1c2fd5d6461f97e74a3a42bc98"}, 0x80) 00:37:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 00:37:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14, 0x69, 0x0, {0x0, 0x4}}, 0x709f3a24f17ca6e1) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2b702bcdac787b62, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r2) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) [ 567.432763][T19535] IPVS: ftp: loaded support on port[0] = 21 00:37:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x77, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r6, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x5}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f0000000100)={0x258, 0xc, [0x400, 0x9, 0xa58]}) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:40 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) [ 567.705785][T19549] IPVS: ftp: loaded support on port[0] = 21 00:37:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xd, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000240)={r4, r5/1000+10000}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000000c0)={0x7fff, 0xc1d4dfe1df632390, 0x4, 0x4000, {r7, r8/1000+30000}, {0x0, 0xc, 0x1, 0x40, 0x1, 0x3, "69a7e3d5"}, 0x80, 0x3, @fd, 0x4}) splice(r3, 0x0, r6, 0x0, 0x8ec0, 0x0) r9 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x84141) ioctl$KDGKBSENT(r9, 0x4b48, &(0x7f0000000180)={0x54, 0x5d, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x1) 00:37:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000380)=""/17) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0x35, {0x2, @usr_ip4_spec={@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x22}, 0x5, 0x8, 0x1, 0x20}, @hdata="ee39e5dacd96e50affb869bb84e1887ed4a0e0ccdaae9da575d82afcfaab42e1ecb999804df5aa08b1e81ad59e74f70057cf4fb4bfd098345b15082c918684b1cb4eea54f438ce82", 0x4, 0x81, 0x4, 0x4, 0xfffffffffffffffe}}}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f0000000400)={"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"}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) r8 = syz_open_pts(r3, 0x4000000000000002) r9 = dup3(r8, r0, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f6669b0b3bb96faeff90baff356fd280747985fdc0e0010020002b28d464f7a00243d82149cd80291293eaee17857064b6d914601b8d02869b543b6943b20a05fce29"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r11 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x1000, 0x200201) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1001, 0x2}) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x8ec0, 0x0) ioctl$sock_inet_SIOCGARP(r12, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @local}, {0x6, @broadcast}, 0xc, {0x2, 0x4e20, @loopback}, 'veth0_to_hsr\x00'}) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r9, 0x540a, 0x1) 00:37:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x1bf) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66ba4300b000eec4018dfcb2690000002e410f00dd2643dbab87000000660ff3247f420f2d98230000000f20c035000000200f22c00f2226c74424000b000000c7442402cd000000c7442406000000000f01142466420f3a22490000", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffcb) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) ioctl$RTC_WIE_OFF(r6, 0x7010) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:37:41 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) sched_yield() r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) add_key(&(0x7f0000000580)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x3, r2) add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000480)="fac8e93d790d679fe4d62fa286bce5ae53f9606046ba6d9fb2d24225b51711e898223e6888b055c082d342dbab59aaeba2266343050802c2052869ea29f695a0ba82f2af0af30af9989a2ba142298f5849a04ff9d559ab50a2bd3ca1c0cc2322ee00", 0x62, r2) add_key$keyring(&(0x7f0000000240)='\x00\x00\x00\x00\x00\xfc\xff\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) clone(0x6c934500, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) r5 = accept4$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x9, 0x8, 0xc0, 0x3, 0x1ff, 0x6, 0x1, 0x4, 0x80000000, 0x8, 0x9, 0xfffffffffffffff8, 0x1, 0x2, 0x400]}, &(0x7f0000000400)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000006c0)={r8, @in6={{0xa, 0x4e20, 0x7f, @local, 0x2c6}}}, 0x84) 00:37:41 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) 00:37:41 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffffa, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) shutdown(r1, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) fsetxattr$security_evm(r2, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x14, "ca43e101b448"}, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}], 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:37:41 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) 00:37:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90bc8f356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000014) 00:37:41 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) 00:37:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000280)={0xa, 0x2, 0x5, 0x8, 'syz1\x00', 0xe5d}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00000002", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x77, &(0x7f0000000040)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r9, 0x10000}, &(0x7f0000000200)=0x8) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x200000}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="a421202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d45578ac98283c8d952df219cfbe039b45747c37dbdb9654a731bbf1a553518c016317e89ebf9ae1042fc0dc2c30b05cf935fe5d8d49b906333238bf89aa7cbb674d5a7f91328a06ad328cd2bff0c7a9f85b99c08a531c3621f80be445a7aea94a368b17916c2679e"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$VIDIOC_ENUMOUTPUT(r7, 0xc0485630, &(0x7f00000000c0)={0x5, "b2ff09b86c2cd9dbaacbbce703d8050cbc5029cf50c18fa1a9d38f966b616414", 0x1, 0x2, 0xffffffc7, 0x80008, 0x2}) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:42 executing program 3: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4, @empty, 0x8}, 0x972eb1652fac6848) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$restrict_keyring(0x3, r3, 0x0, 0x0) r4 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='pagemap\x00', r3) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="8fb6201523c020bacfe6a100bdce233b316e996f96a3bdfa908e02e533b62c4752bdec813dca6492397497aa2c7d2c16adc5c778c61dd7c54423a2b70779b546d69c385fea19598b8fcb0b0b97175a9c583a2740d356d87f75097eafed0f4b3c9841922d7436926615bf7e90d99550da86f020809a2ae0b8639620ba8c2a39b29fc4aaddd32bf78d47cc997b9b57e602114c98e1ef38eb2a75839de89595adcaf743784a", 0xa4, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000180)='blacklist\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r5, ':chain\x00'}) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000040)=0x103f00, 0x8001) 00:37:42 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x15) 00:37:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000014) 00:37:42 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0x9, 0xe4ee06466852205c) socket$inet(0x2, 0x0, 0x98) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) r2 = gettid() fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000001c0)={0x3, 0x0, 0x1, 0x1, r2}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000200)) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000680)={0x0, 0x1, [0x6, 0xe94, 0x1f, 0x3ff, 0x3, 0x1]}) r4 = socket$inet(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2000, 0x0) r5 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000500)={0xfd, 0x2, 0x1a0}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x4000, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "4c4e8df053fa376cab28f4a14acba552264a714dd4512bb6393fc3ac373a6705", "b2648db9f43fe84b5b0eec550ffa221f2d3151951b7db07cc4236c3e7e9d8100", "3d0f0d5b35c95993850d02667bdad830b66b0171dd2b9be52713d9bc33d98daf", "f96a280f9e65906204b3e316a5b251f3051bf6577463c7444e84db06107eacbd", "3733759e7470576187bb23fc1b55bd488af5ce3ce7c4a7b47ecfe42919c4e9df", "d2c2c49ab976bc053f568c73", 0x80, 0x400, 0x200, 0x9, 0x1}}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xffffffffffffffdf) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) close(r8) setsockopt(r4, 0xfffffffa, 0x6, &(0x7f0000000340)="5d4400e383c3ddbf668befd5ac323033aa347271f2bd112d51dadcd982c039263b36c5e85bc789f648d8fc9cac10a4a3257df6429007d6a2f7aedd26f3ae2782a89bbb1aad70db23204b1784fcb2c921641d", 0x52) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fefdf715ea0d886cba48a1fdb6c664486cbdcad3d711c368d7443dbf3b27927e298009b2467799e1488a495d956fb2ccf08f765ab78b6f91af5952b6f2", 0x3d}], 0x1}, 0x0) sendto$inet(r4, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 00:37:42 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x62, &(0x7f00000006c0)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c016d3", 0x2c, 0x0, 0x0, @local, @ipv4={[], [], @empty=0xffffff87}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast2]}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x24, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, [{[], {0x8100, 0x3, 0x1, 0x1}}], {@llc_tr={0x11, {@snap={0x0, 0x0, "6697", 'MhB', 0xcd736d9bf34e67a7, "781b332e76dd5d1ed6"}}}}}, &(0x7f0000000040)={0x0, 0x2, [0x451, 0x4c3, 0xd2c, 0xe14]}) 00:37:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/38, 0x26, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x420}], 0x93, 0x0, &(0x7f00000002c0)="b16fef999a9c3b2f8a1d6d534e52d3f3cc9fb4eac8c072cb479f33b179cb869de6101c99c00ce7196c2166dddb3b2b1552ac0ad0b4226182df4499024f539baed5a1f66e6637ba511a55ce2a63f161450a73a92f10ef7ba3c724b533c1d2949d36bb064a117ba3fce212b29de933834ae0db4616c70b06fdc6d728effd3854de8776d1297d04053571672c6125ca2a8d166852"}) r6 = dup3(r4, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:37:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @loopback}}}, 0x21a) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r4, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r5, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x141100, 0x0) splice(r3, 0x0, r4, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:42 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="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"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0xfe2d4a820052a11e, 0x0) r5 = open(&(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x141000, 0x100) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000006c0)={0x0, 0x100000001, 0x3, 0x0, 0x0, [{r3, 0x0, 0xb0}, {r6, 0x0, 0x3dc}, {r5}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8f89cd1c4cfe7237, 0x13, r5, 0x62) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02620000cef51a18da7722f394ba64ad"], 0x8, 0x0) r7 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000000eaffffffffffffff00000000000000000010d6f59773cfa7d5963be2cca151c89a6e4f2387a0af20ac5339325ebea6a8ab"]) r8 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000740)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000002208fc97dc101676581d389268f8bd74ea700c930e54b62621a721c1d85fe48d0b76d5abf3f8a7359be9d5beb75d17f93a6b0e82eab73ffeb524beeefdda06b51481bbba21"]) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000c80)={0x0, @bt={0x6, 0x1, 0x0, 0x3, 0x100000001, 0x1, 0x7bdd, 0x400, 0x1000, 0x6251, 0x9, 0xb6f, 0x8, 0x6, 0x6}}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0x0) mknodat(r10, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200, 0x0) getsockopt$packet_buf(r7, 0x107, 0xd, &(0x7f0000000b80)=""/204, &(0x7f0000000280)=0xcc) r11 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x68}}, 0x0) 00:37:43 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0xd84834531382cd29) sendto(r0, &(0x7f0000000040)="3d765d9642e5c33b917236f5b571e9386b54c581be188b602172469e93828799f860056a76f9a744012bdabfb7f8a5162e668592b6583794dfb65c8c6be566e77f5d3ca4dce99257406b1fc4d7b0c1ec642c52a96454501fdb85c7c8fbf5ba978762a03f12c376cd613337dc885520df097580a065283505", 0x78, 0x10, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x5, @mcast2, 0x401}, 0x80) syz_emit_ethernet(0x2d1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000ffffffffffff0800450002c30000000000019078ac2314bbac1414110c20880b00cd0000ba9f001f456b0337759152afe90913c4a409564c2959f4c8ee257fe9512f256c912d4f5241c17c7ff4d2bee1811a22131584e8ab378a11f9f47f06b9579e88e8aa6a94107a75d135e22df0d8ee5ad6eb78e54c054554605b92faa187dca8f3252497a87adf23abdc5784db64e395cbe7631c3a9546a23aec26e5fe6a74eae6d8177d0ca0fe59b2484b5fbcd7d4c620602c361395ef89d5f0f0d89a5a4af98b168456b776c8c1674f2e33fcb8e80800000000000000c3b8e91be7fbe3fe603d79f640e1370d4c6fb96d3545a8141c2a3e3f0500080002e6d0f686c58b696d0e278d9282b858f540dd0900f7900d37cf223c85f9bcc19ac3a93f4bf0878fa2c86a463ed28ff6155c31d88be5f9190332fd936fd73e6c75a4f85b05c2be660fb9d98e3dbab5ab032b42a7430923d40fab5d68add2e02bc8f0f2870399b14de353b2cade880d01e25cae74eaa27bff9fcbc6140d92583039fe0305576f0a879295c3152e2b079ee53730d566b0207bd66bb35ab66d0d8b2164497a93a9386abbfcd4d7e7197e4bf56f273aeb76a8ea487d1bfc414831708fa7febc48f443288ba11e44c274b661d07383735f3352aafef58c7efdfb77f39c260626d913e74eaaeab0b4de0a85981f4454004de3635b9ce255000086dd0004e77915983a5f571766cf48032d634ee18a4c179d0e33e7e08dfafb489c98c0fe6c239c44d13d1fd0d2cbdca565f7400bb0c04b90a48b05b7312a562713b19702a62bc370fac191f51fddb407adce87176401194dca143583238fdf8ffe95909b24014d963a54c14b4d6c49af1ffa01b08a984f3500c7db96e153fe080088be000000011a05687f010000000000007f080022eb0000000428011a200200006c00000000030400a110080065580000000191af525c974a9a72716f986ada5d876ebdb332b77fbce16a83dabdc77d0108df17"], 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10) 00:37:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9b5f45902009000000d9d07041b4fc4e00062541ee5a9ae1d0c8000000000000000000", @ANYRES32=0x0, @ANYBLOB="430200000000000008000a00", @ANYRES32=0x6, @ANYBLOB="280012000c000100697036746e6c0000180002001400030000000000000000000000ffffac1e0001"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 00:37:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet(0xa, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01bbcecc", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x98) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400210) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r9}) 00:37:43 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x15) 00:37:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000014) 00:37:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000"]}) accept4(r5, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000140)=0x80, 0x80000) r6 = dup3(r4, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000200)) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:37:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) getpeername$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) connect$inet6(r3, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000240)={0x5, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x88) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 570.681490][ C1] net_ratelimit: 26 callbacks suppressed [ 570.681511][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 570.694958][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 570.704750][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 570.711653][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 570.722496][ C1] protocol 88fb is buggy, dev hsr_slave_0 00:37:43 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x21) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3, 0x18, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xee3b, 0xef2d849cb71c398b) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @raw_data=[0x2, 0x8, 0x6, 0x2, 0x4, 0x3, 0x5aaa, 0x60, 0x95f, 0x6, 0x0, 0x32, 0xfff, 0x8, 0x67a, 0x400, 0x3, 0xe8a, 0x6, 0x7fff, 0xe9f, 0x7, 0x55, 0xe1b, 0x12, 0xbc, 0x1, 0x5, 0x6, 0xbe8, 0x7, 0x4]}) execve(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/128, 0xaa6}) [ 570.733234][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 570.743299][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 570.751622][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 570.761484][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 570.768698][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:37:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xe32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000100)="cf1cc40c120a5a6dcdca61d94c8559f12c2b5fec63e78eaa6e9ce2afa0e17c208258734a49dd84be2891435d694181afe84f39bbe08e0bd97ba14e36", 0x3c) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) dup3(0xffffffffffffffff, r2, 0x180000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000200)={0x5, 0x8001, 0x8, 0x2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:43 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x100000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000380)=0x101) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vga_arbiter\x00', 0x80100, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x8ec0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x4, 0x4, 0x1, 0x5, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x7ff, 0xdd46, 0x200, 0x9a, 0x1}}, &(0x7f0000000000)=0xb0) pwritev(r5, &(0x7f0000000680)=[{&(0x7f00000003c0)="dbfae04c2e6ddae86323e3cb3833d527eb3c9c4f87eaaa46248d477b8004555a3a8841f603dbb42d5d085b41c9e8667dca265351989e1dd9e2c667813e72759097032b9cc94bc87f98cca4d22bcb7b13cab4cda613128c1cd3e10b4f38cf8510958bd01fa1f49fb0e435f211b04f11274088a6b045e7fbccb35b4353cc1af547d6925d1ff10fb4182613a90afa6dc72f907447b977aeb297e48fb2b8e2643411896c4c7e4e7581d5b08d78370ece0964fb9d7877e0a8ac", 0xb7}, {&(0x7f0000000480)="e517c5e6efe4d4c539dacc1ceee4d2465ef7ce8bacfcb91ae8b893783564dda64d24b4931e26d185e31b0e1df38d44b0eeeb8be3f4b58815f98a43b3631501af106b83afa3938fc062746269abf345cef46ab49d8e6b32a5b30405bde466c3ace173d22150f985a28018191e3e1e92b8ea0d5613b2dabae9c0b87ae5f28343c0577cadf06f8c8c377a976b6881bd63b70613aeaefac2b7246c558ebe73a480c365ac", 0xa2}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000540)="f956810e3f2c514376368adeb73b02f7bd53408b69dbda8bd6a5427066535cc00f8404da0e24640a", 0x28}, {&(0x7f0000000580)="ffffd2698d0a3e6088f9ef1c6535253638c8cedeecd7bc97e5701a8636fc7835e0eff2b2718b644b3e3fbdc58ac6352fa53efca8445530af0d430ff4a7a7520c30611c0f4480f538e777e674b23410a9cd7881913b2bf81a278490e272a6571ed552926587df5c0b374da0a3b26377daaa5275d5fec09459171e21608f783206e781b5f36298dcd8a74ef46a95ec2423eaa68423d83cfdc13febe3be34165e52a17ea338700d8fe4999f8c57c44bb432e9f7b330d0a4e31c5ae068c80cf04854ea6e1d2898212e54457eaecdb91dc1f546314f1acb2847ff9b2882f88414574d8400cc287c4245", 0xe7}], 0x5, 0x7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000180)={r8, 0x8b, "f68b67b88bb3de3b6e10c1149ed852a87a5dea09083adc3b68a75fdd1bf397a82d7f081fb1388870c662acb16a46f8663fe00f1ee93bc03d85095f07854739d080ebdcfefd49c98fea987338ab6478ef8aa5ceacf26a9763a5c448d7bb6d363fc7183454723d7e6d6a7c8da09a741c7cab3780605578a82debea28888f5a9916a6c480cc5ce53e4a255f58"}, &(0x7f0000000280)=0x93) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f13fe0504000800080006000400ff7e", 0x24}], 0x1}, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740)='/dev/hwrng\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000800)={&(0x7f0000000780), &(0x7f00000007c0)=""/53, 0x35}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000040001804076e54d01ffb"]}) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000002c0)=0x8000) 00:37:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000014) 00:37:44 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000080), 0x44) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000040)="f11134df92d1bcfd7e4056f26c50d79db2032a125ae69c11251ab61fc3f5730f929d35ed660f67205c85b38548ebb26d1c96caffb390e75bca7d7a4fddf69924cf5c56b62b"}, 0x20) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000080), 0xfcf3) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x3, 0x0, 0x0, @broadcast}}}}}, 0x0) 00:37:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r7, 0x4040aea4, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x5, 0x6, 0x1}) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:44 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000080), 0x44) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000040)="f11134df92d1bcfd7e4056f26c50d79db2032a125ae69c11251ab61fc3f5730f929d35ed660f67205c85b38548ebb26d1c96caffb390e75bca7d7a4fddf69924cf5c56b62b"}, 0x20) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000080), 0xfcf3) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x3, 0x0, 0x0, @broadcast}}}}}, 0x0) 00:37:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) mq_notify(r5, &(0x7f00000000c0)={0x0, 0x10, 0x0, @tid=r6}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r3, 0x4000000000000002) r8 = dup3(r7, r0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x0, {0x82, 0x0, 0x1}}, 0xffffffffffffff16) ioctl$USBDEVFS_RESET(r2, 0x5514) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r8, 0x540a, 0x1) 00:37:44 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x15) 00:37:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0xf4, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x83}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xffffffffffffff83, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in6=@empty, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'lrw-camellia-aesni\x00'}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x180}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) pselect6(0x27, &(0x7f0000000300)={0x100, 0xfc97, 0x6, 0x7fff, 0x8, 0xdf4, 0xfffffffffffffffb, 0x9}, &(0x7f0000000340)={0x0, 0x100000001, 0x3, 0x7, 0x3ff, 0x32ea, 0x2, 0x5}, &(0x7f0000000380)={0x0, 0x4, 0x4, 0xec1, 0x3, 0xfffffffffffffeff, 0x6, 0xfffffffffffffffd}, &(0x7f0000000400)={r8, r9+10000000}, &(0x7f0000000480)={&(0x7f0000000440)={0x4}, 0x8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 00:37:44 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) sendto$isdn(r2, &(0x7f0000000080)={0x3, 0x3, "b47dcbcfe4"}, 0xd, 0x20000010, &(0x7f00000000c0)={0x22, 0xf, 0x9, 0x93, 0x21}, 0x6) setsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f0000000040)=0xea, 0x642a59c7) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="8ef4", 0xffc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)='L', 0x1}], 0x1}}], 0x2, 0x0) 00:37:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 00:37:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xffffffffffff1e7a}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) fadvise64(r1, 0x5, 0x7, 0x4) write(r0, &(0x7f0000000140)="1100000052001f0014f9f4070009040002", 0x11) 00:37:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fdd0d980280747985fdc0e0010020002b2fd0d"], 0x22) r6 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x401) write$P9_RATTACH(r6, &(0x7f00000001c0)={0x43cd4be6494cc3ce, 0x69, 0x1, {0x0, 0x1}}, 0xffffff45) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x10001, 0x1, "f69ef841c9ce8b923f96ecf285de2c40f0420a3b89aa9094764a71ef362660b02ea98098471abebc57e1ae66bd5b3f5c66f81e1c58b35571de9a1990d39f5470919aaa92b16295699702b9d270daacd325338d"}) 00:37:44 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x28000, 0x0) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0xc0, 0x0, 0x1}, 0x7}}, 0x18) mount(0x0, &(0x7f0000027000)='./file0\x00', 0x0, 0x50, 0x0) 00:37:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) sendto$unix(r2, &(0x7f0000000100)="1fceefb51704f7c5c36d39a5af6903c70d1c3939423855796afd9ee8a1a4c416afc546152213b50675f45204fb17b836adb82fa6dd0e4a4ce087f9194df88d5e01efa5394a41d77d3873d20e7351c706f976e90498253723f62f81c7e8a6efd1a18834bf9ecaaa0113d43b48abc53612fb0baa161d5806518f757d1b80e93b9ab5cae3143163932f250d39281fc9bd2703905714e5fd0c44fec90019ac10c40b3447f63213b6093855c40554158dfefde0b75304d1f304b153f24ac545cc1fd1dae6bf80462ee79852c06152", 0xcc, 0x80, &(0x7f0000000000)=@abs={0x3, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 00:37:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x8, 0x9, 0xfe}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r9, 0x40044900, 0x101) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff3d, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0xa8}, 0x3c) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x00\x00\x00\x00t\x00', @ifru_flags=0x2}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/184, 0xb8}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r6, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={r3, r6, r7}, 0xc) 00:37:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x80000) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r14, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r14, @ANYBLOB="080008005f526bae1400020000000000000000000000ffffffffffd2018cbd8ffd69ff"], 0x34}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r14}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@bridge_dellink={0x124, 0x11, 0x308, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0xe063, 0x800}, [@IFLA_WEIGHT={0x8, 0xf, 0x6}, @IFLA_LINKINFO={0xc8, 0x12, @ip6vti={{0xc, 0x1, 'ip6vti\x00'}, {0xb8, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0x80000001}], @IFLA_VTI_LOCAL={0x14, 0x4, @mcast1}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r1}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x101}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x80000}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3f}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}], @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x6}, @IFLA_VTI_LINK={0x8, 0x1, r8}, @IFLA_VTI_OKEY={0x3b, 0x3, 0x200}], @IFLA_VTI_LOCAL={0x14, 0x4, @local}, @IFLA_VTI_REMOTE={0x14, 0x5, @mcast1}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x7}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x5a7}]]}}}, @IFLA_CARRIER_CHANGES={0xfffffffffffffda5, 0x23, 0x6}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x5}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xffffffff}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_MASTER={0xfffffffffffffdb2, 0xa, r14}, @IFLA_EVENT={0x8, 0x2c, 0x88}, @IFLA_IFALIASn={0x4}]}, 0x124}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x1}, 0x10) [ 572.190625][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 572.217400][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 572.243687][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 572.268143][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:37:45 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x15) 00:37:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}]}, 0x20}}, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) syz_open_pts(r3, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff34bfd280747985fdc0ee1964cbe02b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:45 executing program 5: r0 = socket$inet6(0xa, 0x81000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f00000052c0)=[{{&(0x7f0000000980)={0xa, 0x4e23, 0x2, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) 00:37:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 00:37:45 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x801) setns(r1, 0x20000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040)="2b0a3632f19994d96a58a5fb92e707bc027e05cd3f7c493d417982403fada04487932dcccddba60f2088e2acb6b0ca0fecbc49a7748338e8aa714d5a3f94f127b77b0de034541daa1a8cc9d0cba852fc42e92fd84d82889c142bb65465b0a4f765854c598bc703b8efa312edfa6cba89e05bc09c5cfe5abbe35caddf02db3281a91924a0b2a15cad35a4146eea95", &(0x7f0000000100)=""/169}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000200)=0x1f) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000280)={0x10000, 0x6}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x20000, 0x0) openat(r4, &(0x7f0000000300)='./file0\x00', 0x440, 0x2) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x10140, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000380)={0xa, 0x2, {0x54, 0xff01, 0xfff8, {0x7, 0x6}, {0x8, 0x2}, @cond=[{0x7, 0x0, 0x5, 0x4, 0x9efd, 0x7}, {0x81, 0x2, 0x4, 0xfffb, 0x6, 0x1}]}, {0x57, 0x3f, 0x40, {0xb5ee, 0x7}, {0x9, 0x249}, @rumble={0xffff, 0x6}}}) r6 = socket$tipc(0x1e, 0x7, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) r7 = getgid() stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r7, 0xee01, r8) r9 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x7ff, 0x8100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x48, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x100, @mcast2, 0x20}]}, &(0x7f00000005c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f0000000600)=r10, 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000640)={0x0, 0x0, [], @bt={0xa000000, 0x8, 0x4, 0x1, 0xd20, 0x7f, 0xa6360bc31e6c9d92, 0x8}}) r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000740)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000780)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, &(0x7f00000007c0)={r12, r13}) r14 = syz_open_dev$swradio(&(0x7f0000000800)='/dev/swradio#\x00', 0x0, 0x2) fsetxattr$smack_xattr_label(r14, &(0x7f0000000840)='security.SMACK64\x00', &(0x7f0000000880)={'/dev/full\x00'}, 0xb, 0x2) ioctl$KDSKBLED(r11, 0x4b65, 0x6) r15 = syz_open_dev$binderN(&(0x7f00000008c0)='/dev/binder#\x00', 0x0, 0x2) r16 = eventfd(0x91) fcntl$dupfd(r15, 0x0, r16) 00:37:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x11, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) 00:37:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0eebe651b475d6337906bda0a80010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000000)=""/101) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@mpls_getroute={0x1c, 0x1a, 0x20, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:37:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 00:37:46 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e000000280012000ca8e97953680448d8650000180016bff18f070032c6e6b6cb33cabacf730a75781fdb1367c8ea69256bdd1930ed71f8bb0ad01c8a19a54738bc411e941bed36ddc43bbc3619900a45bcebc1f6b954fd51e1a990e8bdfa3f920ef404762e1fbbf7d7dda41e5a568c16a08a6d95a567632144f672a474ebd24c79142648a208b404c1aa7d44d39c16f639fa3c03869d6f86202320b0f6d5412c"], 0x50}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x77, &(0x7f0000000040)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000080)={r8, 0x5}, 0x8) sendmmsg$alg(r3, &(0x7f0000000140), 0x30a, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x8ec0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r10, 0x4010641a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[0x4, 0x7fe0]}) 00:37:46 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x15) 00:37:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x49006575595c1574}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@gettfilter={0x58, 0x2e, 0xc, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0x0, 0x10}, {0x6, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xf625}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) write$FUSE_WRITE(r7, &(0x7f0000000280)={0x18, 0x0, 0x2, {0x2}}, 0x18) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r5, 0x540a, 0x1) 00:37:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x1080000007}, 0x10) write(r0, &(0x7f0000000140)="240000001a005f0214f9f407000904008100000000000000000000000800040040000000", 0xfc9b) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000100)) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) mq_getsetattr(r2, &(0x7f0000000000)={0x7fffffff, 0x20e, 0x800000000000000, 0x0, 0x6, 0xffff, 0x9, 0xfffffffffffffffb}, &(0x7f0000000040)) 00:37:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) tkill(r1, 0x1000000000014) 00:37:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r5, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d67}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad09335019366da6ec268af31dbcd8f95cfc82d9cf40664d4443aad55b7de8e40ee566fc6fa1cd4a7c9880da7385ef88e8b5e120d227475c20ae117c0b7ab866a0", 0x47}], 0x1) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 573.972120][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:47 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200006) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x10240, 0x0) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000240)={0x60000008}) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x11, r2, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000000)={0xffffffffffffffe5, 0xd, 0x0, {{}, 0x2}}, 0x18) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f00000000c0)) r10 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000180)={0x0, 0xa, 0x2007, 0x8, 0x0, 0xfe, 0x20, 0x80, 0x2000000, 0x1, 0x4, 0xb1a}) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r11, 0x4000000000008002) r13 = dup3(r12, r6, 0x0) ioctl$TCXONC(r13, 0x540a, 0x0) write$binfmt_script(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r14, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r15, 0x0, 0x8ec0, 0x0) write$P9_RATTACH(r15, &(0x7f00000001c0)={0x3b8}, 0x14) fcntl$setstatus(r6, 0x4, 0x40800) ioctl$TCXONC(r13, 0x540a, 0x1) 00:37:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@RTM_GETNSID={0x1c, 0x5a, 0x811, 0x0, 0x0, {}, [@NETNSA_NSID={0x8}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x9}, &(0x7f0000000340)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xfff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r2, 0x10, &(0x7f00000004c0)={&(0x7f0000000000)=""/10, 0xa, r5}}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000200)={0x101, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @local}}}, 0x108) 00:37:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) close(r0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) read(r1, &(0x7f0000000180)=""/75, 0x4b) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5000) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8ec0, 0x0) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x77, &(0x7f0000000040)={r12}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r12, 0x8}, &(0x7f0000000380)=0x8) setsockopt$inet6_int(r7, 0x29, 0x12, &(0x7f0000000280)=0x8001, 0x4) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x3, 0x4) r13 = socket$packet(0x11, 0x3, 0x300) openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self\x00', 0x40280, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="4200000000000900020000005b70131d54980bc1"]}) eventfd(0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r13, 0x8919, &(0x7f00000000c0)={'\x00', {0x2, 0x4e24, @broadcast}}) splice(r3, 0x0, r4, 0x0, 0x8ec0, 0x0) write$9p(r4, &(0x7f0000000000)="07ea6ab4825b94bb7f4d67f42ef1c7f1f547e8b924601f0bd99b83d37806db26ae", 0x21) r14 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x5, 0xc2) setsockopt$IP_VS_SO_SET_DEL(r14, 0x0, 0x484, &(0x7f0000000200)={0x16, @rand_addr=0x2, 0x4e21, 0x4, 'ovf\x00', 0x6, 0x7, 0x27}, 0x2c) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 574.359614][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x8) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 574.451297][T19832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:47 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x15) 00:37:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r5, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d67}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:47 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x15) 00:37:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000004001ff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='\xa1dev/p \x01x\x00', 0x80985, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0x0, 0x5, 0x0, 0xb12}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r3, 0x4000000000000002) r6 = dup3(r5, r0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669c1b3bb96faeff90baff356fd280747985fdc0e0010020002b2fd0d"], 0x22) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x69, 0x0, {0x0, 0x2}}, 0x14) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r6, 0x540a, 0x1) 00:37:48 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x15) [ 575.329052][T19840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000240)) tkill(r1, 0x1000000000014) 00:37:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x1000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x2, 0x1f, @mcast2, 0x6}], 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) r5 = semget$private(0x0, 0x0, 0x10) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000100)=[0xff, 0x20, 0x7, 0x1f, 0x3]) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x8) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:49 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x3b, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x15) 00:37:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r5, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d67}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r5, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d67}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 576.905520][ C1] net_ratelimit: 26 callbacks suppressed [ 576.905542][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 576.919735][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 576.932901][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 576.943252][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 577.530711][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 577.536994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 577.549971][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.628032][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 577.634187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 577.640345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 577.646449][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:37:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r5, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d67}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) [ 577.909477][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r5, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d67}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) 00:37:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000200)) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000004000)) 00:37:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) fsetxattr(r2, &(0x7f0000000000)=@random={'btrfs.', '*\x00'}, &(0x7f00000000c0)='cpusetkeyring&\xa3\x00', 0x10, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 578.441469][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x1000) fsync(0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b228b5c500", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c200", "b611dfba", "907291487b859891"}, 0x38) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r5, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d67}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) 00:37:51 executing program 5: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'nlmon0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x400400, 0x0) splice(r3, 0x0, r7, 0x0, 0xcebf, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r8, r1}}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="20005784c1de2d1799c10000", @ANYRES16=r10, @ANYBLOB="01070000000000000000130008000c0009000602020000000000"], 0x20}}, 0x0) [ 579.035826][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 579.223004][T19904] ===================================================== [ 579.229988][T19904] BUG: KMSAN: uninit-value in gf128mul_4k_lle+0x1fb/0x2b0 [ 579.232483][T19904] CPU: 0 PID: 19904 Comm: syz-executor.3 Not tainted 5.4.0-rc8-syzkaller #0 [ 579.232483][T19904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.232483][T19904] Call Trace: [ 579.232483][T19904] dump_stack+0x1c9/0x220 [ 579.232483][T19904] kmsan_report+0x128/0x220 [ 579.232483][T19904] __msan_warning+0x64/0xc0 [ 579.232483][T19904] gf128mul_4k_lle+0x1fb/0x2b0 [ 579.232483][T19904] ghash_update+0x9db/0x1130 [ 579.232483][T19904] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 579.232483][T19904] ? ghash_init+0x50/0x50 [ 579.232483][T19904] shash_ahash_update+0x53a/0x650 [ 579.232483][T19904] ? kmsan_internal_set_origin+0x6a/0xb0 [ 579.232483][T19904] shash_async_update+0x50/0x60 [ 579.232483][T19904] ? shash_async_init+0x1e0/0x1e0 [ 579.232483][T19904] gcm_hash+0x15d8/0x2400 [ 579.232483][T19904] crypto_gcm_encrypt+0x710/0x9e0 [ 579.232483][T19904] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 579.232483][T19904] crypto_aead_encrypt+0xf2/0x180 [ 579.232483][T19904] tls_push_record+0x3438/0x4eb0 [ 579.232483][T19904] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 579.232483][T19904] bpf_exec_tx_verdict+0x1454/0x1c80 [ 579.232483][T19904] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 579.232483][T19904] ? __perf_event_task_sched_out+0x2246/0x2340 [ 579.232483][T19904] tls_sw_sendpage+0x1315/0x1b70 [ 579.232483][T19904] ? bpf_exec_tx_verdict+0x1c80/0x1c80 [ 579.232483][T19904] inet_sendpage+0x1ab/0x2c0 [ 579.232483][T19904] ? inet_sendmsg+0x2e0/0x2e0 [ 579.232483][T19904] sock_sendpage+0x1f1/0x2e0 [ 579.232483][T19904] pipe_to_sendpage+0x342/0x470 [ 579.232483][T19904] ? sock_fasync+0x250/0x250 [ 579.232483][T19904] __splice_from_pipe+0x484/0xe80 [ 579.232483][T19904] ? generic_splice_sendpage+0x2d0/0x2d0 [ 579.232483][T19904] generic_splice_sendpage+0x1d5/0x2d0 [ 579.232483][T19904] __se_sys_splice+0x2141/0x3320 [ 579.232483][T19904] ? kmsan_copy_to_user+0xa9/0xb0 [ 579.232483][T19904] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 579.232483][T19904] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 579.232483][T19904] __x64_sys_splice+0x6e/0x90 [ 579.232483][T19904] do_syscall_64+0xb6/0x160 [ 579.232483][T19904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.232483][T19904] RIP: 0033:0x45a639 [ 579.232483][T19904] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.232483][T19904] RSP: 002b:00007fcd3f66cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 579.232483][T19904] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045a639 [ 579.232483][T19904] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 579.232483][T19904] RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 [ 579.232483][T19904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd3f66d6d4 [ 579.232483][T19904] R13: 00000000004ca797 R14: 00000000004e1bd8 R15: 00000000ffffffff [ 579.232483][T19904] [ 579.232483][T19904] Uninit was stored to memory at: [ 579.232483][T19904] kmsan_internal_chain_origin+0xbd/0x180 [ 579.232483][T19904] __msan_chain_origin+0x5c/0xc0 [ 579.232483][T19904] ghash_update+0xa83/0x1130 [ 579.232483][T19904] shash_ahash_update+0x53a/0x650 [ 579.232483][T19904] shash_async_update+0x50/0x60 [ 579.232483][T19904] gcm_hash+0x15d8/0x2400 [ 579.232483][T19904] crypto_gcm_encrypt+0x710/0x9e0 [ 579.232483][T19904] crypto_aead_encrypt+0xf2/0x180 [ 579.232483][T19904] tls_push_record+0x3438/0x4eb0 [ 579.232483][T19904] bpf_exec_tx_verdict+0x1454/0x1c80 [ 579.232483][T19904] tls_sw_sendpage+0x1315/0x1b70 [ 579.232483][T19904] inet_sendpage+0x1ab/0x2c0 [ 579.232483][T19904] sock_sendpage+0x1f1/0x2e0 [ 579.232483][T19904] pipe_to_sendpage+0x342/0x470 [ 579.232483][T19904] __splice_from_pipe+0x484/0xe80 [ 579.232483][T19904] generic_splice_sendpage+0x1d5/0x2d0 [ 579.232483][T19904] __se_sys_splice+0x2141/0x3320 [ 579.232483][T19904] __x64_sys_splice+0x6e/0x90 [ 579.232483][T19904] do_syscall_64+0xb6/0x160 [ 579.232483][T19904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.232483][T19904] [ 579.232483][T19904] Uninit was stored to memory at: [ 579.232483][T19904] kmsan_internal_chain_origin+0xbd/0x180 [ 579.232483][T19904] __msan_chain_origin+0x5c/0xc0 [ 579.232483][T19904] __crypto_xor+0x1e8/0x1470 [ 579.232483][T19904] crypto_ctr_crypt+0x613/0xaf0 [ 579.232483][T19904] crypto_skcipher_encrypt+0xd2/0x150 [ 579.232483][T19904] crypto_gcm_encrypt+0x4a5/0x9e0 [ 579.232483][T19904] crypto_aead_encrypt+0xf2/0x180 [ 579.232483][T19904] tls_push_record+0x3438/0x4eb0 [ 579.232483][T19904] bpf_exec_tx_verdict+0x1454/0x1c80 [ 579.232483][T19904] tls_sw_sendpage+0x1315/0x1b70 [ 579.232483][T19904] inet_sendpage+0x1ab/0x2c0 [ 579.232483][T19904] sock_sendpage+0x1f1/0x2e0 [ 579.232483][T19904] pipe_to_sendpage+0x342/0x470 [ 579.232483][T19904] __splice_from_pipe+0x484/0xe80 [ 579.232483][T19904] generic_splice_sendpage+0x1d5/0x2d0 [ 579.232483][T19904] __se_sys_splice+0x2141/0x3320 [ 579.232483][T19904] __x64_sys_splice+0x6e/0x90 [ 579.232483][T19904] do_syscall_64+0xb6/0x160 [ 579.232483][T19904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.232483][T19904] [ 579.232483][T19904] Uninit was created at: [ 579.232483][T19904] kmsan_save_stack_with_flags+0x3f/0x90 [ 579.232483][T19904] kmsan_alloc_page+0x140/0x330 [ 579.232483][T19904] __alloc_pages_nodemask+0x1421/0x5fd0 [ 579.232483][T19904] alloc_pages_current+0x68d/0x9a0 [ 579.232483][T19904] skb_page_frag_refill+0x2b0/0x580 [ 579.232483][T19904] sk_page_frag_refill+0xa4/0x330 [ 579.232483][T19904] sk_msg_alloc+0x203/0x1050 [ 579.232483][T19904] tls_sw_sendpage+0xb71/0x1b70 [ 579.232483][T19904] inet_sendpage+0x1ab/0x2c0 [ 579.232483][T19904] sock_sendpage+0x1f1/0x2e0 [ 579.232483][T19904] pipe_to_sendpage+0x342/0x470 [ 579.232483][T19904] __splice_from_pipe+0x484/0xe80 [ 579.232483][T19904] generic_splice_sendpage+0x1d5/0x2d0 [ 579.232483][T19904] __se_sys_splice+0x2141/0x3320 [ 579.232483][T19904] __x64_sys_splice+0x6e/0x90 [ 579.232483][T19904] do_syscall_64+0xb6/0x160 [ 579.232483][T19904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.232483][T19904] ===================================================== [ 579.232483][T19904] Disabling lock debugging due to kernel taint [ 579.232483][T19904] Kernel panic - not syncing: panic_on_warn set ... [ 579.232483][T19904] CPU: 0 PID: 19904 Comm: syz-executor.3 Tainted: G B 5.4.0-rc8-syzkaller #0 [ 579.232483][T19904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.232483][T19904] Call Trace: [ 579.232483][T19904] dump_stack+0x1c9/0x220 [ 579.232483][T19904] panic+0x3c9/0xc1e [ 579.232483][T19904] kmsan_report+0x215/0x220 [ 579.232483][T19904] __msan_warning+0x64/0xc0 [ 579.232483][T19904] gf128mul_4k_lle+0x1fb/0x2b0 [ 579.232483][T19904] ghash_update+0x9db/0x1130 [ 579.232483][T19904] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 579.232483][T19904] ? ghash_init+0x50/0x50 [ 579.232483][T19904] shash_ahash_update+0x53a/0x650 [ 579.232483][T19904] ? kmsan_internal_set_origin+0x6a/0xb0 [ 579.232483][T19904] shash_async_update+0x50/0x60 [ 579.232483][T19904] ? shash_async_init+0x1e0/0x1e0 [ 579.232483][T19904] gcm_hash+0x15d8/0x2400 [ 579.232483][T19904] crypto_gcm_encrypt+0x710/0x9e0 [ 579.232483][T19904] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 579.232483][T19904] crypto_aead_encrypt+0xf2/0x180 [ 579.232483][T19904] tls_push_record+0x3438/0x4eb0 [ 579.232483][T19904] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 579.232483][T19904] bpf_exec_tx_verdict+0x1454/0x1c80 [ 579.232483][T19904] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 579.232483][T19904] ? __perf_event_task_sched_out+0x2246/0x2340 [ 579.232483][T19904] tls_sw_sendpage+0x1315/0x1b70 [ 579.232483][T19904] ? bpf_exec_tx_verdict+0x1c80/0x1c80 [ 579.232483][T19904] inet_sendpage+0x1ab/0x2c0 [ 579.232483][T19904] ? inet_sendmsg+0x2e0/0x2e0 [ 579.232483][T19904] sock_sendpage+0x1f1/0x2e0 [ 579.232483][T19904] pipe_to_sendpage+0x342/0x470 [ 579.232483][T19904] ? sock_fasync+0x250/0x250 [ 579.232483][T19904] __splice_from_pipe+0x484/0xe80 [ 579.232483][T19904] ? generic_splice_sendpage+0x2d0/0x2d0 [ 579.232483][T19904] generic_splice_sendpage+0x1d5/0x2d0 [ 579.232483][T19904] __se_sys_splice+0x2141/0x3320 [ 579.232483][T19904] ? kmsan_copy_to_user+0xa9/0xb0 [ 579.232483][T19904] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 579.232483][T19904] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 579.232483][T19904] __x64_sys_splice+0x6e/0x90 [ 579.232483][T19904] do_syscall_64+0xb6/0x160 [ 579.232483][T19904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.232483][T19904] RIP: 0033:0x45a639 [ 579.232483][T19904] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.232483][T19904] RSP: 002b:00007fcd3f66cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 579.232483][T19904] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045a639 [ 579.232483][T19904] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 579.232483][T19904] RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 [ 579.232483][T19904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd3f66d6d4 [ 579.232483][T19904] R13: 00000000004ca797 R14: 00000000004e1bd8 R15: 00000000ffffffff [ 579.232483][T19904] Kernel Offset: 0x1b800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 579.232483][T19904] Rebooting in 86400 seconds..