d4fbcbfec980b83e8a4d272d60cc627be31d2c3eb51fd36b5da8417ad0606923b4488555e594daa2c03207ecdb957646b7135659b96c6858b00000002000000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212010002000000e000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup3(r0, r1, 0x0) 13:30:43 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(r0, &(0x7f0000000040)='fdinfo\x00') fchdir(r2) exit(0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30}, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 13:30:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0210000002000000000000000000000031f3cd9a33c214cee6c190b1a78dcb7581b6c94ef0460bae06d852eb4ee04e9b1fa3d88fcca955813d797c83f730516c2a6bb31e8c2d10b8c69d4ffa0e6bf5d842a535c77ea74f4e9ce7c698c6e6ffc7cdab394fc8def1a72c926e67f8d659b78fc8f25762451f5e566d4fbcbfec980b83e8a4d272d60cc627be31d2c3eb51fd36b5da8417ad0606923b4488555e594daa2c03207ecdb957646b7135659b96c6858b00000002000000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212010002000000e000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup3(r0, r1, 0x0) 13:30:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="22aa1ef22e") getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x80000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0210000002000000000000000000000031f3cd9a33c214cee6c190b1a78dcb7581b6c94ef0460bae06d852eb4ee04e9b1fa3d88fcca955813d797c83f730516c2a6bb31e8c2d10b8c69d4ffa0e6bf5d842a535c77ea74f4e9ce7c698c6e6ffc7cdab394fc8def1a72c926e67f8d659b78fc8f25762451f5e566d4fbcbfec980b83e8a4d272d60cc627be31d2c3eb51fd36b5da8417ad0606923b4488555e594daa2c03207ecdb957646b7135659b96c6858b00000002000000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212010002000000e000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup3(r0, r1, 0x0) 13:30:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, 0x0) 13:30:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0210000002000000000000000000000031f3cd9a33c214cee6c190b1a78dcb7581b6c94ef0460bae06d852eb4ee04e9b1fa3d88fcca955813d797c83f730516c2a6bb31e8c2d10b8c69d4ffa0e6bf5d842a535c77ea74f4e9ce7c698c6e6ffc7cdab394fc8def1a72c926e67f8d659b78fc8f25762451f5e566d4fbcbfec980b83e8a4d272d60cc627be31d2c3eb51fd36b5da8417ad0606923b4488555e594daa2c03207ecdb957646b7135659b96c6858b00000002000000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212010002000000e000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup3(r0, r1, 0x0) 13:30:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0210000002000000000000000000000031f3cd9a33c214cee6c190b1a78dcb7581b6c94ef0460bae06d852eb4ee04e9b1fa3d88fcca955813d797c83f730516c2a6bb31e8c2d10b8c69d4ffa0e6bf5d842a535c77ea74f4e9ce7c698c6e6ffc7cdab394fc8def1a72c926e67f8d659b78fc8f25762451f5e566d4fbcbfec980b83e8a4d272d60cc627be31d2c3eb51fd36b5da8417ad0606923b4488555e594daa2c03207ecdb957646b7135659b96c6858b00000002000000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212010002000000e000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup3(r0, r1, 0x0) 13:30:44 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x20000200) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 13:30:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0210000002000000000000000000000031f3cd9a33c214cee6c190b1a78dcb7581b6c94ef0460bae06d852eb4ee04e9b1fa3d88fcca955813d797c83f730516c2a6bb31e8c2d10b8c69d4ffa0e6bf5d842a535c77ea74f4e9ce7c698c6e6ffc7cdab394fc8def1a72c926e67f8d659b78fc8f25762451f5e566d4fbcbfec980b83e8a4d272d60cc627be31d2c3eb51fd36b5da8417ad0606923b4488555e594daa2c03207ecdb957646b7135659b96c6858b00000002000000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212010002000000e000000000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup3(r0, r1, 0x0) 13:30:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x204000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0bc5351, &(0x7f00000003c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:30:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) 13:30:44 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x20000200) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 13:30:44 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(r0, &(0x7f0000000040)='fdinfo\x00') fchdir(r2) exit(0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30}, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 13:30:44 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x803, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r3], 0x2}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) 13:30:45 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x22, 0x2, 0x4) bind$pptp(r1, 0x0, 0xfffffffffffffcb3) 13:30:45 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x20000200) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 13:30:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) 13:30:45 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x803, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r3], 0x2}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x200, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xfa]) 13:30:45 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x20000200) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 13:30:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x204000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0bc5351, &(0x7f00000003c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:30:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) 13:30:45 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/73, 0x49) 13:30:45 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x803, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r3], 0x2}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x200, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xfa]) 13:30:45 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(r0, &(0x7f0000000040)='fdinfo\x00') fchdir(r2) exit(0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30}, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 13:30:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x14, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x40}}, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) 13:30:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x200, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xfa]) 13:30:46 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/73, 0x49) 13:30:46 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x803, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a60000009ce80000e0ff000000", @ANYRES32=r3], 0x2}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:30:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x14, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x40}}, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) 13:30:46 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/73, 0x49) 13:30:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}) 13:30:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x200, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xfa]) 13:30:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x14, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x40}}, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) 13:30:46 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/73, 0x49) 13:30:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001e80)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8}, @generic="eea8e6f4ee7d33ccc42f9c"]}, 0x24}], 0x1}, 0x0) 13:30:46 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)=@hci, 0x80, 0x0}}], 0x2, 0x40c1) 13:30:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001e80)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8}, @generic="eea8e6f4ee7d33ccc42f9c"]}, 0x24}], 0x1}, 0x0) 13:30:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:47 executing program 3: unshare(0x20400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x346, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9, 0x0, 0xffffffffffffffff, 0x8}) 13:30:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x14, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x40}}, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) 13:30:47 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)=@hci, 0x80, 0x0}}], 0x2, 0x40c1) 13:30:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}) 13:30:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001e80)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8}, @generic="eea8e6f4ee7d33ccc42f9c"]}, 0x24}], 0x1}, 0x0) 13:30:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001e80)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8}, @generic="eea8e6f4ee7d33ccc42f9c"]}, 0x24}], 0x1}, 0x0) 13:30:47 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)=@hci, 0x80, 0x0}}], 0x2, 0x40c1) 13:30:47 executing program 3: unshare(0x20400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x346, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9, 0x0, 0xffffffffffffffff, 0x8}) 13:30:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) personality(0x9f0e66bacb57dc78) uname(&(0x7f0000000000)=""/17) 13:30:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}) 13:30:48 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)=@hci, 0x80, 0x0}}], 0x2, 0x40c1) 13:30:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) personality(0x9f0e66bacb57dc78) uname(&(0x7f0000000000)=""/17) 13:30:48 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1001}}}, 0x10) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) 13:30:48 executing program 3: unshare(0x20400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x346, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9, 0x0, 0xffffffffffffffff, 0x8}) 13:30:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}) 13:30:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:48 executing program 1: getresuid(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 13:30:48 executing program 3: unshare(0x20400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x346, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9, 0x0, 0xffffffffffffffff, 0x8}) 13:30:48 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1001}}}, 0x10) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) 13:30:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) personality(0x9f0e66bacb57dc78) uname(&(0x7f0000000000)=""/17) 13:30:48 executing program 1: getresuid(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 13:30:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) personality(0x9f0e66bacb57dc78) uname(&(0x7f0000000000)=""/17) 13:30:48 executing program 1: getresuid(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 13:30:48 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1001}}}, 0x10) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) 13:30:49 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 13:30:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:49 executing program 1: getresuid(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 13:30:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:49 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1001}}}, 0x10) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) 13:30:49 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 13:30:49 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 13:30:49 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 13:30:49 executing program 1: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1e, 0x1}, 0x14}}, 0x0) 13:30:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:50 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 13:30:50 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 13:30:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) getpid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0xebd4b6270603398f) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:30:50 executing program 1: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1e, 0x1}, 0x14}}, 0x0) 13:30:50 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 13:30:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r5 = dup2(r0, r4) dup3(r5, r1, 0x0) 13:30:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x34}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffa2}, 0x48) 13:30:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xfdffffff, 0x4) 13:30:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x34}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffa2}, 0x48) 13:30:51 executing program 1: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1e, 0x1}, 0x14}}, 0x0) 13:30:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r5 = dup2(r0, r4) dup3(r5, r1, 0x0) 13:30:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xfdffffff, 0x4) 13:30:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x34}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffa2}, 0x48) 13:30:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xfdffffff, 0x4) 13:30:51 executing program 1: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1e, 0x1}, 0x14}}, 0x0) 13:30:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xfdffffff, 0x4) 13:30:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r5 = dup2(r0, r4) dup3(r5, r1, 0x0) 13:30:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x34}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffa2}, 0x48) 13:30:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xfdffffff, 0x4) 13:30:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x800, 0x0, 0x0, 0x9, 0x4ce, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000008000/0x18000)=nil, 0x0, 0x38b, 0x0, 0x0, 0xffffffffffffff9d) 13:30:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xfdffffff, 0x4) 13:30:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13:30:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff60, 0x10) 13:30:52 executing program 5: r0 = socket(0x20000000000000a, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x24c04635, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1d, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 13:30:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xfdffffff, 0x4) 13:30:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r5 = dup2(r0, r4) dup3(r5, r1, 0x0) 13:30:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000600)={r2, &(0x7f00000001c0), 0x0}, 0x20) 13:30:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13:30:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff60, 0x10) 13:30:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000e0ffffffffffffff0000000000000000df876fd2"], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:30:52 executing program 5: r0 = socket(0x20000000000000a, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x24c04635, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1d, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 13:30:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13:30:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000600)={r2, &(0x7f00000001c0), 0x0}, 0x20) 13:30:53 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:30:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff60, 0x10) 13:30:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000e0ffffffffffffff0000000000000000df876fd2"], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:30:53 executing program 5: r0 = socket(0x20000000000000a, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x24c04635, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1d, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 13:30:53 executing program 5: r0 = socket(0x20000000000000a, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x24c04635, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1d, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 13:30:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13:30:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff60, 0x10) 13:30:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000600)={r2, &(0x7f00000001c0), 0x0}, 0x20) 13:30:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000e0ffffffffffffff0000000000000000df876fd2"], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:30:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "80000300920186e203113a96b57a63bd951000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 13:30:53 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e) dup3(r2, r1, 0x0) 13:30:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 13:30:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000600)={r2, &(0x7f00000001c0), 0x0}, 0x20) 13:30:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000e0ffffffffffffff0000000000000000df876fd2"], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:30:54 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:30:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 13:30:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "80000300920186e203113a96b57a63bd951000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 13:30:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e) dup3(r2, r1, 0x0) 13:30:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e) dup3(r2, r1, 0x0) 13:30:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 13:30:54 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:30:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "80000300920186e203113a96b57a63bd951000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 13:30:54 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="96c1e9574b31", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @local}, "08066371ae9b1c01"}}}}}, 0x0) [ 2263.682854][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2263.689311][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2263.696108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2263.702528][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2263.709169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2263.715579][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e) dup3(r2, r1, 0x0) 13:30:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 13:30:55 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x80045105, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x10000) 13:30:55 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:30:55 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="96c1e9574b31", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @local}, "08066371ae9b1c01"}}}}}, 0x0) 13:30:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "80000300920186e203113a96b57a63bd951000"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 13:30:55 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02032606100000000000004c9e0000000200ff7f00000001000000000001000105000600200000000a00000000000000003f411afab0d7809ec61f000000000000250000000000120200010000000000000000020000627c05000500000900000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000000000000000eaffac1a14aaf2b478cc3ba90000100040000000113c04a23743"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xa2503f7693ebc8, 0x0) 13:30:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006911800000000000ad100000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 13:30:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006911800000000000ad100000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 13:30:56 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:30:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02032606100000000000004c9e0000000200ff7f00000001000000000001000105000600200000000a00000000000000003f411afab0d7809ec61f000000000000250000000000120200010000000000000000020000627c05000500000900000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000000000000000eaffac1a14aaf2b478cc3ba90000100040000000113c04a23743"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xa2503f7693ebc8, 0x0) 13:30:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) unshare(0x40000600) 13:30:56 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="96c1e9574b31", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @local}, "08066371ae9b1c01"}}}}}, 0x0) 13:30:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006911800000000000ad100000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 2265.202621][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2265.208882][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2265.215456][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2265.221697][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2265.301465][ T3728] IPVS: ftp: loaded support on port[0] = 21 13:30:56 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="96c1e9574b31", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @local}, "08066371ae9b1c01"}}}}}, 0x0) [ 2265.905806][ T3741] IPVS: ftp: loaded support on port[0] = 21 13:30:57 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:30:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006911800000000000ad100000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 13:30:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02032606100000000000004c9e0000000200ff7f00000001000000000001000105000600200000000a00000000000000003f411afab0d7809ec61f000000000000250000000000120200010000000000000000020000627c05000500000900000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000000000000000eaffac1a14aaf2b478cc3ba90000100040000000113c04a23743"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xa2503f7693ebc8, 0x0) 13:30:57 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000480)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x4, 0x4, {0x54, 0x6, 0x7, {0x234f, 0x2}, {0x20, 0x1f}, @ramp={0x9, 0x274, {0x6, 0x4c84, 0x1}}}, {0x56, 0x7, 0xfff8, {0x0, 0xfffb}, {0x7, 0x1000}, @cond=[{0x0, 0x7, 0x7, 0x101, 0x4, 0x7}, {0x0, 0x0, 0x2, 0x1, 0x98, 0x28}]}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) 13:30:57 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 2266.555605][ T8949] tipc: TX() has been purged, node left! 13:30:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02032606100000000000004c9e0000000200ff7f00000001000000000001000105000600200000000a00000000000000003f411afab0d7809ec61f000000000000250000000000120200010000000000000000020000627c05000500000900000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00000700000028bd70170080000005001a0000000000000000000000eaffac1a14aaf2b478cc3ba90000100040000000113c04a23743"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xa2503f7693ebc8, 0x0) 13:30:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 13:30:58 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 13:30:58 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 13:30:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) unshare(0x40000600) 13:30:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 13:30:59 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 13:30:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000300)) 13:30:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc744240600000000b9800000c00f3235002000000f305ef2f1ed2959ed2959360f06c4c18d72d68366baa100ed", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f00000000c0)={0x0, {0x80}}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000100)={{0x0, 0xffff}, 0x22}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:30:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x3, 0x0, 0x7d89]}) 13:30:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x3, 0x0, 0x7d89]}) 13:30:59 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 13:30:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 2268.650267][ T3780] IPVS: ftp: loaded support on port[0] = 21 13:31:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x3, 0x0, 0x7d89]}) 13:31:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 13:31:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 13:31:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) unshare(0x40000600) 13:31:00 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:31:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x825, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}]}, 0x2c}}, 0x0) 13:31:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x3, 0x0, 0x7d89]}) 13:31:00 executing program 3: shmget$private(0x0, 0x2000000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 13:31:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 13:31:01 executing program 3: shmget$private(0x0, 0x2000000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 13:31:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 13:31:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x825, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}]}, 0x2c}}, 0x0) [ 2270.180195][ T3823] IPVS: ftp: loaded support on port[0] = 21 13:31:01 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:31:01 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0205648, &(0x7f0000000080)={0x7000000}) 13:31:01 executing program 3: shmget$private(0x0, 0x2000000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 13:31:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) unshare(0x40000600) 13:31:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 13:31:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x825, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}]}, 0x2c}}, 0x0) 13:31:02 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0205648, &(0x7f0000000080)={0x7000000}) 13:31:02 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:31:02 executing program 3: shmget$private(0x0, 0x2000000, 0x0, &(0x7f0000ffb000/0x3000)=nil) [ 2271.303284][T27213] tipc: TX() has been purged, node left! [ 2271.603100][ T3848] IPVS: ftp: loaded support on port[0] = 21 13:31:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x825, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}]}, 0x2c}}, 0x0) 13:31:02 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:31:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{}, "145f037bc914664a", "8d291543076711a70c6aa0ebecf2d6767530a77d048878f75fb7e0df2f14bbcf", "f61f81a9", "c798ce7b189690be"}, 0x38) 13:31:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 13:31:03 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0205648, &(0x7f0000000080)={0x7000000}) 13:31:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$sock(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 13:31:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$sock(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 13:31:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{}, "145f037bc914664a", "8d291543076711a70c6aa0ebecf2d6767530a77d048878f75fb7e0df2f14bbcf", "f61f81a9", "c798ce7b189690be"}, 0x38) 13:31:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0205648, &(0x7f0000000080)={0x7000000}) 13:31:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000000000e1c0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010073667100480002000000000000000000000000000000000000000000000000000000000000471a00000000000000000000000000000000000000000000f3aff151ed1e4a08454f9c9ed6974ba345296ca6ffafecb3ab42207c5c129cdf6500"/126], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00000004000000000300c4c1080001006270660050000100080006000000000004000500400002003c00010000000000eeff0020000000000b75da89000000001000000000000000000000000000004d4b38d10973ff00"/113], 0x7c}}, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x42, 0x0) 13:31:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{}, "145f037bc914664a", "8d291543076711a70c6aa0ebecf2d6767530a77d048878f75fb7e0df2f14bbcf", "f61f81a9", "c798ce7b189690be"}, 0x38) 13:31:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$sock(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 13:31:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0f000, 0x0, "88201c01000000000000000000000000000000000000511e00001000"}) 13:31:06 executing program 5: r0 = memfd_create(&(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0) io_setup(0xccf, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 13:31:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000000000e1c0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010073667100480002000000000000000000000000000000000000000000000000000000000000471a00000000000000000000000000000000000000000000f3aff151ed1e4a08454f9c9ed6974ba345296ca6ffafecb3ab42207c5c129cdf6500"/126], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00000004000000000300c4c1080001006270660050000100080006000000000004000500400002003c00010000000000eeff0020000000000b75da89000000001000000000000000000000000000004d4b38d10973ff00"/113], 0x7c}}, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x42, 0x0) [ 2283.572756][ T1837] oom_reaper: reaped process 3863 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2283.652046][T12215] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2283.663097][T12215] CPU: 1 PID: 12215 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2283.671673][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2283.681804][T12215] Call Trace: [ 2283.685249][T12215] dump_stack+0x1c9/0x220 [ 2283.689653][T12215] dump_header+0x1e7/0xd00 [ 2283.694114][T12215] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2283.699955][T12215] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2283.706144][T12215] ? ___ratelimit+0x542/0x720 [ 2283.710862][T12215] ? task_will_free_mem+0x2c9/0x810 [ 2283.716118][T12215] oom_kill_process+0x216/0x580 [ 2283.721012][T12215] out_of_memory+0x17b6/0x1ce0 [ 2283.725839][T12215] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2283.731475][T12215] alloc_pages_current+0x68d/0x9a0 [ 2283.736666][T12215] __page_cache_alloc+0x95/0x320 [ 2283.741654][T12215] pagecache_get_page+0xaf1/0x1220 [ 2283.746813][T12215] ? kmsan_get_metadata+0x4f/0x190 [ 2283.751970][T12215] filemap_fault+0x2632/0x2b70 [ 2283.756798][T12215] ext4_filemap_fault+0xbb/0x130 [ 2283.761774][T12215] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2283.767111][T12215] handle_mm_fault+0x6c4a/0x9f80 [ 2283.772087][T12215] ? filemap_fault+0x2b70/0x2b70 [ 2283.777054][T12215] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2283.782754][T12215] do_user_addr_fault+0x905/0x1510 [ 2283.787912][T12215] ? kmsan_get_metadata+0x11e/0x190 [ 2283.793153][T12215] __do_page_fault+0x1a2/0x410 [ 2283.797970][T12215] do_page_fault+0xbb/0x500 [ 2283.802511][T12215] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2283.807976][T12215] page_fault+0x4e/0x60 [ 2283.812153][T12215] RIP: 0033:0x417290 [ 2283.816081][T12215] Code: Bad RIP value. [ 2283.820161][T12215] RSP: 002b:000000c00004ff60 EFLAGS: 00010206 [ 2283.826401][T12215] RAX: 00007f2a19c62008 RBX: 000000c00002c000 RCX: 000000c000140700 [ 2283.834417][T12215] RDX: 000000c00002c000 RSI: 0000000000000081 RDI: 0000000001e22870 [ 2283.842418][T12215] RBP: 000000c00004ff70 R08: 0000000000000000 R09: 0000000000000000 [ 2283.850430][T12215] R10: 0000000000000000 R11: 0000000000000202 R12: 0000021fa8f76e0c [ 2283.858429][T12215] R13: 0000000000000001 R14: 0000021fa8f76e0c R15: ffffffffffffffff [ 2283.866848][T12215] Mem-Info: [ 2283.870155][T12215] active_anon:116407 inactive_anon:9050 isolated_anon:0 [ 2283.870155][T12215] active_file:32 inactive_file:54 isolated_file:0 [ 2283.870155][T12215] unevictable:0 dirty:19 writeback:9 unstable:0 [ 2283.870155][T12215] slab_reclaimable:6746 slab_unreclaimable:38060 [ 2283.870155][T12215] mapped:61129 shmem:9155 pagetables:7659 bounce:0 [ 2283.870155][T12215] free:23263 free_pcp:142 free_cma:0 [ 2283.907834][T12215] Node 0 active_anon:451712kB inactive_anon:36180kB active_file:68kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244416kB dirty:76kB writeback:36kB shmem:36600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2283.936951][T12215] Node 1 active_anon:13916kB inactive_anon:20kB active_file:60kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2283.964582][T12215] Node 0 DMA free:13816kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2283.994091][T12215] lowmem_reserve[]: 0 2736 3426 3426 [ 2283.999521][T12215] Node 0 DMA32 free:27272kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:432152kB inactive_anon:35068kB active_file:196kB inactive_file:112kB unevictable:0kB writepending:64kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19908kB pagetables:20884kB bounce:0kB free_pcp:44kB local_pcp:0kB free_cma:0kB [ 2284.032160][T12215] lowmem_reserve[]: 0 0 690 690 [ 2284.037113][T12215] Node 0 Normal free:3620kB min:9752kB low:12188kB high:14624kB reserved_highatomic:0KB active_anon:19548kB inactive_anon:1112kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:48kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16196kB pagetables:6176kB bounce:0kB free_pcp:336kB local_pcp:0kB free_cma:0kB [ 2284.068707][T12215] lowmem_reserve[]: 0 0 0 0 [ 2284.073364][T12215] Node 1 Normal free:41088kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13916kB inactive_anon:20kB active_file:40kB inactive_file:48kB unevictable:0kB writepending:8kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:264kB local_pcp:0kB free_cma:0kB [ 2284.104955][T12215] lowmem_reserve[]: 0 0 0 0 [ 2284.109530][T12215] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2284.126031][T12215] Node 0 DMA32: 409*4kB (UME) 113*8kB (ME) 41*16kB (ME) 30*32kB (ME) 22*64kB (UME) 12*128kB (ME) 12*256kB (UME) 11*512kB (ME) 4*1024kB (UM) 0*2048kB 0*4096kB = 19900kB [ 2284.143073][T12215] Node 0 Normal: 357*4kB (ME) 119*8kB (ME) 31*16kB (UME) 19*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4060kB [ 2284.157888][T12215] Node 1 Normal: 259*4kB (ME) 109*8kB (ME) 52*16kB (UME) 31*32kB (UME) 6*64kB (ME) 5*128kB (ME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 4*2048kB (ME) 5*4096kB (M) = 37780kB [ 2284.175387][T12215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2284.185058][T12215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2284.194477][T12215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2284.204159][T12215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2284.213549][T12215] 9195 total pagecache pages [ 2284.218173][T12215] 0 pages in swap cache [ 2284.222443][T12215] Swap cache stats: add 0, delete 0, find 0/0 [ 2284.228628][T12215] Free swap = 0kB [ 2284.232451][T12215] Total swap = 0kB [ 2284.236203][T12215] 1965979 pages RAM [ 2284.240183][T12215] 0 pages HighMem/MovableOnly [ 2284.245242][T12215] 332211 pages reserved [ 2284.249425][T12215] 0 pages cma reserved [ 2284.253611][T12215] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=2740,uid=0 [ 2284.268429][T12215] Out of memory: Killed process 2740 (syz-executor.0) total-vm:72840kB, anon-rss:184kB, file-rss:34816kB, shmem-rss:5896kB, UID:0 pgtables:155648kB oom_score_adj:1000 [ 2284.415281][T12216] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2284.426254][T12216] CPU: 0 PID: 12216 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2284.434633][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2284.444735][T12216] Call Trace: [ 2284.448111][T12216] dump_stack+0x1c9/0x220 [ 2284.452528][T12216] dump_header+0x1e7/0xd00 [ 2284.457026][T12216] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2284.462867][T12216] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2284.469038][T12216] ? ___ratelimit+0x542/0x720 [ 2284.473771][T12216] ? task_will_free_mem+0x2c9/0x810 [ 2284.479018][T12216] oom_kill_process+0x216/0x580 [ 2284.483904][T12216] out_of_memory+0x17b6/0x1ce0 [ 2284.488707][T12216] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2284.494391][T12216] alloc_pages_current+0x68d/0x9a0 [ 2284.499553][T12216] __page_cache_alloc+0x95/0x320 [ 2284.504511][T12216] pagecache_get_page+0xaf1/0x1220 [ 2284.509645][T12216] ? kmsan_get_metadata+0x4f/0x190 [ 2284.514808][T12216] filemap_fault+0x2632/0x2b70 [ 2284.519671][T12216] ext4_filemap_fault+0xbb/0x130 [ 2284.524678][T12216] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2284.530010][T12216] handle_mm_fault+0x6c4a/0x9f80 [ 2284.535013][T12216] ? filemap_fault+0x2b70/0x2b70 [ 2284.540058][T12216] do_user_addr_fault+0x905/0x1510 [ 2284.545259][T12216] ? kmsan_get_metadata+0x11e/0x190 [ 2284.550550][T12216] __do_page_fault+0x1a2/0x410 [ 2284.555392][T12216] do_page_fault+0xbb/0x500 [ 2284.559964][T12216] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2284.565418][T12216] page_fault+0x4e/0x60 [ 2284.569620][T12216] RIP: 0033:0x437d60 [ 2284.573567][T12216] Code: Bad RIP value. [ 2284.577674][T12216] RSP: 002b:000000c00003a728 EFLAGS: 00010206 [ 2284.583792][T12216] RAX: 0000000000000000 RBX: 000000c000140a80 RCX: 00000213b6eb22ca [ 2284.592436][T12216] RDX: 0000000029870f9a RSI: 000000000006f1c0 RDI: 0000000029870f9a [ 2284.600463][T12216] RBP: 000000c00003a750 R08: 000000c00012bfc0 R09: 00007ffdc3bea0b8 [ 2284.608486][T12216] R10: 0000000000000000 R11: 00000000000008eb R12: 0000021ef1e3cb5d [ 2284.616509][T12216] R13: 0000000000000001 R14: 0000021ef1e3cb5d R15: fffffffffffea16d [ 2284.627290][T12216] Mem-Info: [ 2284.630549][T12216] active_anon:116370 inactive_anon:7600 isolated_anon:0 [ 2284.630549][T12216] active_file:4 inactive_file:1 isolated_file:15 [ 2284.630549][T12216] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2284.630549][T12216] slab_reclaimable:6734 slab_unreclaimable:38060 [ 2284.630549][T12216] mapped:59615 shmem:7680 pagetables:7659 bounce:0 [ 2284.630549][T12216] free:16177 free_pcp:223 free_cma:0 [ 2284.667919][T12216] Node 0 active_anon:451564kB inactive_anon:30380kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:238432kB dirty:0kB writeback:0kB shmem:30700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2284.696712][T12216] Node 1 active_anon:13916kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:28kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2284.723828][T12216] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2284.753223][T12216] lowmem_reserve[]: 0 2736 3426 3426 [ 2284.758588][T12216] Node 0 DMA32 free:24104kB min:46856kB low:56520kB high:66184kB reserved_highatomic:0KB active_anon:431904kB inactive_anon:29268kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19852kB pagetables:20884kB bounce:0kB free_pcp:440kB local_pcp:208kB free_cma:0kB [ 2284.790535][T12216] lowmem_reserve[]: 0 0 690 690 [ 2284.795518][T12216] Node 0 Normal free:4216kB min:11800kB low:14236kB high:16672kB reserved_highatomic:0KB active_anon:19548kB inactive_anon:1112kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16196kB pagetables:6176kB bounce:0kB free_pcp:368kB local_pcp:336kB free_cma:0kB [ 2284.812179][ T3863] syz-executor.3: vmalloc: allocation failure, allocated 1058983936 of 2147491840 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2284.827096][T12216] lowmem_reserve[]: 0 0 0 0 [ 2284.827149][T12216] Node 1 Normal free:20140kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13916kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:564kB local_pcp:300kB free_cma:0kB [ 2284.827278][T12216] lowmem_reserve[]: 0 0 0 0 [ 2284.844379][ T3863] CPU: 1 PID: 3863 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2284.848682][T12216] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2284.880001][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2284.880017][ T3863] Call Trace: [ 2284.880083][ T3863] dump_stack+0x1c9/0x220 [ 2284.880163][ T3863] warn_alloc+0x4cc/0x680 [ 2284.884657][T12216] Node 0 DMA32: 468*4kB (UME) 151*8kB (ME) 60*16kB (ME) 51*32kB (UME) 36*64kB (ME) 22*128kB (UME) 12*256kB (ME) 12*512kB (UME) 4*1024kB (UM) 0*2048kB 0*4096kB = 24104kB [ 2284.893345][ T3863] ? balance_callback+0x48/0x260 [ 2284.893430][ T3863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2284.909622][T12216] Node 0 Normal: 406*4kB (UME) 120*8kB (UME) 31*16kB (UME) 19*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4264kB [ 2284.919689][ T3863] __vmalloc_node_range+0xdc0/0x1270 [ 2284.919767][ T3863] vzalloc+0x106/0x120 [ 2284.923050][T12216] Node 1 Normal: 259*4kB (ME) 110*8kB (UME) 51*16kB (ME) 30*32kB (ME) 7*64kB (UME) 5*128kB (ME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 5*2048kB (UME) 0*4096kB = 20140kB [ 2284.927474][ T3863] ? ip_set_alloc+0x10a/0x140 [ 2284.931716][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2284.948451][ T3863] ? ip_set_alloc+0x10a/0x140 [ 2284.948497][ T3863] ip_set_alloc+0x10a/0x140 [ 2284.948597][ T3863] hash_netnet_create+0x59c/0xf80 [ 2284.953518][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2284.959324][ T3863] ? kmsan_get_metadata+0x20/0x190 [ 2284.974004][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2284.981463][ T3863] ? hash_netiface6_expire+0x1070/0x1070 [ 2284.985547][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2285.002458][ T3863] ip_set_create+0xa19/0x1940 [ 2285.002563][ T3863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2285.007188][T12216] 7700 total pagecache pages [ 2285.016741][ T3863] ? ip_set_protocol+0x840/0x840 [ 2285.016878][ T3863] nfnetlink_rcv_msg+0xb7f/0xce0 [ 2285.021456][T12216] 0 pages in swap cache [ 2285.026016][ T3863] ? kmsan_get_metadata+0x4f/0x190 [ 2285.026084][ T3863] ? kmsan_get_metadata+0x4f/0x190 [ 2285.031130][T12216] Swap cache stats: add 0, delete 0, find 0/0 [ 2285.040418][ T3863] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2285.040488][ T3863] ? kmsan_get_metadata+0x11e/0x190 [ 2285.045593][T12216] Free swap = 0kB [ 2285.055146][ T3863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2285.055279][ T3863] netlink_rcv_skb+0x431/0x620 [ 2285.060815][T12216] Total swap = 0kB [ 2285.070113][ T3863] ? nfnetlink_bind+0x1d0/0x1d0 [ 2285.070185][ T3863] nfnetlink_rcv+0x3bb/0x39e0 [ 2285.074867][T12216] 1965979 pages RAM [ 2285.080693][ T3863] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2285.085265][T12216] 0 pages HighMem/MovableOnly [ 2285.090307][ T3863] ? __se_sys_sendmsg+0x97/0xb0 [ 2285.095165][T12216] 332211 pages reserved [ 2285.099343][ T3863] ? __x64_sys_sendmsg+0x4a/0x70 [ 2285.104443][T12216] 0 pages cma reserved [ 2285.109576][ T3863] ? kmsan_get_metadata+0x11e/0x190 [ 2285.115637][T12216] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=2848,uid=0 [ 2285.121273][ T3863] ? kmsan_get_metadata+0x4f/0x190 [ 2285.126613][T12216] Out of memory: Killed process 2848 (syz-executor.3) total-vm:72708kB, anon-rss:184kB, file-rss:34816kB, shmem-rss:5860kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 2285.130203][ T3863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2285.142274][ T1837] oom_reaper: reaped process 2848 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:5860kB [ 2285.144525][ T3863] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2285.251232][ T3863] ? rhashtable_jhash2+0x3a9/0x4d0 [ 2285.256432][ T3863] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2285.262570][ T3863] ? kmsan_get_metadata+0x11e/0x190 [ 2285.267831][ T3863] ? kmsan_get_metadata+0x4f/0x190 [ 2285.273010][ T3863] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2285.278713][ T3863] ? kmsan_get_metadata+0x11e/0x190 [ 2285.283980][ T3863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2285.289862][ T3863] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2285.296012][ T3863] ? netlink_deliver_tap+0xca/0xeb0 [ 2285.301289][ T3863] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2285.307452][ T3863] ? __netlink_lookup+0x8fd/0x990 [ 2285.312554][ T3863] ? kmsan_get_metadata+0x11e/0x190 [ 2285.317816][ T3863] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2285.323523][ T3863] ? kmsan_get_metadata+0x11e/0x190 [ 2285.328795][ T3863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2285.334684][ T3863] netlink_unicast+0xfa0/0x1100 [ 2285.339619][ T3863] ? nfnetlink_net_exit_batch+0x290/0x290 [ 2285.345433][ T3863] netlink_sendmsg+0x11f0/0x1480 [ 2285.350474][ T3863] ? netlink_getsockopt+0x1430/0x1430 [ 2285.355928][ T3863] ____sys_sendmsg+0x1362/0x13f0 [ 2285.360975][ T3863] __sys_sendmsg+0x4f0/0x5e0 [ 2285.365656][ T3863] ? kmsan_copy_to_user+0x81/0x90 [ 2285.370736][ T3863] ? _copy_to_user+0x168/0x1f0 [ 2285.375568][ T3863] ? kmsan_get_metadata+0x11e/0x190 [ 2285.380801][ T3863] ? kmsan_get_metadata+0x11e/0x190 [ 2285.386026][ T3863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2285.391862][ T3863] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2285.397989][ T3863] ? prepare_exit_to_usermode+0x1ca/0x530 [ 2285.403759][ T3863] __se_sys_sendmsg+0x97/0xb0 [ 2285.408462][ T3863] __x64_sys_sendmsg+0x4a/0x70 [ 2285.413242][ T3863] do_syscall_64+0xb6/0x160 [ 2285.417772][ T3863] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2285.423670][ T3863] RIP: 0033:0x45af49 [ 2285.427576][ T3863] Code: Bad RIP value. [ 2285.431639][ T3863] RSP: 002b:00007f90621a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2285.440077][ T3863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 2285.449461][ T3863] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 2285.457542][ T3863] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2285.465519][ T3863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90621a86d4 [ 2285.473497][ T3863] R13: 00000000004c9d34 R14: 00000000004e2d78 R15: 00000000ffffffff [ 2285.482234][ T3863] Mem-Info: [ 2285.485517][ T3863] active_anon:116345 inactive_anon:6150 isolated_anon:0 [ 2285.485517][ T3863] active_file:4 inactive_file:1 isolated_file:15 [ 2285.485517][ T3863] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2285.485517][ T3863] slab_reclaimable:6734 slab_unreclaimable:38060 [ 2285.485517][ T3863] mapped:58165 shmem:6205 pagetables:7622 bounce:0 [ 2285.485517][ T3863] free:19455 free_pcp:732 free_cma:0 [ 2285.522831][ T3863] Node 0 active_anon:451416kB inactive_anon:24484kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232536kB dirty:0kB writeback:0kB shmem:24796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2285.551589][ T3863] Node 1 active_anon:13916kB inactive_anon:20kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:28kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2285.578846][ T3863] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2285.608149][ T3863] lowmem_reserve[]: 0 2736 3426 3426 [ 2285.613562][ T3863] Node 0 DMA32 free:39432kB min:46856kB low:56520kB high:66184kB reserved_highatomic:0KB active_anon:431756kB inactive_anon:23684kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19788kB pagetables:20760kB bounce:0kB free_pcp:1704kB local_pcp:232kB free_cma:0kB [ 2285.645879][ T3863] lowmem_reserve[]: 0 0 690 690 [ 2285.650810][ T3863] Node 0 Normal free:4552kB min:11800kB low:14236kB high:16672kB reserved_highatomic:0KB active_anon:19548kB inactive_anon:800kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16196kB pagetables:6176kB bounce:0kB free_pcp:960kB local_pcp:32kB free_cma:0kB [ 2285.682286][ T3863] lowmem_reserve[]: 0 0 0 0 [ 2285.686811][ T3863] Node 1 Normal free:20440kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13916kB inactive_anon:20kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:264kB local_pcp:264kB free_cma:0kB [ 2285.718383][ T3863] lowmem_reserve[]: 0 0 0 0 [ 2285.723010][ T3863] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2285.739486][ T3863] Node 0 DMA32: 1514*4kB (UME) 598*8kB (UME) 239*16kB (UME) 92*32kB (UME) 49*64kB (UME) 24*128kB (UME) 13*256kB (ME) 14*512kB (UME) 5*1024kB (UM) 0*2048kB 0*4096kB = 39432kB [ 2285.756857][ T3863] Node 0 Normal: 414*4kB (UME) 128*8kB (UME) 32*16kB (UME) 22*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4600kB [ 2285.771777][ T3863] Node 1 Normal: 272*4kB (ME) 111*8kB (UME) 52*16kB (UME) 31*32kB (UME) 8*64kB (UME) 6*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 5*2048kB (UME) 0*4096kB = 20440kB [ 2285.790180][ T3863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2285.799795][ T3863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2285.809201][ T3863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2285.818818][ T3863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2285.828165][ T3863] 6224 total pagecache pages [ 2285.832857][ T3863] 0 pages in swap cache [ 2285.837030][ T3863] Swap cache stats: add 0, delete 0, find 0/0 [ 2285.843218][ T3863] Free swap = 0kB [ 2285.846968][ T3863] Total swap = 0kB [ 2285.850708][ T3863] 1965979 pages RAM [ 2285.854562][ T3863] 0 pages HighMem/MovableOnly [ 2285.859244][ T3863] 332211 pages reserved [ 2285.863498][ T3863] 0 pages cma reserved 13:31:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{}, "145f037bc914664a", "8d291543076711a70c6aa0ebecf2d6767530a77d048878f75fb7e0df2f14bbcf", "f61f81a9", "c798ce7b189690be"}, 0x38) 13:31:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$sock(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 13:31:19 executing program 5: r0 = memfd_create(&(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0) io_setup(0xccf, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 13:31:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000000000e1c0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010073667100480002000000000000000000000000000000000000000000000000000000000000471a00000000000000000000000000000000000000000000f3aff151ed1e4a08454f9c9ed6974ba345296ca6ffafecb3ab42207c5c129cdf6500"/126], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00000004000000000300c4c1080001006270660050000100080006000000000004000500400002003c00010000000000eeff0020000000000b75da89000000001000000000000000000000000000004d4b38d10973ff00"/113], 0x7c}}, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x42, 0x0) 13:31:19 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0f000, 0x0, "88201c01000000000000000000000000000000000000511e00001000"}) [ 2288.232186][T27213] tipc: TX() has been purged, node left! [ 2288.433568][T27213] tipc: TX() has been purged, node left! 13:31:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 13:31:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000000000e1c0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010073667100480002000000000000000000000000000000000000000000000000000000000000471a00000000000000000000000000000000000000000000f3aff151ed1e4a08454f9c9ed6974ba345296ca6ffafecb3ab42207c5c129cdf6500"/126], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00000004000000000300c4c1080001006270660050000100080006000000000004000500400002003c00010000000000eeff0020000000000b75da89000000001000000000000000000000000000004d4b38d10973ff00"/113], 0x7c}}, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x42, 0x0) 13:31:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000002340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 13:31:19 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0f000, 0x0, "88201c01000000000000000000000000000000000000511e00001000"}) 13:31:19 executing program 5: r0 = memfd_create(&(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0) io_setup(0xccf, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) [ 2288.926256][ T3935] input: syz1 as /devices/virtual/input/input130 13:31:20 executing program 1: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00', 0x1424d5bc4e419d1d}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0x4}]) [ 2289.030566][ T3939] input: syz1 as /devices/virtual/input/input131 13:31:20 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0f000, 0x0, "88201c01000000000000000000000000000000000000511e00001000"}) 13:31:20 executing program 2: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0), 0xad, 0x0) 13:31:20 executing program 5: r0 = memfd_create(&(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0) io_setup(0xccf, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 13:31:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000002340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 13:31:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, 0x0, 0x0) [ 2289.455331][ T3957] input: syz1 as /devices/virtual/input/input132 13:31:20 executing program 2: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0), 0xad, 0x0) [ 2298.232685][T12224] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2298.243699][T12224] CPU: 0 PID: 12224 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2298.252079][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.262181][T12224] Call Trace: [ 2298.265580][T12224] dump_stack+0x1c9/0x220 [ 2298.270001][T12224] dump_header+0x1e7/0xd00 [ 2298.274493][T12224] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2298.280386][T12224] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2298.286620][T12224] ? ___ratelimit+0x542/0x720 [ 2298.291371][T12224] ? task_will_free_mem+0x2c9/0x810 [ 2298.296664][T12224] oom_kill_process+0x216/0x580 [ 2298.301603][T12224] out_of_memory+0x17b6/0x1ce0 [ 2298.306476][T12224] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2298.312175][T12224] alloc_pages_current+0x68d/0x9a0 [ 2298.317371][T12224] __page_cache_alloc+0x95/0x320 [ 2298.322382][T12224] pagecache_get_page+0xaf1/0x1220 [ 2298.327576][T12224] ? kmsan_get_metadata+0x4f/0x190 [ 2298.332763][T12224] filemap_fault+0x2632/0x2b70 [ 2298.337632][T12224] ext4_filemap_fault+0xbb/0x130 [ 2298.342660][T12224] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2298.348019][T12224] handle_mm_fault+0x6c4a/0x9f80 [ 2298.353031][T12224] ? filemap_fault+0x2b70/0x2b70 [ 2298.358172][T12224] do_user_addr_fault+0x905/0x1510 [ 2298.363333][T12224] ? kmsan_get_metadata+0x11e/0x190 [ 2298.368548][T12224] __do_page_fault+0x1a2/0x410 [ 2298.373332][T12224] do_page_fault+0xbb/0x500 [ 2298.377913][T12224] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2298.383303][T12224] page_fault+0x4e/0x60 [ 2298.387461][T12224] RIP: 0033:0x437d60 [ 2298.391376][T12224] Code: Bad RIP value. [ 2298.395443][T12224] RSP: 002b:000000c000041728 EFLAGS: 00010206 [ 2298.401514][T12224] RAX: 0000000000000000 RBX: 000000c00007c000 RCX: 00000216a01e7e9f [ 2298.409555][T12224] RDX: 000000000b99d319 RSI: 000000000006fb5c RDI: 000000000b99d319 [ 2298.417552][T12224] RBP: 000000c000041750 R08: 000000c000311fc0 R09: 00007ffdc3bea0b8 [ 2298.425537][T12224] R10: 0000000000000000 R11: 00000000000008f9 R12: 00000222e27a41aa [ 2298.433565][T12224] R13: 0000000000000001 R14: 00000222e27a41aa R15: 0000000000000000 [ 2298.442093][T12224] Mem-Info: [ 2298.445389][T12224] active_anon:116346 inactive_anon:6102 isolated_anon:0 [ 2298.445389][T12224] active_file:36 inactive_file:2 isolated_file:0 [ 2298.445389][T12224] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2298.445389][T12224] slab_reclaimable:6737 slab_unreclaimable:37891 [ 2298.445389][T12224] mapped:58131 shmem:6203 pagetables:7597 bounce:0 [ 2298.445389][T12224] free:26014 free_pcp:12 free_cma:0 [ 2298.482696][T12224] Node 0 active_anon:451556kB inactive_anon:24408kB active_file:144kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232524kB dirty:0kB writeback:0kB shmem:24812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2298.511494][T12224] Node 1 active_anon:13828kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2298.538381][T12224] Node 0 DMA free:13896kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2298.567812][T12224] lowmem_reserve[]: 0 2736 3426 3426 [ 2298.573255][T12224] Node 0 DMA32 free:40932kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:431912kB inactive_anon:23608kB active_file:124kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19652kB pagetables:20524kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2298.605109][T12224] lowmem_reserve[]: 0 0 690 690 [ 2298.610035][T12224] Node 0 Normal free:7832kB min:9752kB low:12188kB high:14624kB reserved_highatomic:0KB active_anon:19532kB inactive_anon:800kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16324kB pagetables:6288kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 2298.641548][T12224] lowmem_reserve[]: 0 0 0 0 [ 2298.646193][T12224] Node 1 Normal free:41396kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2298.677352][T12224] lowmem_reserve[]: 0 0 0 0 [ 2298.682008][T12224] Node 0 DMA: 6*4kB (UME) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13896kB [ 2298.698251][T12224] Node 0 DMA32: 813*4kB (ME) 479*8kB (UME) 194*16kB (UME) 65*32kB (UME) 30*64kB (UME) 21*128kB (ME) 13*256kB (ME) 13*512kB (UME) 14*1024kB (UM) 0*2048kB 0*4096kB = 41196kB [ 2298.715633][T12224] Node 0 Normal: 701*4kB (UME) 219*8kB (UME) 57*16kB (UME) 43*32kB (UME) 12*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7868kB [ 2298.731158][T12224] Node 1 Normal: 285*4kB (ME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 4*64kB (ME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41396kB [ 2298.748881][T12224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2298.758576][T12224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2298.767994][T12224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2298.777678][T12224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2298.787093][T12224] 6241 total pagecache pages [ 2298.791718][T12224] 0 pages in swap cache [ 2298.795989][T12224] Swap cache stats: add 0, delete 0, find 0/0 [ 2298.802163][T12224] Free swap = 0kB [ 2298.805914][T12224] Total swap = 0kB [ 2298.809668][T12224] 1965979 pages RAM [ 2298.813596][T12224] 0 pages HighMem/MovableOnly [ 2298.818304][T12224] 332211 pages reserved [ 2298.822569][T12224] 0 pages cma reserved [ 2298.826676][T12224] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=2882,uid=0 [ 2298.841514][T12224] Out of memory: Killed process 2882 (syz-executor.0) total-vm:72708kB, anon-rss:176kB, file-rss:34816kB, shmem-rss:5860kB, UID:0 pgtables:155648kB oom_score_adj:1000 [ 2299.205991][ T1] init invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2299.216462][ T1] CPU: 1 PID: 1 Comm: init Not tainted 5.5.0-rc1-syzkaller #0 [ 2299.224025][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.234181][ T1] Call Trace: [ 2299.237601][ T1] dump_stack+0x1c9/0x220 [ 2299.242022][ T1] dump_header+0x1e7/0xd00 [ 2299.246536][ T1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2299.252416][ T1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2299.258660][ T1] ? ___ratelimit+0x542/0x720 [ 2299.263414][ T1] ? task_will_free_mem+0x2c9/0x810 [ 2299.268750][ T1] oom_kill_process+0x216/0x580 [ 2299.273655][ T1] out_of_memory+0x17b6/0x1ce0 [ 2299.278477][ T1] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2299.284102][ T1] alloc_pages_current+0x68d/0x9a0 [ 2299.289261][ T1] __page_cache_alloc+0x95/0x320 [ 2299.294295][ T1] pagecache_get_page+0xaf1/0x1220 [ 2299.299536][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2299.304771][ T1] filemap_fault+0x2632/0x2b70 [ 2299.309788][ T1] ext4_filemap_fault+0xbb/0x130 [ 2299.314839][ T1] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2299.320185][ T1] handle_mm_fault+0x6c4a/0x9f80 [ 2299.325194][ T1] ? filemap_fault+0x2b70/0x2b70 [ 2299.330236][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2299.335555][ T1] do_user_addr_fault+0x905/0x1510 [ 2299.340739][ T1] ? kmsan_get_metadata+0x11e/0x190 [ 2299.346030][ T1] __do_page_fault+0x1a2/0x410 [ 2299.350846][ T1] do_page_fault+0xbb/0x500 [ 2299.355407][ T1] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2299.360832][ T1] page_fault+0x4e/0x60 [ 2299.365020][ T1] RIP: 0033:0x7f9e7fdd9dd3 [ 2299.369537][ T1] Code: Bad RIP value. [ 2299.373730][ T1] RSP: 002b:00007fff6637e038 EFLAGS: 00010246 [ 2299.379862][ T1] RAX: 0000000000000000 RBX: 00007fff6637e1e0 RCX: 00007f9e7fdd9dd3 [ 2299.387884][ T1] RDX: 0000000000000000 RSI: 00007fff6637e390 RDI: 000000000000000b [ 2299.395917][ T1] RBP: 00007fff6637e390 R08: 00007fff6637e410 R09: 0000000000000001 [ 2299.403950][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2299.412130][ T1] R13: 00007fff6637e770 R14: 0000000000000000 R15: 0000000000000000 [ 2299.420698][ T1] Mem-Info: [ 2299.424138][ T1] active_anon:116314 inactive_anon:4628 isolated_anon:0 [ 2299.424138][ T1] active_file:9 inactive_file:14 isolated_file:6 [ 2299.424138][ T1] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2299.424138][ T1] slab_reclaimable:6737 slab_unreclaimable:37891 [ 2299.424138][ T1] mapped:56648 shmem:4727 pagetables:7566 bounce:0 [ 2299.424138][ T1] free:24998 free_pcp:60 free_cma:0 [ 2299.461568][ T1] Node 0 active_anon:451428kB inactive_anon:18512kB active_file:36kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:226592kB dirty:0kB writeback:0kB shmem:18908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2299.490929][ T1] Node 1 active_anon:13828kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2299.518004][ T1] Node 0 DMA free:13896kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2299.548111][ T1] lowmem_reserve[]: 0 2736 3426 3426 [ 2299.553520][ T1] Node 0 DMA32 free:40852kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:431784kB inactive_anon:17748kB active_file:32kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19588kB pagetables:20400kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2299.585481][ T1] lowmem_reserve[]: 0 0 690 690 [ 2299.590533][ T1] Node 0 Normal free:3848kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19532kB inactive_anon:764kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16324kB pagetables:6288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2299.622108][ T1] lowmem_reserve[]: 0 0 0 0 [ 2299.626964][ T1] Node 1 Normal free:41396kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2299.658268][ T1] lowmem_reserve[]: 0 0 0 0 [ 2299.663034][ T1] Node 0 DMA: 6*4kB (UME) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13896kB [ 2299.679431][ T1] Node 0 DMA32: 877*4kB (ME) 444*8kB (UME) 227*16kB (ME) 96*32kB (ME) 47*64kB (ME) 28*128kB (UME) 15*256kB (UME) 13*512kB (UME) 10*1024kB (UM) 0*2048kB 0*4096kB = 41092kB [ 2299.697198][ T1] Node 0 Normal: 264*4kB (MEH) 119*8kB (MEH) 30*16kB (MEH) 26*32kB (MEH) 8*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3832kB [ 2299.712307][ T1] Node 1 Normal: 285*4kB (ME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 4*64kB (ME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41396kB [ 2299.729942][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2299.739609][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2299.749064][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2299.758882][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2299.768461][ T1] 4756 total pagecache pages [ 2299.773278][ T1] 0 pages in swap cache [ 2299.777602][ T1] Swap cache stats: add 0, delete 0, find 0/0 [ 2299.783861][ T1] Free swap = 0kB [ 2299.787736][ T1] Total swap = 0kB [ 2299.791603][ T1] 1965979 pages RAM [ 2299.795605][ T1] 0 pages HighMem/MovableOnly [ 2299.800423][ T1] 332211 pages reserved [ 2299.804769][ T1] 0 pages cma reserved [ 2299.809007][ T1] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=2834,uid=0 [ 2299.824005][ T1] Out of memory: Killed process 2834 (syz-executor.0) total-vm:72708kB, anon-rss:176kB, file-rss:34816kB, shmem-rss:5860kB, UID:0 pgtables:155648kB oom_score_adj:1000 [ 2299.842813][ T1837] oom_reaper: reaped process 2834 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:5896kB [ 2299.885978][T12100] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2299.896683][T12100] CPU: 0 PID: 12100 Comm: rsyslogd Not tainted 5.5.0-rc1-syzkaller #0 [ 2299.904887][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.914985][T12100] Call Trace: [ 2299.918351][T12100] dump_stack+0x1c9/0x220 [ 2299.922761][T12100] dump_header+0x1e7/0xd00 [ 2299.927246][T12100] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2299.933120][T12100] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2299.939342][T12100] ? ___ratelimit+0x542/0x720 [ 2299.944095][T12100] ? task_will_free_mem+0x2c9/0x810 [ 2299.949390][T12100] oom_kill_process+0x216/0x580 [ 2299.954331][T12100] out_of_memory+0x17b6/0x1ce0 [ 2299.959201][T12100] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2299.964894][T12100] alloc_pages_current+0x68d/0x9a0 [ 2299.970091][T12100] __page_cache_alloc+0x95/0x320 [ 2299.975103][T12100] pagecache_get_page+0xaf1/0x1220 [ 2299.980293][T12100] ? kmsan_get_metadata+0x4f/0x190 [ 2299.985474][T12100] filemap_fault+0x2632/0x2b70 [ 2299.990333][T12100] ext4_filemap_fault+0xbb/0x130 [ 2299.995337][T12100] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2300.000662][T12100] handle_mm_fault+0x6c4a/0x9f80 [ 2300.005615][T12100] ? filemap_fault+0x2b70/0x2b70 [ 2300.010591][T12100] do_user_addr_fault+0x905/0x1510 [ 2300.015765][T12100] ? kmsan_get_metadata+0x11e/0x190 [ 2300.020981][T12100] __do_page_fault+0x1a2/0x410 [ 2300.025776][T12100] do_page_fault+0xbb/0x500 [ 2300.030292][T12100] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2300.035682][T12100] page_fault+0x4e/0x60 [ 2300.039838][T12100] RIP: 0033:0x7fd4ca9681fd [ 2300.044307][T12100] Code: Bad RIP value. [ 2300.048371][T12100] RSP: 002b:00007fd4c7f07e30 EFLAGS: 00010293 [ 2300.054440][T12100] RAX: 0000000000000b25 RBX: 0000000001b98170 RCX: 00007fd4ca9681fd [ 2300.062467][T12100] RDX: 0000000000000fff RSI: 00007fd4c973c5a0 RDI: 0000000000000004 [ 2300.070444][T12100] RBP: 0000000000000000 R08: 0000000001b83260 R09: 0000000004000001 [ 2300.078465][T12100] R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 [ 2300.086447][T12100] R13: 00007fd4c7f089c0 R14: 00007fd4cafad040 R15: 0000000000000003 [ 2300.095133][T12100] Mem-Info: [ 2300.098388][T12100] active_anon:116289 inactive_anon:3178 isolated_anon:0 [ 2300.098388][T12100] active_file:34 inactive_file:14 isolated_file:6 [ 2300.098388][T12100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2300.098388][T12100] slab_reclaimable:6737 slab_unreclaimable:37891 [ 2300.098388][T12100] mapped:55198 shmem:3252 pagetables:7566 bounce:0 [ 2300.098388][T12100] free:29030 free_pcp:439 free_cma:0 [ 2300.135905][T12100] Node 0 active_anon:451320kB inactive_anon:12616kB active_file:48kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220696kB dirty:0kB writeback:0kB shmem:13004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2300.164643][T12100] Node 1 active_anon:13828kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2300.191691][T12100] Node 0 DMA free:13896kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2300.221342][T12100] lowmem_reserve[]: 0 2736 3426 3426 [ 2300.226800][T12100] Node 0 DMA32 free:47888kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:431776kB inactive_anon:11852kB active_file:36kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19524kB pagetables:20276kB bounce:0kB free_pcp:216kB local_pcp:0kB free_cma:0kB [ 2300.259462][T12100] lowmem_reserve[]: 0 0 690 690 [ 2300.264489][T12100] Node 0 Normal free:3576kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19532kB inactive_anon:764kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16324kB pagetables:6288kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 2300.296181][T12100] lowmem_reserve[]: 0 0 0 0 [ 2300.300761][T12100] Node 1 Normal free:41396kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2300.331989][T12100] lowmem_reserve[]: 0 0 0 0 [ 2300.336572][T12100] Node 0 DMA: 6*4kB (UME) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13896kB [ 2300.352843][T12100] Node 0 DMA32: 824*4kB (UME) 453*8kB (UME) 265*16kB (ME) 129*32kB (UME) 76*64kB (UME) 42*128kB (UME) 16*256kB (UME) 13*512kB (UME) 5*1024kB (UM) 0*2048kB 0*4096kB = 41400kB [ 2300.371359][T12100] Node 0 Normal: 264*4kB (UMEH) 119*8kB (UMEH) 30*16kB (UMEH) 26*32kB (UMEH) 8*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3832kB [ 2300.386813][T12100] Node 1 Normal: 285*4kB (ME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 4*64kB (ME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41396kB [ 2300.404495][T12100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2300.414221][T12100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2300.423661][T12100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2300.433361][T12100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2300.442889][T12100] 3328 total pagecache pages [ 2300.447514][T12100] 0 pages in swap cache [ 2300.451708][T12100] Swap cache stats: add 0, delete 0, find 0/0 [ 2300.457913][T12100] Free swap = 0kB [ 2300.461660][T12100] Total swap = 0kB [ 2300.465523][T12100] 1965979 pages RAM [ 2300.469361][T12100] 0 pages HighMem/MovableOnly [ 2300.474265][T12100] 332211 pages reserved [ 2300.478445][T12100] 0 pages cma reserved [ 2300.482633][T12100] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=2784,uid=0 [ 2300.497484][T12100] Out of memory: Killed process 2784 (syz-executor.0) total-vm:72708kB, anon-rss:176kB, file-rss:34816kB, shmem-rss:5860kB, UID:0 pgtables:155648kB oom_score_adj:1000 [ 2300.520348][ T1837] oom_reaper: reaped process 2784 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:5896kB [ 2302.329599][T12213] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2302.340753][T12213] CPU: 1 PID: 12213 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2302.349253][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2302.359358][T12213] Call Trace: [ 2302.362731][T12213] dump_stack+0x1c9/0x220 [ 2302.367150][T12213] dump_header+0x1e7/0xd00 [ 2302.371642][T12213] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2302.378132][T12213] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2302.384354][T12213] ? ___ratelimit+0x542/0x720 [ 2302.389110][T12213] ? task_will_free_mem+0x2c9/0x810 [ 2302.394399][T12213] oom_kill_process+0x216/0x580 [ 2302.399332][T12213] out_of_memory+0x17b6/0x1ce0 [ 2302.404208][T12213] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2302.410038][T12213] alloc_pages_current+0x68d/0x9a0 [ 2302.415251][T12213] __page_cache_alloc+0x95/0x320 [ 2302.420268][T12213] pagecache_get_page+0xaf1/0x1220 [ 2302.425466][T12213] ? kmsan_get_metadata+0x4f/0x190 [ 2302.430655][T12213] filemap_fault+0x2632/0x2b70 [ 2302.435517][T12213] ext4_filemap_fault+0xbb/0x130 [ 2302.440518][T12213] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2302.445883][T12213] handle_mm_fault+0x6c4a/0x9f80 [ 2302.450891][T12213] ? filemap_fault+0x2b70/0x2b70 [ 2302.455946][T12213] do_user_addr_fault+0x905/0x1510 [ 2302.461150][T12213] ? kmsan_get_metadata+0x11e/0x190 [ 2302.466429][T12213] __do_page_fault+0x1a2/0x410 [ 2302.471275][T12213] do_page_fault+0xbb/0x500 [ 2302.475849][T12213] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2302.481305][T12213] page_fault+0x4e/0x60 [ 2302.485502][T12213] RIP: 0033:0x432ad0 [ 2302.489446][T12213] Code: Bad RIP value. [ 2302.493550][T12213] RSP: 002b:000000c00004de40 EFLAGS: 00010206 [ 2302.499673][T12213] RAX: 000000c000000180 RBX: 000000c0001f1ac8 RCX: 0000000400000002 [ 2302.507696][T12213] RDX: 000000c0001f1ad0 RSI: 000000c000000180 RDI: 0000000000000001 [ 2302.515730][T12213] RBP: 000000c00004dfc8 R08: 00000000094f1a16 R09: 00007ffdc3bea0b8 [ 2302.523751][T12213] R10: 0000000000000000 R11: 00000000000008fd R12: 000000c0001f1c08 [ 2302.531781][T12213] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffffffffff [ 2302.540267][T12213] Mem-Info: [ 2302.543648][T12213] active_anon:116246 inactive_anon:1680 isolated_anon:0 [ 2302.543648][T12213] active_file:30 inactive_file:18 isolated_file:0 [ 2302.543648][T12213] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2302.543648][T12213] slab_reclaimable:6723 slab_unreclaimable:37893 [ 2302.543648][T12213] mapped:53703 shmem:1775 pagetables:7504 bounce:0 [ 2302.543648][T12213] free:24988 free_pcp:0 free_cma:0 [ 2302.583640][T12213] Node 0 active_anon:451156kB inactive_anon:6720kB active_file:116kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214812kB dirty:0kB writeback:0kB shmem:7100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2302.612339][T12213] Node 1 active_anon:13828kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2302.639192][T12213] Node 0 DMA free:13896kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2302.668684][T12213] lowmem_reserve[]: 0 2736 3426 3426 [ 2302.674108][T12213] Node 0 DMA32 free:41080kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:431512kB inactive_anon:5956kB active_file:312kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19460kB pagetables:20152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2302.705843][T12213] lowmem_reserve[]: 0 0 690 690 [ 2302.710763][T12213] Node 0 Normal free:3576kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19532kB inactive_anon:764kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16324kB pagetables:6288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2302.742096][T12213] lowmem_reserve[]: 0 0 0 0 [ 2302.746671][T12213] Node 1 Normal free:41400kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2302.777812][T12213] lowmem_reserve[]: 0 0 0 0 [ 2302.782449][T12213] Node 0 DMA: 6*4kB (UME) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13896kB [ 2302.798670][T12213] Node 0 DMA32: 887*4kB (UME) 475*8kB (UME) 347*16kB (UME) 190*32kB (ME) 96*64kB (UME) 43*128kB (UME) 14*256kB (ME) 12*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 41380kB [ 2302.816021][T12213] Node 0 Normal: 238*4kB (UMEH) 112*8kB (UMEH) 28*16kB (UMEH) 24*32kB (UMEH) 8*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3576kB [ 2302.831428][T12213] Node 1 Normal: 286*4kB (UME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 4*64kB (ME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41400kB [ 2302.849086][T12213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2302.858738][T12213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2302.868136][T12213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2302.878051][T12213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2302.887426][T12213] 1816 total pagecache pages [ 2302.892542][T12213] 0 pages in swap cache [ 2302.896742][T12213] Swap cache stats: add 0, delete 0, find 0/0 [ 2302.902895][T12213] Free swap = 0kB [ 2302.906642][T12213] Total swap = 0kB [ 2302.910393][T12213] 1965979 pages RAM [ 2302.914286][T12213] 0 pages HighMem/MovableOnly [ 2302.918989][T12213] 332211 pages reserved [ 2302.923225][T12213] 0 pages cma reserved [ 2302.927330][T12213] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=2785,uid=0 [ 2302.942131][T12213] Out of memory: Killed process 2785 (syz-executor.2) total-vm:72708kB, anon-rss:176kB, file-rss:34816kB, shmem-rss:5860kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 2302.962247][ T1837] oom_reaper: reaped process 2785 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:5896kB [ 2303.024104][T12216] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2303.035136][T12216] CPU: 0 PID: 12216 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2303.043518][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.053619][T12216] Call Trace: [ 2303.056986][T12216] dump_stack+0x1c9/0x220 [ 2303.061400][T12216] dump_header+0x1e7/0xd00 [ 2303.065894][T12216] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2303.071767][T12216] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2303.077988][T12216] ? ___ratelimit+0x542/0x720 [ 2303.082743][T12216] ? task_will_free_mem+0x2c9/0x810 [ 2303.088031][T12216] oom_kill_process+0x216/0x580 [ 2303.092974][T12216] out_of_memory+0x17b6/0x1ce0 [ 2303.097847][T12216] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2303.103572][T12216] alloc_pages_current+0x68d/0x9a0 [ 2303.108766][T12216] __page_cache_alloc+0x95/0x320 [ 2303.113782][T12216] pagecache_get_page+0xaf1/0x1220 [ 2303.118975][T12216] ? kmsan_get_metadata+0x4f/0x190 [ 2303.124164][T12216] filemap_fault+0x2632/0x2b70 [ 2303.129036][T12216] ext4_filemap_fault+0xbb/0x130 [ 2303.134050][T12216] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2303.139419][T12216] handle_mm_fault+0x6c4a/0x9f80 [ 2303.144437][T12216] ? filemap_fault+0x2b70/0x2b70 [ 2303.149497][T12216] do_user_addr_fault+0x905/0x1510 [ 2303.154702][T12216] ? kmsan_get_metadata+0x11e/0x190 [ 2303.159984][T12216] __do_page_fault+0x1a2/0x410 [ 2303.164834][T12216] do_page_fault+0xbb/0x500 [ 2303.169408][T12216] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2303.174953][T12216] page_fault+0x4e/0x60 [ 2303.179154][T12216] RIP: 0033:0x42c854 [ 2303.183126][T12216] Code: 00 00 8b 4c 24 58 89 4c 24 0c 48 8d 4c 24 30 48 89 4c 24 10 48 c7 44 24 18 00 00 00 00 c7 44 24 20 00 00 00 00 e8 ac 43 03 00 <48> 8b 6c 24 40 48 83 c4 48 c3 cc cc 48 83 ec 50 48 89 6c 24 48 48 [ 2303.202788][T12216] RSP: 002b:000000c00003a6a8 EFLAGS: 00010202 [ 2303.208923][T12216] RAX: ffffffffffffff92 RBX: 000000002623d770 RCX: 0000000000460c23 [ 2303.216935][T12216] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001e26a40 [ 2303.224936][T12216] RBP: 000000c00003a6e8 R08: 0000000000000000 R09: 0000000000000000 [ 2303.232967][T12216] R10: 000000c00003a6d8 R11: 0000000000000202 R12: 00000222d41ecfce [ 2303.240996][T12216] R13: 0000000000000001 R14: 00000222d41ecfce R15: fffffffffffea16d [ 2303.249679][T12216] Mem-Info: [ 2303.253025][T12216] active_anon:116218 inactive_anon:225 isolated_anon:0 [ 2303.253025][T12216] active_file:83 inactive_file:194 isolated_file:0 [ 2303.253025][T12216] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2303.253025][T12216] slab_reclaimable:6723 slab_unreclaimable:37893 [ 2303.253025][T12216] mapped:52454 shmem:300 pagetables:7467 bounce:0 [ 2303.253025][T12216] free:27511 free_pcp:230 free_cma:0 [ 2303.292724][T12216] Node 0 active_anon:451044kB inactive_anon:900kB active_file:348kB inactive_file:1056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209816kB dirty:0kB writeback:0kB shmem:1200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2303.321447][T12216] Node 1 active_anon:13828kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2303.348413][T12216] Node 0 DMA free:13896kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2303.377821][T12216] lowmem_reserve[]: 0 2736 3426 3426 [ 2303.383273][T12216] Node 0 DMA32 free:50164kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:431400kB inactive_anon:136kB active_file:456kB inactive_file:924kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19404kB pagetables:20004kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 2303.415320][T12216] lowmem_reserve[]: 0 0 690 690 [ 2303.420259][T12216] Node 0 Normal free:3576kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19532kB inactive_anon:764kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16324kB pagetables:6288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2303.451793][T12216] lowmem_reserve[]: 0 0 0 0 [ 2303.456458][T12216] Node 1 Normal free:41400kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2303.487725][T12216] lowmem_reserve[]: 0 0 0 0 [ 2303.492390][T12216] Node 0 DMA: 6*4kB (UME) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13896kB [ 2303.508744][T12216] Node 0 DMA32: 508*4kB (UME) 399*8kB (ME) 315*16kB (UME) 221*32kB (UME) 142*64kB (UME) 66*128kB (UME) 20*256kB (UME) 14*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 48184kB [ 2303.526315][T12216] Node 0 Normal: 238*4kB (UMEH) 112*8kB (UMEH) 28*16kB (UMEH) 24*32kB (UMEH) 8*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3576kB [ 2303.541721][T12216] Node 1 Normal: 286*4kB (UME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 4*64kB (ME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41400kB [ 2303.559453][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2303.569173][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2303.578602][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2303.588410][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2303.597815][T12216] 1180 total pagecache pages [ 2303.602525][T12216] 0 pages in swap cache [ 2303.606730][T12216] Swap cache stats: add 0, delete 0, find 0/0 [ 2303.612916][T12216] Free swap = 0kB [ 2303.616672][T12216] Total swap = 0kB [ 2303.620531][T12216] 1965979 pages RAM [ 2303.624460][T12216] 0 pages HighMem/MovableOnly [ 2303.629165][T12216] 332211 pages reserved [ 2303.633432][T12216] 0 pages cma reserved [ 2303.637549][T12216] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=19049,uid=0 [ 2303.652481][T12216] Out of memory: Killed process 19049 (syz-executor.1) total-vm:72716kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2303.671130][ T1837] oom_reaper: reaped process 19049 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2304.999268][T12213] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2305.010265][T12213] CPU: 0 PID: 12213 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2305.018678][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2305.028768][T12213] Call Trace: [ 2305.032139][T12213] dump_stack+0x1c9/0x220 [ 2305.036564][T12213] dump_header+0x1e7/0xd00 [ 2305.041060][T12213] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2305.046939][T12213] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2305.053159][T12213] ? ___ratelimit+0x542/0x720 [ 2305.057906][T12213] ? task_will_free_mem+0x2c9/0x810 [ 2305.063192][T12213] oom_kill_process+0x216/0x580 [ 2305.068130][T12213] out_of_memory+0x17b6/0x1ce0 [ 2305.073010][T12213] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2305.078706][T12213] alloc_pages_current+0x68d/0x9a0 [ 2305.083900][T12213] __page_cache_alloc+0x95/0x320 [ 2305.088909][T12213] pagecache_get_page+0xaf1/0x1220 [ 2305.094121][T12213] ? kmsan_get_metadata+0x4f/0x190 [ 2305.099337][T12213] filemap_fault+0x2632/0x2b70 [ 2305.104243][T12213] ext4_filemap_fault+0xbb/0x130 [ 2305.109260][T12213] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2305.114629][T12213] handle_mm_fault+0x6c4a/0x9f80 [ 2305.119702][T12213] ? filemap_fault+0x2b70/0x2b70 [ 2305.124779][T12213] do_user_addr_fault+0x905/0x1510 [ 2305.129994][T12213] __do_page_fault+0x1a2/0x410 [ 2305.134839][T12213] do_page_fault+0xbb/0x500 [ 2305.139410][T12213] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2305.144885][T12213] page_fault+0x4e/0x60 [ 2305.149109][T12213] RIP: 0033:0x40dcfb [ 2305.153061][T12213] Code: Bad RIP value. [ 2305.157174][T12213] RSP: 002b:000000c0001f1458 EFLAGS: 00010246 [ 2305.163296][T12213] RAX: 000000c000420720 RBX: 000000c0001f1500 RCX: 000000000089cda0 [ 2305.171407][T12213] RDX: 0000000000866560 RSI: 000000000089cda0 RDI: 0000000000000001 [ 2305.179432][T12213] RBP: 000000c0001f1490 R08: 0000000000000009 R09: 0000000000012000 [ 2305.187456][T12213] R10: 000000c0004ce000 R11: 0000000000001000 R12: 0000000000000000 [ 2305.195489][T12213] R13: 0000000000000000 R14: 0000000000aab3a0 R15: 0000000000000000 [ 2305.204015][T12213] Mem-Info: [ 2305.207274][T12213] active_anon:115678 inactive_anon:206 isolated_anon:0 [ 2305.207274][T12213] active_file:23 inactive_file:2 isolated_file:0 [ 2305.207274][T12213] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2305.207274][T12213] slab_reclaimable:6711 slab_unreclaimable:37891 [ 2305.207274][T12213] mapped:52226 shmem:299 pagetables:7448 bounce:0 [ 2305.207274][T12213] free:24883 free_pcp:156 free_cma:0 [ 2305.244697][T12213] Node 0 active_anon:448884kB inactive_anon:824kB active_file:84kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 370688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2305.273223][T12213] Node 1 active_anon:13828kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2305.300103][T12213] Node 0 DMA free:13896kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2305.329614][T12213] lowmem_reserve[]: 0 2736 3426 3426 [ 2305.335050][T12213] Node 0 DMA32 free:40936kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:429300kB inactive_anon:60kB active_file:176kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19396kB pagetables:20032kB bounce:0kB free_pcp:376kB local_pcp:376kB free_cma:0kB [ 2305.369839][T12213] lowmem_reserve[]: 0 0 690 690 [ 2305.374905][T12213] Node 0 Normal free:3300kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19472kB inactive_anon:764kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16260kB pagetables:6184kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2305.406659][T12213] lowmem_reserve[]: 0 0 0 0 [ 2305.411247][T12213] Node 1 Normal free:41400kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2305.442389][T12213] lowmem_reserve[]: 0 0 0 0 [ 2305.447322][T12213] Node 0 DMA: 6*4kB (UME) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13896kB [ 2305.463521][T12213] Node 0 DMA32: 697*4kB (UME) 376*8kB (UME) 285*16kB (UM) 176*32kB (UM) 114*64kB (M) 58*128kB (M) 20*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 40948kB [ 2305.480081][T12213] Node 0 Normal: 191*4kB (UMEH) 99*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3300kB [ 2305.495409][T12213] Node 1 Normal: 286*4kB (UME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 4*64kB (ME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41400kB [ 2305.513180][T12213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2305.522835][T12213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2305.532236][T12213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2305.541837][T12213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2305.551222][T12213] 340 total pagecache pages [ 2305.555836][T12213] 0 pages in swap cache [ 2305.560037][T12213] Swap cache stats: add 0, delete 0, find 0/0 [ 2305.566207][T12213] Free swap = 0kB [ 2305.569960][T12213] Total swap = 0kB [ 2305.573780][T12213] 1965979 pages RAM [ 2305.577624][T12213] 0 pages HighMem/MovableOnly [ 2305.582384][T12213] 332211 pages reserved [ 2305.586573][T12213] 0 pages cma reserved [ 2305.590679][T12213] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=19030,uid=0 [ 2305.605683][T12213] Out of memory: Killed process 19030 (syz-executor.1) total-vm:72716kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2305.625767][ T1837] oom_reaper: reaped process 19030 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2306.807933][ T1837] oom_reaper: reaped process 3923 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2306.867791][T12211] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2306.878726][T12211] CPU: 1 PID: 12211 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2306.887111][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2306.897207][T12211] Call Trace: [ 2306.900566][T12211] dump_stack+0x1c9/0x220 [ 2306.904979][T12211] dump_header+0x1e7/0xd00 [ 2306.909467][T12211] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2306.915342][T12211] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2306.921563][T12211] ? ___ratelimit+0x542/0x720 [ 2306.926312][T12211] ? task_will_free_mem+0x2c9/0x810 [ 2306.931600][T12211] oom_kill_process+0x216/0x580 [ 2306.936538][T12211] out_of_memory+0x17b6/0x1ce0 [ 2306.941408][T12211] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2306.947123][T12211] alloc_pages_current+0x68d/0x9a0 [ 2306.952319][T12211] __page_cache_alloc+0x95/0x320 [ 2306.957329][T12211] pagecache_get_page+0xaf1/0x1220 [ 2306.962517][T12211] ? kmsan_get_metadata+0x4f/0x190 [ 2306.967705][T12211] filemap_fault+0x2632/0x2b70 [ 2306.972574][T12211] ext4_filemap_fault+0xbb/0x130 [ 2306.977578][T12211] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2306.982933][T12211] handle_mm_fault+0x6c4a/0x9f80 [ 2306.987943][T12211] ? filemap_fault+0x2b70/0x2b70 [ 2306.993000][T12211] do_user_addr_fault+0x905/0x1510 [ 2306.998212][T12211] ? kmsan_get_metadata+0x11e/0x190 [ 2307.003502][T12211] __do_page_fault+0x1a2/0x410 [ 2307.008355][T12211] do_page_fault+0xbb/0x500 [ 2307.012941][T12211] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2307.018403][T12211] page_fault+0x4e/0x60 [ 2307.022611][T12211] RIP: 0033:0x43b2bd [ 2307.026554][T12211] Code: Bad RIP value. [ 2307.030667][T12211] RSP: 002b:000000c000051f50 EFLAGS: 00010206 [ 2307.036788][T12211] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046068d [ 2307.044813][T12211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 2307.052845][T12211] RBP: 000000c000051f48 R08: 000000c000000180 R09: 00007ffdc3bea0b8 [ 2307.060875][T12211] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000004338c0 [ 2307.068903][T12211] R13: 0000000000000000 R14: 0000000000aab654 R15: 0000000000000000 [ 2307.080013][T12211] Mem-Info: [ 2307.083335][T12211] active_anon:115116 inactive_anon:206 isolated_anon:0 [ 2307.083335][T12211] active_file:38 inactive_file:0 isolated_file:0 [ 2307.083335][T12211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2307.083335][T12211] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2307.083335][T12211] mapped:52228 shmem:299 pagetables:7422 bounce:0 [ 2307.083335][T12211] free:22411 free_pcp:123 free_cma:0 [ 2307.121148][T12211] Node 0 active_anon:446636kB inactive_anon:824kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208912kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 368640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2307.149635][T12211] Node 1 active_anon:13828kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2307.176569][T12211] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2307.205963][T12211] lowmem_reserve[]: 0 2736 3426 3426 [ 2307.211329][T12211] Node 0 DMA32 free:24620kB min:61192kB low:70856kB high:80520kB reserved_highatomic:0KB active_anon:427216kB inactive_anon:60kB active_file:124kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19396kB pagetables:20032kB bounce:0kB free_pcp:432kB local_pcp:100kB free_cma:0kB [ 2307.243548][T12211] lowmem_reserve[]: 0 0 690 690 [ 2307.248472][T12211] Node 0 Normal free:3176kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19408kB inactive_anon:764kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16196kB pagetables:6080kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2307.280212][T12211] lowmem_reserve[]: 0 0 0 0 [ 2307.284846][T12211] Node 1 Normal free:24012kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:44kB local_pcp:12kB free_cma:0kB [ 2307.316330][T12211] lowmem_reserve[]: 0 0 0 0 [ 2307.320899][T12211] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2307.337125][T12211] Node 0 DMA32: 525*4kB (UME) 283*8kB (UME) 224*16kB (UM) 145*32kB (UM) 84*64kB (UM) 40*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24620kB [ 2307.353158][T12211] Node 0 Normal: 196*4kB (UMEH) 85*8kB (UMEH) 25*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3176kB [ 2307.368472][T12211] Node 1 Normal: 286*4kB (UME) 109*8kB (UME) 48*16kB (ME) 27*32kB (ME) 5*64kB (UME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20736kB [ 2307.385853][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2307.395507][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2307.404926][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2307.414595][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2307.423972][T12211] 334 total pagecache pages [ 2307.428507][T12211] 0 pages in swap cache [ 2307.432756][T12211] Swap cache stats: add 0, delete 0, find 0/0 [ 2307.438863][T12211] Free swap = 0kB [ 2307.442664][T12211] Total swap = 0kB [ 2307.446415][T12211] 1965979 pages RAM [ 2307.450247][T12211] 0 pages HighMem/MovableOnly [ 2307.455004][T12211] 332211 pages reserved [ 2307.459191][T12211] 0 pages cma reserved [ 2307.463353][T12211] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=14720,uid=0 [ 2307.478238][T12211] Out of memory: Killed process 14720 (syz-executor.2) total-vm:72848kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2307.627610][T12100] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2307.638510][T12100] CPU: 0 PID: 12100 Comm: rsyslogd Not tainted 5.5.0-rc1-syzkaller #0 [ 2307.646720][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.656820][T12100] Call Trace: [ 2307.660191][T12100] dump_stack+0x1c9/0x220 [ 2307.664611][T12100] dump_header+0x1e7/0xd00 [ 2307.669100][T12100] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2307.674986][T12100] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2307.681266][T12100] ? ___ratelimit+0x542/0x720 [ 2307.686029][T12100] ? task_will_free_mem+0x2c9/0x810 [ 2307.691318][T12100] oom_kill_process+0x216/0x580 [ 2307.696261][T12100] out_of_memory+0x17b6/0x1ce0 [ 2307.701135][T12100] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2307.706827][T12100] alloc_pages_current+0x68d/0x9a0 [ 2307.712020][T12100] __page_cache_alloc+0x95/0x320 [ 2307.717030][T12100] pagecache_get_page+0xaf1/0x1220 [ 2307.722225][T12100] ? kmsan_get_metadata+0x4f/0x190 [ 2307.727408][T12100] filemap_fault+0x2632/0x2b70 [ 2307.732271][T12100] ext4_filemap_fault+0xbb/0x130 [ 2307.737282][T12100] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2307.742641][T12100] handle_mm_fault+0x6c4a/0x9f80 [ 2307.747649][T12100] ? filemap_fault+0x2b70/0x2b70 [ 2307.752658][T12100] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2307.758580][T12100] do_user_addr_fault+0x905/0x1510 [ 2307.763777][T12100] ? kmsan_get_metadata+0x11e/0x190 [ 2307.769145][T12100] __do_page_fault+0x1a2/0x410 [ 2307.773992][T12100] do_page_fault+0xbb/0x500 [ 2307.778567][T12100] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2307.784023][T12100] page_fault+0x4e/0x60 [ 2307.788234][T12100] RIP: 0033:0x7fd4ca9681fd [ 2307.792702][T12100] Code: Bad RIP value. [ 2307.796806][T12100] RSP: 002b:00007fd4c7f07e30 EFLAGS: 00010293 [ 2307.802928][T12100] RAX: 000000000000007e RBX: 0000000001b98170 RCX: 00007fd4ca9681fd [ 2307.810952][T12100] RDX: 0000000000000fff RSI: 00007fd4c973c5a0 RDI: 0000000000000004 [ 2307.818976][T12100] RBP: 0000000000000000 R08: 0000000001b83260 R09: 0000000000000000 [ 2307.827088][T12100] R10: 65706165725f6d6f R11: 0000000000000293 R12: 000000000065e420 [ 2307.835120][T12100] R13: 00007fd4c7f089c0 R14: 00007fd4cafad040 R15: 0000000000000003 [ 2307.844095][T12100] Mem-Info: [ 2307.847532][T12100] active_anon:114575 inactive_anon:206 isolated_anon:0 [ 2307.847532][T12100] active_file:16 inactive_file:17 isolated_file:0 [ 2307.847532][T12100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2307.847532][T12100] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2307.847532][T12100] mapped:52226 shmem:299 pagetables:7422 bounce:0 [ 2307.847532][T12100] free:16747 free_pcp:222 free_cma:0 [ 2307.887155][T12100] Node 0 active_anon:444476kB inactive_anon:824kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 368640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2307.915663][T12100] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2307.942731][T12100] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2307.972198][T12100] lowmem_reserve[]: 0 2736 3426 3426 [ 2307.977577][T12100] Node 0 DMA32 free:29596kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:424972kB inactive_anon:60kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19396kB pagetables:20032kB bounce:0kB free_pcp:72kB local_pcp:72kB free_cma:0kB [ 2308.012445][T12100] lowmem_reserve[]: 0 0 690 690 [ 2308.017371][T12100] Node 0 Normal free:3680kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19408kB inactive_anon:764kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16196kB pagetables:6080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2308.048835][T12100] lowmem_reserve[]: 0 0 0 0 [ 2308.053500][T12100] Node 1 Normal free:20936kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2308.084681][T12100] lowmem_reserve[]: 0 0 0 0 [ 2308.089252][T12100] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2308.105509][T12100] Node 0 DMA32: 703*4kB (UME) 277*8kB (UME) 217*16kB (UM) 141*32kB (UM) 79*64kB (M) 37*128kB (M) 6*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 29972kB [ 2308.122611][T12100] Node 0 Normal: 266*4kB (UMEH) 113*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3712kB [ 2308.138044][T12100] Node 1 Normal: 287*4kB (UME) 109*8kB (UME) 48*16kB (ME) 27*32kB (ME) 5*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20996kB [ 2308.155547][T12100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2308.165242][T12100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2308.174664][T12100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2308.184374][T12100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2308.193780][T12100] 332 total pagecache pages [ 2308.198315][T12100] 0 pages in swap cache [ 2308.202594][T12100] Swap cache stats: add 0, delete 0, find 0/0 [ 2308.208690][T12100] Free swap = 0kB [ 2308.212545][T12100] Total swap = 0kB [ 2308.216300][T12100] 1965979 pages RAM [ 2308.220132][T12100] 0 pages HighMem/MovableOnly [ 2308.224970][T12100] 332211 pages reserved [ 2308.229158][T12100] 0 pages cma reserved [ 2308.233366][T12100] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=18747,uid=0 [ 2308.248360][T12100] Out of memory: Killed process 18747 (syz-executor.2) total-vm:72848kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2308.267054][ T1837] oom_reaper: reaped process 18747 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2308.336443][T12211] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2308.347423][T12211] CPU: 1 PID: 12211 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2308.355800][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2308.365896][T12211] Call Trace: [ 2308.369264][T12211] dump_stack+0x1c9/0x220 [ 2308.373683][T12211] dump_header+0x1e7/0xd00 [ 2308.378356][T12211] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2308.384230][T12211] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2308.390452][T12211] ? ___ratelimit+0x542/0x720 [ 2308.395208][T12211] ? task_will_free_mem+0x2c9/0x810 [ 2308.400495][T12211] oom_kill_process+0x216/0x580 [ 2308.405445][T12211] out_of_memory+0x17b6/0x1ce0 [ 2308.410313][T12211] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2308.416281][T12211] alloc_pages_current+0x68d/0x9a0 [ 2308.421481][T12211] __page_cache_alloc+0x95/0x320 [ 2308.426499][T12211] pagecache_get_page+0xaf1/0x1220 [ 2308.431696][T12211] ? kmsan_get_metadata+0x4f/0x190 [ 2308.436886][T12211] filemap_fault+0x2632/0x2b70 [ 2308.441755][T12211] ext4_filemap_fault+0xbb/0x130 [ 2308.446761][T12211] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2308.452115][T12211] handle_mm_fault+0x6c4a/0x9f80 [ 2308.457130][T12211] ? filemap_fault+0x2b70/0x2b70 [ 2308.462200][T12211] do_user_addr_fault+0x905/0x1510 [ 2308.467399][T12211] ? kmsan_get_metadata+0x11e/0x190 [ 2308.472677][T12211] __do_page_fault+0x1a2/0x410 [ 2308.477525][T12211] do_page_fault+0xbb/0x500 [ 2308.482100][T12211] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2308.487558][T12211] page_fault+0x4e/0x60 [ 2308.491754][T12211] RIP: 0033:0x43b2bd [ 2308.495696][T12211] Code: Bad RIP value. [ 2308.499799][T12211] RSP: 002b:000000c000051f50 EFLAGS: 00010206 [ 2308.505921][T12211] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046068d [ 2308.513941][T12211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 2308.521964][T12211] RBP: 000000c000051f48 R08: 000000c000000180 R09: 00007ffdc3bea0b8 [ 2308.529987][T12211] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000004338c0 [ 2308.538010][T12211] R13: 0000000000000000 R14: 0000000000aab654 R15: 0000000000000000 [ 2308.546511][T12211] Mem-Info: [ 2308.549838][T12211] active_anon:114049 inactive_anon:206 isolated_anon:0 [ 2308.549838][T12211] active_file:11 inactive_file:0 isolated_file:0 [ 2308.549838][T12211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2308.549838][T12211] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2308.549838][T12211] mapped:52226 shmem:299 pagetables:7421 bounce:0 [ 2308.549838][T12211] free:15248 free_pcp:261 free_cma:0 [ 2308.587361][T12211] Node 0 active_anon:442372kB inactive_anon:824kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 366592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2308.615900][T12211] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2308.643057][T12211] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2308.672610][T12211] lowmem_reserve[]: 0 2736 3426 3426 [ 2308.678041][T12211] Node 0 DMA32 free:21884kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:422916kB inactive_anon:60kB active_file:44kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19396kB pagetables:20032kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 2308.709961][T12211] lowmem_reserve[]: 0 0 690 690 [ 2308.715062][T12211] Node 0 Normal free:3584kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19292kB inactive_anon:764kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16196kB pagetables:6076kB bounce:0kB free_pcp:564kB local_pcp:0kB free_cma:0kB [ 2308.746891][T12211] lowmem_reserve[]: 0 0 0 0 [ 2308.751539][T12211] Node 1 Normal free:20732kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2308.783053][T12211] lowmem_reserve[]: 0 0 0 0 [ 2308.787699][T12211] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2308.806528][T12211] Node 0 DMA32: 557*4kB (UME) 271*8kB (ME) 203*16kB (M) 135*32kB (M) 74*64kB (UM) 36*128kB (UM) 4*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22332kB [ 2308.822278][T12211] Node 0 Normal: 352*4kB (UMEH) 113*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4056kB [ 2308.837681][T12211] Node 1 Normal: 286*4kB (ME) 108*8kB (ME) 49*16kB (UME) 27*32kB (ME) 5*64kB (UME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20744kB [ 2308.855117][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2308.864780][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2308.874182][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2308.883836][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2308.893209][T12211] 330 total pagecache pages [ 2308.897746][T12211] 0 pages in swap cache [ 2308.902001][T12211] Swap cache stats: add 0, delete 0, find 0/0 [ 2308.908101][T12211] Free swap = 0kB [ 2308.911848][T12211] Total swap = 0kB [ 2308.915664][T12211] 1965979 pages RAM [ 2308.919496][T12211] 0 pages HighMem/MovableOnly [ 2308.924396][T12211] 332211 pages reserved [ 2308.928583][T12211] 0 pages cma reserved [ 2308.932753][T12211] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=9695,uid=0 [ 2308.947561][T12211] Out of memory: Killed process 9695 (syz-executor.3) total-vm:72716kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2308.970627][ T1837] oom_reaper: reaped process 9695 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2309.339786][ T1] init invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2309.350279][ T1] CPU: 0 PID: 1 Comm: init Not tainted 5.5.0-rc1-syzkaller #0 [ 2309.357963][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2309.368122][ T1] Call Trace: [ 2309.371671][ T1] dump_stack+0x1c9/0x220 [ 2309.376146][ T1] dump_header+0x1e7/0xd00 [ 2309.380704][ T1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2309.386641][ T1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2309.392920][ T1] ? ___ratelimit+0x542/0x720 [ 2309.401377][ T1] ? task_will_free_mem+0x2c9/0x810 [ 2309.406725][ T1] oom_kill_process+0x216/0x580 [ 2309.411728][ T1] out_of_memory+0x17b6/0x1ce0 [ 2309.416666][ T1] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2309.422418][ T1] alloc_pages_current+0x68d/0x9a0 [ 2309.427673][ T1] __page_cache_alloc+0x95/0x320 [ 2309.432747][ T1] pagecache_get_page+0xaf1/0x1220 [ 2309.437991][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2309.443237][ T1] filemap_fault+0x2632/0x2b70 [ 2309.448160][ T1] ext4_filemap_fault+0xbb/0x130 [ 2309.453222][ T1] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2309.458631][ T1] handle_mm_fault+0x6c4a/0x9f80 [ 2309.463697][ T1] ? filemap_fault+0x2b70/0x2b70 [ 2309.468751][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2309.474031][ T1] do_user_addr_fault+0x905/0x1510 [ 2309.479297][ T1] ? kmsan_get_metadata+0x11e/0x190 [ 2309.484633][ T1] __do_page_fault+0x1a2/0x410 [ 2309.489534][ T1] do_page_fault+0xbb/0x500 [ 2309.494158][ T1] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2309.499665][ T1] page_fault+0x4e/0x60 [ 2309.503920][ T1] RIP: 0033:0x7f9e7fda0fe0 [ 2309.508447][ T1] Code: Bad RIP value. [ 2309.512613][ T1] RSP: 002b:00007fff6637e458 EFLAGS: 00010206 [ 2309.518786][ T1] RAX: 0000000000000000 RBX: 00007fff6637e580 RCX: 00007f9e7fdd9dd3 [ 2309.526868][ T1] RDX: 0000000000000000 RSI: 00007fff6637e390 RDI: 00007fff6637e580 [ 2309.534949][ T1] RBP: 0000000000000000 R08: 00007fff6637e410 R09: 0000000000000001 [ 2309.543037][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2309.551130][ T1] R13: 00007fff6637e770 R14: 0000000000000000 R15: 0000000000000000 [ 2309.561869][ T1] Mem-Info: [ 2309.565226][ T1] active_anon:113485 inactive_anon:206 isolated_anon:0 [ 2309.565226][ T1] active_file:14 inactive_file:17 isolated_file:0 [ 2309.565226][ T1] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2309.565226][ T1] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2309.565226][ T1] mapped:52226 shmem:299 pagetables:7344 bounce:0 [ 2309.565226][ T1] free:15000 free_pcp:0 free_cma:0 [ 2309.602381][ T1] Node 0 active_anon:440116kB inactive_anon:824kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2309.630767][ T1] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2309.657676][ T1] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2309.687155][ T1] lowmem_reserve[]: 0 2736 3426 3426 [ 2309.692625][ T1] Node 0 DMA32 free:21972kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:420724kB inactive_anon:60kB active_file:80kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19268kB pagetables:19972kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2309.724247][ T1] lowmem_reserve[]: 0 0 690 690 [ 2309.729227][ T1] Node 0 Normal free:3356kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19280kB inactive_anon:764kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16132kB pagetables:5828kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2309.760583][ T1] lowmem_reserve[]: 0 0 0 0 [ 2309.765276][ T1] Node 1 Normal free:20888kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2309.796468][ T1] lowmem_reserve[]: 0 0 0 0 [ 2309.801162][ T1] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2309.817443][ T1] Node 0 DMA32: 586*4kB (UME) 279*8kB (UME) 198*16kB (UM) 136*32kB (UM) 74*64kB (UM) 36*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22464kB [ 2309.833528][ T1] Node 0 Normal: 248*4kB (UMEH) 115*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3656kB [ 2309.849239][ T1] Node 1 Normal: 286*4kB (ME) 110*8kB (UME) 49*16kB (UME) 28*32kB (UME) 6*64kB (UME) 6*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20984kB [ 2309.866956][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2309.876868][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2309.886330][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2309.896053][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2309.905509][ T1] 328 total pagecache pages [ 2309.910114][ T1] 0 pages in swap cache [ 2309.914437][ T1] Swap cache stats: add 0, delete 0, find 0/0 [ 2309.920595][ T1] Free swap = 0kB [ 2309.924464][ T1] Total swap = 0kB [ 2309.928280][ T1] 1965979 pages RAM [ 2309.932272][ T1] 0 pages HighMem/MovableOnly [ 2309.937037][ T1] 332211 pages reserved [ 2309.941278][ T1] 0 pages cma reserved [ 2309.945501][ T1] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=6601,uid=0 [ 2309.960083][ T1] Out of memory: Killed process 6601 (syz-executor.4) total-vm:72716kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2309.978638][ T1837] oom_reaper: reaped process 6601 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2310.055791][T12216] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2310.066869][T12216] CPU: 1 PID: 12216 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2310.075248][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.085341][T12216] Call Trace: [ 2310.088731][T12216] dump_stack+0x1c9/0x220 [ 2310.093128][T12216] dump_header+0x1e7/0xd00 [ 2310.097564][T12216] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2310.103385][T12216] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2310.109608][T12216] ? ___ratelimit+0x542/0x720 [ 2310.114309][T12216] ? task_will_free_mem+0x2c9/0x810 [ 2310.119533][T12216] oom_kill_process+0x216/0x580 [ 2310.124410][T12216] out_of_memory+0x17b6/0x1ce0 [ 2310.129252][T12216] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2310.134856][T12216] alloc_pages_current+0x68d/0x9a0 [ 2310.139986][T12216] __page_cache_alloc+0x95/0x320 [ 2310.144940][T12216] pagecache_get_page+0xaf1/0x1220 [ 2310.150108][T12216] ? kmsan_get_metadata+0x4f/0x190 [ 2310.155326][T12216] filemap_fault+0x2632/0x2b70 [ 2310.160118][T12216] ext4_filemap_fault+0xbb/0x130 [ 2310.165153][T12216] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2310.170451][T12216] handle_mm_fault+0x6c4a/0x9f80 [ 2310.175414][T12216] ? filemap_fault+0x2b70/0x2b70 [ 2310.180393][T12216] do_user_addr_fault+0x905/0x1510 [ 2310.185524][T12216] ? kmsan_get_metadata+0x11e/0x190 [ 2310.190763][T12216] __do_page_fault+0x1a2/0x410 [ 2310.195676][T12216] do_page_fault+0xbb/0x500 [ 2310.200213][T12216] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2310.205612][T12216] page_fault+0x4e/0x60 [ 2310.209816][T12216] RIP: 0033:0x460c23 [ 2310.213727][T12216] Code: Bad RIP value. [ 2310.217834][T12216] RSP: 002b:000000c00003a6a0 EFLAGS: 00010206 [ 2310.223908][T12216] RAX: ffffffffffffff92 RBX: 0000000034b9e29f RCX: 0000000000460c23 [ 2310.231974][T12216] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001e26a40 [ 2310.239972][T12216] RBP: 000000c00003a6e8 R08: 0000000000000000 R09: 0000000000000000 [ 2310.247949][T12216] R10: 000000c00003a6d8 R11: 0000000000000206 R12: 00000222d41ecfce [ 2310.255975][T12216] R13: 0000000000000001 R14: 00000222d41ecfce R15: fffffffffffea16d [ 2310.264075][T12216] Mem-Info: [ 2310.267249][T12216] active_anon:112942 inactive_anon:206 isolated_anon:0 [ 2310.267249][T12216] active_file:17 inactive_file:7 isolated_file:1 [ 2310.267249][T12216] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2310.267249][T12216] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2310.267249][T12216] mapped:52226 shmem:299 pagetables:7343 bounce:0 [ 2310.267249][T12216] free:16632 free_pcp:416 free_cma:0 [ 2310.304522][T12216] Node 0 active_anon:437944kB inactive_anon:824kB active_file:64kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 360448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2310.333665][T12216] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2310.360639][T12216] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2310.390164][T12216] lowmem_reserve[]: 0 2736 3426 3426 [ 2310.395628][T12216] Node 0 DMA32 free:23316kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:418568kB inactive_anon:60kB active_file:60kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19268kB pagetables:19968kB bounce:0kB free_pcp:628kB local_pcp:488kB free_cma:0kB [ 2310.430611][T12216] lowmem_reserve[]: 0 0 690 690 [ 2310.435728][T12216] Node 0 Normal free:3656kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19264kB inactive_anon:764kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16132kB pagetables:5828kB bounce:0kB free_pcp:188kB local_pcp:40kB free_cma:0kB [ 2310.467323][T12216] lowmem_reserve[]: 0 0 0 0 [ 2310.471848][T12216] Node 1 Normal free:20732kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2310.503497][T12216] lowmem_reserve[]: 0 0 0 0 [ 2310.508034][T12216] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2310.524149][T12216] Node 0 DMA32: 569*4kB (ME) 263*8kB (UME) 193*16kB (UM) 130*32kB (M) 67*64kB (M) 34*128kB (UM) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 21804kB [ 2310.540168][T12216] Node 0 Normal: 248*4kB (UMEH) 115*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3656kB [ 2310.555551][T12216] Node 1 Normal: 287*4kB (UME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 5*64kB (UME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20732kB [ 2310.572709][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2310.583825][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2310.593177][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2310.602818][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2310.612204][T12216] 327 total pagecache pages [ 2310.616742][T12216] 0 pages in swap cache [ 2310.620918][T12216] Swap cache stats: add 0, delete 0, find 0/0 [ 2310.627100][T12216] Free swap = 0kB [ 2310.630821][T12216] Total swap = 0kB [ 2310.634580][T12216] 1965979 pages RAM [ 2310.638552][T12216] 0 pages HighMem/MovableOnly [ 2310.643301][T12216] 332211 pages reserved [ 2310.647472][T12216] 0 pages cma reserved [ 2310.651545][T12216] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=6567,uid=0 [ 2310.665854][T12216] Out of memory: Killed process 6567 (syz-executor.4) total-vm:72716kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2310.689024][ T1837] oom_reaper: reaped process 6567 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2310.845226][T12224] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2310.856076][T12224] CPU: 0 PID: 12224 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2310.864436][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.874496][T12224] Call Trace: [ 2310.877862][T12224] dump_stack+0x1c9/0x220 [ 2310.883209][T12224] dump_header+0x1e7/0xd00 [ 2310.887672][T12224] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2310.893499][T12224] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2310.899666][T12224] ? ___ratelimit+0x542/0x720 [ 2310.904394][T12224] ? task_will_free_mem+0x2c9/0x810 [ 2310.909683][T12224] oom_kill_process+0x216/0x580 [ 2310.914564][T12224] out_of_memory+0x17b6/0x1ce0 [ 2310.919364][T12224] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2310.925041][T12224] alloc_pages_current+0x68d/0x9a0 [ 2310.930673][T12224] __page_cache_alloc+0x95/0x320 [ 2310.935712][T12224] pagecache_get_page+0xaf1/0x1220 [ 2310.940945][T12224] ? kmsan_get_metadata+0x4f/0x190 [ 2310.946114][T12224] filemap_fault+0x2632/0x2b70 [ 2310.950978][T12224] ext4_filemap_fault+0xbb/0x130 [ 2310.955986][T12224] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2310.961324][T12224] handle_mm_fault+0x6c4a/0x9f80 [ 2310.966281][T12224] ? filemap_fault+0x2b70/0x2b70 [ 2310.971276][T12224] do_user_addr_fault+0x905/0x1510 [ 2310.976459][T12224] ? kmsan_get_metadata+0x11e/0x190 [ 2310.981703][T12224] __do_page_fault+0x1a2/0x410 [ 2310.986524][T12224] do_page_fault+0xbb/0x500 [ 2310.991041][T12224] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2310.996475][T12224] page_fault+0x4e/0x60 [ 2311.000676][T12224] RIP: 0033:0x438170 [ 2311.004605][T12224] Code: Bad RIP value. [ 2311.008673][T12224] RSP: 002b:000000c000311f98 EFLAGS: 00010206 [ 2311.014765][T12224] RAX: 0000000000000000 RBX: 000000c000311fd0 RCX: 000000c000001680 [ 2311.022792][T12224] RDX: 000000c0000416cf RSI: 000000000045cda0 RDI: 000000000045bf40 [ 2311.030815][T12224] RBP: 000000c000311fc0 R08: 000000c000311fc0 R09: 00007ffdc3bea0b8 [ 2311.038826][T12224] R10: 0000000000000000 R11: 0000000000000902 R12: 0000025e2df48328 [ 2311.046828][T12224] R13: 0000000000000001 R14: 0000025e2df48328 R15: 0000000000000000 [ 2311.055721][T12224] Mem-Info: [ 2311.059002][T12224] active_anon:112399 inactive_anon:206 isolated_anon:0 [ 2311.059002][T12224] active_file:22 inactive_file:2 isolated_file:2 [ 2311.059002][T12224] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2311.059002][T12224] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2311.059002][T12224] mapped:52226 shmem:299 pagetables:7316 bounce:0 [ 2311.059002][T12224] free:15016 free_pcp:93 free_cma:0 [ 2311.096139][T12224] Node 0 active_anon:435772kB inactive_anon:824kB active_file:88kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 358400kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2311.124515][T12224] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2311.151346][T12224] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2311.180703][T12224] lowmem_reserve[]: 0 2736 3426 3426 [ 2311.186065][T12224] Node 0 DMA32 free:22192kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:416404kB inactive_anon:60kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19204kB pagetables:19860kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 2311.217837][T12224] lowmem_reserve[]: 0 0 690 690 [ 2311.222837][T12224] Node 0 Normal free:3112kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19256kB inactive_anon:764kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16132kB pagetables:5828kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2311.254799][T12224] lowmem_reserve[]: 0 0 0 0 [ 2311.259351][T12224] Node 1 Normal free:20976kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2311.290401][T12224] lowmem_reserve[]: 0 0 0 0 [ 2311.295023][T12224] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2311.311081][T12224] Node 0 DMA32: 589*4kB (ME) 264*8kB (UME) 194*16kB (M) 131*32kB (M) 67*64kB (M) 34*128kB (UM) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 21940kB [ 2311.326998][T12224] Node 0 Normal: 218*4kB (UMEH) 84*8kB (MEH) 22*16kB (MEH) 20*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3112kB [ 2311.342067][T12224] Node 1 Normal: 286*4kB (ME) 109*8kB (UME) 49*16kB (UME) 28*32kB (UME) 6*64kB (UME) 6*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20976kB [ 2311.359479][T12224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2311.369165][T12224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2311.378502][T12224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2311.388193][T12224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2311.397541][T12224] 327 total pagecache pages [ 2311.402155][T12224] 0 pages in swap cache [ 2311.406355][T12224] Swap cache stats: add 0, delete 0, find 0/0 [ 2311.412520][T12224] Free swap = 0kB [ 2311.416262][T12224] Total swap = 0kB [ 2311.420065][T12224] 1965979 pages RAM [ 2311.423924][T12224] 0 pages HighMem/MovableOnly [ 2311.428595][T12224] 332211 pages reserved [ 2311.432816][T12224] 0 pages cma reserved [ 2311.436924][T12224] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=2161,uid=0 [ 2311.451443][T12224] Out of memory: Killed process 2161 (syz-executor.3) total-vm:72716kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2311.469860][ T1837] oom_reaper: reaped process 2161 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2311.643881][T12211] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2311.654823][T12211] CPU: 0 PID: 12211 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2311.663285][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2311.673387][T12211] Call Trace: [ 2311.676762][T12211] dump_stack+0x1c9/0x220 [ 2311.681282][T12211] dump_header+0x1e7/0xd00 [ 2311.685785][T12211] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2311.691674][T12211] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2311.697902][T12211] ? ___ratelimit+0x542/0x720 [ 2311.702659][T12211] ? task_will_free_mem+0x2c9/0x810 [ 2311.707948][T12211] oom_kill_process+0x216/0x580 [ 2311.712883][T12211] out_of_memory+0x17b6/0x1ce0 [ 2311.717763][T12211] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2311.723463][T12211] alloc_pages_current+0x68d/0x9a0 [ 2311.728659][T12211] __page_cache_alloc+0x95/0x320 [ 2311.733681][T12211] pagecache_get_page+0xaf1/0x1220 [ 2311.738872][T12211] ? kmsan_get_metadata+0x4f/0x190 [ 2311.744054][T12211] filemap_fault+0x2632/0x2b70 [ 2311.748919][T12211] ext4_filemap_fault+0xbb/0x130 [ 2311.753928][T12211] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2311.759291][T12211] handle_mm_fault+0x6c4a/0x9f80 [ 2311.764300][T12211] ? filemap_fault+0x2b70/0x2b70 [ 2311.769702][T12211] do_user_addr_fault+0x905/0x1510 [ 2311.774900][T12211] ? kmsan_get_metadata+0x11e/0x190 [ 2311.780177][T12211] __do_page_fault+0x1a2/0x410 [ 2311.785023][T12211] do_page_fault+0xbb/0x500 [ 2311.789599][T12211] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2311.795051][T12211] page_fault+0x4e/0x60 [ 2311.799249][T12211] RIP: 0033:0x43b2bd [ 2311.803195][T12211] Code: Bad RIP value. [ 2311.807307][T12211] RSP: 002b:000000c000051f50 EFLAGS: 00010206 [ 2311.813445][T12211] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046068d [ 2311.821472][T12211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 2311.829498][T12211] RBP: 000000c000051f48 R08: 000000c000000180 R09: 00007ffdc3bea0b8 [ 2311.837524][T12211] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000004338c0 [ 2311.845556][T12211] R13: 0000000000000000 R14: 0000000000aab654 R15: 0000000000000000 [ 2311.853959][T12211] Mem-Info: [ 2311.857211][T12211] active_anon:111860 inactive_anon:206 isolated_anon:0 [ 2311.857211][T12211] active_file:0 inactive_file:28 isolated_file:0 [ 2311.857211][T12211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2311.857211][T12211] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2311.857211][T12211] mapped:52226 shmem:299 pagetables:7290 bounce:0 [ 2311.857211][T12211] free:14785 free_pcp:120 free_cma:0 [ 2311.894520][T12211] Node 0 active_anon:433616kB inactive_anon:824kB active_file:0kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 358400kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2311.923023][T12211] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2311.950090][T12211] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2311.979517][T12211] lowmem_reserve[]: 0 2736 3426 3426 [ 2311.984953][T12211] Node 0 DMA32 free:21524kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:414256kB inactive_anon:60kB active_file:0kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19140kB pagetables:19792kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 2312.016903][T12211] lowmem_reserve[]: 0 0 690 690 [ 2312.021830][T12211] Node 0 Normal free:3376kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19248kB inactive_anon:764kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16132kB pagetables:5792kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2312.053375][T12211] lowmem_reserve[]: 0 0 0 0 [ 2312.057959][T12211] Node 1 Normal free:20472kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2312.089992][T12211] lowmem_reserve[]: 0 0 0 0 [ 2312.094638][T12211] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2312.110874][T12211] Node 0 DMA32: 597*4kB (ME) 271*8kB (ME) 195*16kB (M) 132*32kB (UM) 67*64kB (M) 33*128kB (M) 3*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 21692kB [ 2312.126791][T12211] Node 0 Normal: 223*4kB (UMEH) 94*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3388kB [ 2312.142205][T12211] Node 1 Normal: 286*4kB (ME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 5*64kB (UME) 5*128kB (UME) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20472kB [ 2312.159438][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2312.169131][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2312.178537][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2312.188220][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2312.197604][T12211] 327 total pagecache pages [ 2312.202230][T12211] 0 pages in swap cache [ 2312.206428][T12211] Swap cache stats: add 0, delete 0, find 0/0 [ 2312.212593][T12211] Free swap = 0kB [ 2312.216344][T12211] Total swap = 0kB [ 2312.220100][T12211] 1965979 pages RAM [ 2312.224075][T12211] 0 pages HighMem/MovableOnly [ 2312.228782][T12211] 332211 pages reserved [ 2312.233034][T12211] 0 pages cma reserved [ 2312.237157][T12211] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=18474,uid=0 [ 2312.252143][T12211] Out of memory: Killed process 18474 (syz-executor.0) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2312.270676][ T1837] oom_reaper: reaped process 18474 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2312.295193][T12216] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2312.306277][T12216] CPU: 1 PID: 12216 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2312.314660][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.324864][T12216] Call Trace: [ 2312.328235][T12216] dump_stack+0x1c9/0x220 [ 2312.332651][T12216] dump_header+0x1e7/0xd00 [ 2312.337146][T12216] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2312.343020][T12216] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2312.349246][T12216] ? ___ratelimit+0x542/0x720 [ 2312.353999][T12216] ? task_will_free_mem+0x2c9/0x810 [ 2312.359289][T12216] oom_kill_process+0x216/0x580 [ 2312.364225][T12216] out_of_memory+0x17b6/0x1ce0 [ 2312.369098][T12216] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2312.374796][T12216] alloc_pages_current+0x68d/0x9a0 [ 2312.379996][T12216] __page_cache_alloc+0x95/0x320 [ 2312.385018][T12216] pagecache_get_page+0xaf1/0x1220 [ 2312.390222][T12216] ? kmsan_get_metadata+0x4f/0x190 [ 2312.395412][T12216] filemap_fault+0x2632/0x2b70 [ 2312.400281][T12216] ext4_filemap_fault+0xbb/0x130 [ 2312.405283][T12216] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2312.410641][T12216] handle_mm_fault+0x6c4a/0x9f80 [ 2312.415662][T12216] ? filemap_fault+0x2b70/0x2b70 [ 2312.420720][T12216] do_user_addr_fault+0x905/0x1510 [ 2312.425922][T12216] ? kmsan_get_metadata+0x11e/0x190 [ 2312.431198][T12216] __do_page_fault+0x1a2/0x410 [ 2312.436050][T12216] do_page_fault+0xbb/0x500 [ 2312.440630][T12216] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2312.446092][T12216] page_fault+0x4e/0x60 [ 2312.450290][T12216] RIP: 0033:0x460c23 [ 2312.454231][T12216] Code: Bad RIP value. [ 2312.458330][T12216] RSP: 002b:000000c00003a6a0 EFLAGS: 00010206 [ 2312.464448][T12216] RAX: ffffffffffffff92 RBX: 0000000034b9e29f RCX: 0000000000460c23 [ 2312.472469][T12216] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001e26a40 [ 2312.480751][T12216] RBP: 000000c00003a6e8 R08: 0000000000000000 R09: 0000000000000000 [ 2312.488774][T12216] R10: 000000c00003a6d8 R11: 0000000000000206 R12: 00000222d41ecfce [ 2312.496794][T12216] R13: 0000000000000001 R14: 00000222d41ecfce R15: fffffffffffea16d [ 2312.505337][T12216] Mem-Info: [ 2312.508666][T12216] active_anon:111317 inactive_anon:206 isolated_anon:0 [ 2312.508666][T12216] active_file:38 inactive_file:15 isolated_file:0 [ 2312.508666][T12216] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2312.508666][T12216] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2312.508666][T12216] mapped:52226 shmem:299 pagetables:7289 bounce:0 [ 2312.508666][T12216] free:16325 free_pcp:423 free_cma:0 [ 2312.546070][T12216] Node 0 active_anon:431444kB inactive_anon:824kB active_file:168kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 356352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2312.574808][T12216] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2312.601990][T12216] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2312.631438][T12216] lowmem_reserve[]: 0 2736 3426 3426 [ 2312.636874][T12216] Node 0 DMA32 free:26828kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:412096kB inactive_anon:60kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19012kB pagetables:19788kB bounce:0kB free_pcp:652kB local_pcp:580kB free_cma:0kB [ 2312.669015][T12216] lowmem_reserve[]: 0 0 690 690 [ 2312.674164][T12216] Node 0 Normal free:3376kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19248kB inactive_anon:764kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16132kB pagetables:5792kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 2312.705768][T12216] lowmem_reserve[]: 0 0 0 0 [ 2312.710345][T12216] Node 1 Normal free:20472kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2312.741956][T12216] lowmem_reserve[]: 0 0 0 0 [ 2312.746537][T12216] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2312.762799][T12216] Node 0 DMA32: 598*4kB (UME) 272*8kB (UME) 196*16kB (UM) 132*32kB (UM) 67*64kB (M) 33*128kB (M) 4*256kB (UM) 1*512kB (U) 0*1024kB 2*2048kB (UM) 0*4096kB = 26072kB [ 2312.779567][T12216] Node 0 Normal: 223*4kB (UMEH) 94*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3388kB [ 2312.794928][T12216] Node 1 Normal: 286*4kB (ME) 108*8kB (ME) 48*16kB (ME) 27*32kB (ME) 5*64kB (UME) 5*128kB (UME) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20472kB [ 2312.812164][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2312.821763][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2312.831197][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2312.840883][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2312.850262][T12216] 327 total pagecache pages [ 2312.854880][T12216] 0 pages in swap cache [ 2312.859072][T12216] Swap cache stats: add 0, delete 0, find 0/0 [ 2312.865242][T12216] Free swap = 0kB [ 2312.868989][T12216] Total swap = 0kB [ 2312.872990][T12216] 1965979 pages RAM [ 2312.876823][T12216] 0 pages HighMem/MovableOnly [ 2312.881527][T12216] 332211 pages reserved [ 2312.885825][T12216] 0 pages cma reserved [ 2312.889937][T12216] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=12376,uid=0 [ 2312.904868][T12216] Out of memory: Killed process 12376 (syz-executor.5) total-vm:72716kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2312.930620][ T1] init invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2312.941416][ T1] CPU: 0 PID: 1 Comm: init Not tainted 5.5.0-rc1-syzkaller #0 [ 2312.948976][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.959132][ T1] Call Trace: [ 2312.962555][ T1] dump_stack+0x1c9/0x220 [ 2312.967028][ T1] dump_header+0x1e7/0xd00 [ 2312.971585][ T1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2312.977518][ T1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2312.983805][ T1] ? ___ratelimit+0x542/0x720 [ 2312.988619][ T1] ? task_will_free_mem+0x2c9/0x810 [ 2312.993968][ T1] oom_kill_process+0x216/0x580 [ 2312.998957][ T1] out_of_memory+0x17b6/0x1ce0 [ 2313.003880][ T1] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2313.009638][ T1] alloc_pages_current+0x68d/0x9a0 [ 2313.014895][ T1] __page_cache_alloc+0x95/0x320 [ 2313.019968][ T1] pagecache_get_page+0xaf1/0x1220 [ 2313.025195][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2313.030352][ T1] filemap_fault+0x2632/0x2b70 [ 2313.035225][ T1] ext4_filemap_fault+0xbb/0x130 [ 2313.040261][ T1] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2313.045771][ T1] handle_mm_fault+0x6c4a/0x9f80 [ 2313.050806][ T1] ? filemap_fault+0x2b70/0x2b70 [ 2313.055835][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2313.061117][ T1] do_user_addr_fault+0x905/0x1510 [ 2313.066373][ T1] ? kmsan_get_metadata+0x11e/0x190 [ 2313.071676][ T1] __do_page_fault+0x1a2/0x410 [ 2313.076556][ T1] do_page_fault+0xbb/0x500 [ 2313.081179][ T1] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2313.086600][ T1] page_fault+0x4e/0x60 [ 2313.090805][ T1] RIP: 0033:0x7f9e7fda0fe0 [ 2313.095316][ T1] Code: Bad RIP value. [ 2313.099419][ T1] RSP: 002b:00007fff6637e458 EFLAGS: 00010206 [ 2313.105520][ T1] RAX: 0000000000000000 RBX: 00007fff6637e580 RCX: 00007f9e7fdd9dd3 [ 2313.113542][ T1] RDX: 0000000000000000 RSI: 00007fff6637e390 RDI: 00007fff6637e580 [ 2313.121606][ T1] RBP: 0000000000000000 R08: 00007fff6637e410 R09: 0000000000000001 [ 2313.129621][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2313.137635][ T1] R13: 00007fff6637e770 R14: 0000000000000000 R15: 0000000000000000 [ 2313.146799][ T1] Mem-Info: [ 2313.150054][ T1] active_anon:110772 inactive_anon:206 isolated_anon:0 [ 2313.150054][ T1] active_file:19 inactive_file:29 isolated_file:5 [ 2313.150054][ T1] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2313.150054][ T1] slab_reclaimable:6711 slab_unreclaimable:37893 [ 2313.150054][ T1] mapped:52226 shmem:299 pagetables:7262 bounce:0 [ 2313.150054][ T1] free:15242 free_pcp:24 free_cma:0 [ 2313.187321][ T1] Node 0 active_anon:429264kB inactive_anon:824kB active_file:96kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 352256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2313.216123][ T1] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2313.243347][ T1] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2313.273572][ T1] lowmem_reserve[]: 0 2736 3426 3426 [ 2313.278912][ T1] Node 0 DMA32 free:22184kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:410032kB inactive_anon:60kB active_file:84kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19012kB pagetables:19784kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 2313.310844][ T1] lowmem_reserve[]: 0 0 690 690 [ 2313.315799][ T1] Node 0 Normal free:4328kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19120kB inactive_anon:764kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16072kB pagetables:5688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2313.347162][ T1] lowmem_reserve[]: 0 0 0 0 [ 2313.351755][ T1] Node 1 Normal free:20672kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2313.382967][ T1] lowmem_reserve[]: 0 0 0 0 [ 2313.387605][ T1] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2313.403760][ T1] Node 0 DMA32: 601*4kB (ME) 276*8kB (ME) 196*16kB (UM) 132*32kB (M) 68*64kB (UM) 34*128kB (UM) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 22212kB [ 2313.419920][ T1] Node 0 Normal: 439*4kB (UMEH) 106*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4348kB [ 2313.435249][ T1] Node 1 Normal: 286*4kB (ME) 109*8kB (UME) 49*16kB (UME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20720kB [ 2313.452586][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2313.462433][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2313.471955][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2313.481602][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2313.490953][ T1] 327 total pagecache pages [ 2313.495528][ T1] 0 pages in swap cache [ 2313.499711][ T1] Swap cache stats: add 0, delete 0, find 0/0 [ 2313.505912][ T1] Free swap = 0kB [ 2313.509666][ T1] Total swap = 0kB [ 2313.513454][ T1] 1965979 pages RAM [ 2313.517293][ T1] 0 pages HighMem/MovableOnly [ 2313.522079][ T1] 332211 pages reserved [ 2313.526301][ T1] 0 pages cma reserved [ 2313.530396][ T1] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=9754,uid=0 [ 2313.545201][ T1] Out of memory: Killed process 9754 (syz-executor.1) total-vm:72584kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2313.564228][ T1837] oom_reaper: reaped process 9754 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2313.687475][T12211] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2313.698344][T12211] CPU: 0 PID: 12211 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2313.706689][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2313.716751][T12211] Call Trace: [ 2313.720066][T12211] dump_stack+0x1c9/0x220 [ 2313.724417][T12211] dump_header+0x1e7/0xd00 [ 2313.728848][T12211] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2313.734669][T12211] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2313.740834][T12211] ? ___ratelimit+0x542/0x720 [ 2313.745538][T12211] ? task_will_free_mem+0x2c9/0x810 [ 2313.750790][T12211] oom_kill_process+0x216/0x580 [ 2313.755733][T12211] out_of_memory+0x17b6/0x1ce0 [ 2313.760530][T12211] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2313.766169][T12211] alloc_pages_current+0x68d/0x9a0 [ 2313.771297][T12211] __page_cache_alloc+0x95/0x320 [ 2313.776295][T12211] pagecache_get_page+0xaf1/0x1220 [ 2313.781488][T12211] ? kmsan_get_metadata+0x4f/0x190 [ 2313.786682][T12211] filemap_fault+0x2632/0x2b70 [ 2313.791503][T12211] ext4_filemap_fault+0xbb/0x130 [ 2313.796456][T12211] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2313.801793][T12211] handle_mm_fault+0x6c4a/0x9f80 [ 2313.806754][T12211] ? filemap_fault+0x2b70/0x2b70 [ 2313.811754][T12211] do_user_addr_fault+0x905/0x1510 [ 2313.816895][T12211] ? kmsan_get_metadata+0x11e/0x190 [ 2313.822157][T12211] __do_page_fault+0x1a2/0x410 [ 2313.826978][T12211] do_page_fault+0xbb/0x500 [ 2313.831536][T12211] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2313.836952][T12211] page_fault+0x4e/0x60 [ 2313.841124][T12211] RIP: 0033:0x43b2bd [ 2313.845047][T12211] Code: Bad RIP value. [ 2313.849150][T12211] RSP: 002b:000000c000051f50 EFLAGS: 00010206 [ 2313.855269][T12211] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 000000000046068d [ 2313.863289][T12211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000051f30 [ 2313.871314][T12211] RBP: 000000c000051f48 R08: 000000c000000180 R09: 00007ffdc3bea0b8 [ 2313.879336][T12211] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000004338c0 [ 2313.887366][T12211] R13: 0000000000000000 R14: 0000000000aab654 R15: 0000000000000000 [ 2313.895561][T12211] Mem-Info: [ 2313.898805][T12211] active_anon:110235 inactive_anon:206 isolated_anon:0 [ 2313.898805][T12211] active_file:23 inactive_file:0 isolated_file:17 [ 2313.898805][T12211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2313.898805][T12211] slab_reclaimable:6711 slab_unreclaimable:37891 [ 2313.898805][T12211] mapped:52226 shmem:299 pagetables:7212 bounce:0 [ 2313.898805][T12211] free:14942 free_pcp:60 free_cma:0 [ 2313.922511][ T3923] syz-executor.3: vmalloc: allocation failure, allocated 1115066368 of 2147491840 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2313.936150][T12211] Node 0 active_anon:427116kB inactive_anon:824kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 352256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2313.936239][T12211] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2313.936283][T12211] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2313.953276][ T3923] CPU: 1 PID: 3923 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2313.981369][T12211] lowmem_reserve[]: 0 2736 3426 3426 [ 2314.008079][ T3923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2314.008095][ T3923] Call Trace: [ 2314.008202][ T3923] dump_stack+0x1c9/0x220 [ 2314.037356][T12211] Node 0 DMA32 free:21720kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:407884kB inactive_anon:60kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19012kB pagetables:19584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2314.045966][ T3923] warn_alloc+0x4cc/0x680 [ 2314.046057][ T3923] ? balance_callback+0x48/0x260 [ 2314.051308][T12211] lowmem_reserve[]: 0 0 690 690 [ 2314.061418][ T3923] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2314.061494][ T3923] __vmalloc_node_range+0xdc0/0x1270 [ 2314.064773][T12211] Node 0 Normal free:3592kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19120kB inactive_anon:764kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16072kB pagetables:5688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2314.069142][ T3923] vzalloc+0x106/0x120 [ 2314.100401][T12211] lowmem_reserve[]: 0 0 0 0 [ 2314.104720][ T3923] ? ip_set_alloc+0x10a/0x140 [ 2314.104784][ T3923] ? ip_set_alloc+0x10a/0x140 [ 2314.109691][T12211] Node 1 Normal free:20672kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2314.114559][ T3923] ip_set_alloc+0x10a/0x140 [ 2314.114648][ T3923] hash_netnet_create+0x59c/0xf80 [ 2314.120408][T12211] lowmem_reserve[]: 0 0 0 0 [ 2314.125740][ T3923] ? kmsan_get_metadata+0x20/0x190 [ 2314.125837][ T3923] ? hash_netiface6_expire+0x1070/0x1070 [ 2314.156895][T12211] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2314.160972][ T3923] ip_set_create+0xa19/0x1940 [ 2314.165468][T12211] Node 0 DMA32: 618*4kB (UME) 278*8kB (UME) 195*16kB (M) 132*32kB (M) 67*64kB (M) 34*128kB (UM) 3*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 21960kB [ 2314.170193][ T3923] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2314.174832][T12211] Node 0 Normal: 316*4kB (UMEH) 106*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3856kB [ 2314.205750][ T3923] ? ip_set_protocol+0x840/0x840 [ 2314.205822][ T3923] nfnetlink_rcv_msg+0xb7f/0xce0 [ 2314.210287][T12211] Node 1 Normal: 286*4kB (ME) 109*8kB (UME) 49*16kB (UME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20720kB [ 2314.215373][ T3923] ? kmsan_get_metadata+0x4f/0x190 [ 2314.215437][ T3923] ? kmsan_get_metadata+0x4f/0x190 [ 2314.219933][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2314.225047][ T3923] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2314.225114][ T3923] ? kmsan_get_metadata+0x11e/0x190 [ 2314.230744][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2314.246634][ T3923] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2314.246701][ T3923] netlink_rcv_skb+0x431/0x620 [ 2314.246770][ T3923] ? nfnetlink_bind+0x1d0/0x1d0 [ 2314.251467][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2314.267202][ T3923] nfnetlink_rcv+0x3bb/0x39e0 [ 2314.267288][ T3923] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2314.273114][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2314.288208][ T3923] ? __se_sys_sendmsg+0x97/0xb0 [ 2314.288284][ T3923] ? __x64_sys_sendmsg+0x4a/0x70 [ 2314.293222][T12211] 327 total pagecache pages [ 2314.298174][ T3923] ? kmsan_get_metadata+0x11e/0x190 [ 2314.315180][T12211] 0 pages in swap cache [ 2314.320305][ T3923] ? kmsan_get_metadata+0x4f/0x190 [ 2314.325441][T12211] Swap cache stats: add 0, delete 0, find 0/0 [ 2314.334967][ T3923] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2314.335035][ T3923] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2314.340652][T12211] Free swap = 0kB [ 2314.345883][ T3923] ? rhashtable_jhash2+0x3a9/0x4d0 [ 2314.345932][ T3923] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2314.346001][ T3923] ? kmsan_get_metadata+0x11e/0x190 [ 2314.355295][T12211] Total swap = 0kB [ 2314.361124][ T3923] ? kmsan_get_metadata+0x4f/0x190 [ 2314.365892][T12211] 1965979 pages RAM [ 2314.370750][ T3923] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2314.380291][T12211] 0 pages HighMem/MovableOnly [ 2314.384966][ T3923] ? kmsan_get_metadata+0x11e/0x190 [ 2314.385036][ T3923] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2314.391078][T12211] 332211 pages reserved [ 2314.400486][ T3923] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2314.400576][ T3923] ? netlink_deliver_tap+0xca/0xeb0 [ 2314.405419][T12211] 0 pages cma reserved [ 2314.410371][ T3923] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2314.414887][T12211] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=9735,uid=0 [ 2314.420117][ T3923] ? __netlink_lookup+0x8fd/0x990 [ 2314.424430][T12211] Out of memory: Killed process 9735 (syz-executor.1) total-vm:72584kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2314.429412][ T3923] ? kmsan_get_metadata+0x11e/0x190 [ 2314.570864][ T3923] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2314.576512][ T3923] ? kmsan_get_metadata+0x11e/0x190 [ 2314.581723][ T3923] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2314.587551][ T3923] netlink_unicast+0xfa0/0x1100 [ 2314.592421][ T3923] ? nfnetlink_net_exit_batch+0x290/0x290 [ 2314.598162][ T3923] netlink_sendmsg+0x11f0/0x1480 [ 2314.603130][ T3923] ? netlink_getsockopt+0x1430/0x1430 [ 2314.608525][ T3923] ____sys_sendmsg+0x1362/0x13f0 [ 2314.613492][ T3923] __sys_sendmsg+0x4f0/0x5e0 [ 2314.618114][ T3923] ? kmsan_copy_to_user+0x81/0x90 [ 2314.623148][ T3923] ? _copy_to_user+0x168/0x1f0 [ 2314.627928][ T3923] ? kmsan_get_metadata+0x11e/0x190 [ 2314.633150][ T3923] ? kmsan_get_metadata+0x11e/0x190 [ 2314.638359][ T3923] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2314.644523][ T3923] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2314.650612][ T3923] ? prepare_exit_to_usermode+0x1ca/0x530 [ 2314.656354][ T3923] __se_sys_sendmsg+0x97/0xb0 [ 2314.661050][ T3923] __x64_sys_sendmsg+0x4a/0x70 [ 2314.665826][ T3923] do_syscall_64+0xb6/0x160 [ 2314.670360][ T3923] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2314.676267][ T3923] RIP: 0033:0x45af49 [ 2314.680241][ T3923] Code: Bad RIP value. [ 2314.684308][ T3923] RSP: 002b:00007f90621a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2314.692741][ T3923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 2314.700720][ T3923] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 2314.708714][ T3923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2314.716833][ T3923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90621a86d4 [ 2314.724817][ T3923] R13: 00000000004c9d34 R14: 00000000004e2d78 R15: 00000000ffffffff [ 2314.733984][ T3923] Mem-Info: [ 2314.737316][ T3923] active_anon:109698 inactive_anon:206 isolated_anon:0 [ 2314.737316][ T3923] active_file:0 inactive_file:13 isolated_file:17 [ 2314.737316][ T3923] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2314.737316][ T3923] slab_reclaimable:6711 slab_unreclaimable:37891 [ 2314.737316][ T3923] mapped:52226 shmem:299 pagetables:7212 bounce:0 [ 2314.737316][ T3923] free:16478 free_pcp:222 free_cma:0 [ 2314.774736][ T3923] Node 0 active_anon:424968kB inactive_anon:824kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 352256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2314.803271][ T3923] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2314.830225][ T3923] Node 0 DMA free:13784kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2314.859865][ T3923] lowmem_reserve[]: 0 2736 3426 3426 [ 2314.865343][ T3923] Node 0 DMA32 free:27864kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:405736kB inactive_anon:60kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:19012kB pagetables:19584kB bounce:0kB free_pcp:888kB local_pcp:0kB free_cma:0kB [ 2314.897066][ T3923] lowmem_reserve[]: 0 0 690 690 [ 2314.902092][ T3923] Node 0 Normal free:3592kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19120kB inactive_anon:764kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16072kB pagetables:5688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2314.933605][ T3923] lowmem_reserve[]: 0 0 0 0 [ 2314.938219][ T3923] Node 1 Normal free:20672kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2314.969366][ T3923] lowmem_reserve[]: 0 0 0 0 [ 2314.974078][ T3923] Node 0 DMA: 6*4kB (UME) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13784kB [ 2314.990351][ T3923] Node 0 DMA32: 618*4kB (UME) 278*8kB (UME) 195*16kB (M) 132*32kB (M) 67*64kB (M) 34*128kB (UM) 3*256kB (M) 1*512kB (U) 0*1024kB 3*2048kB (UM) 0*4096kB = 28104kB [ 2315.006719][ T3923] Node 0 Normal: 316*4kB (UMEH) 106*8kB (UMEH) 27*16kB (UMEH) 23*32kB (UMH) 9*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3856kB [ 2315.022070][ T3923] Node 1 Normal: 286*4kB (ME) 109*8kB (UME) 49*16kB (UME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20720kB [ 2315.039389][ T3923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2315.050594][ T3923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2315.059946][ T3923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2315.069556][ T3923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2315.078898][ T3923] 327 total pagecache pages [ 2315.083500][ T3923] 0 pages in swap cache [ 2315.087686][ T3923] Swap cache stats: add 0, delete 0, find 0/0 [ 2315.093801][ T3923] Free swap = 0kB [ 2315.097513][ T3923] Total swap = 0kB [ 2315.101229][ T3923] 1965979 pages RAM [ 2315.105094][ T3923] 0 pages HighMem/MovableOnly [ 2315.109769][ T3923] 332211 pages reserved [ 2315.114033][ T3923] 0 pages cma reserved 13:31:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, 0x0, 0x0) 13:31:49 executing program 2: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0), 0xad, 0x0) 13:31:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000002340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 13:31:49 executing program 1: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00', 0x1424d5bc4e419d1d}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0x4}]) 13:31:49 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x7, 0x3, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff6e}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13:31:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, 0x0, 0x0) 13:31:49 executing program 2: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0), 0xad, 0x0) 13:31:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 13:31:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, 0x0, 0x0) [ 2318.753118][ T3988] input: syz1 as /devices/virtual/input/input133 13:31:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) chroot(&(0x7f0000000180)='./file0\x00') 13:31:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/49, 0x18) getdents(r1, &(0x7f00000000c0)=""/41, 0x29) 13:31:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x5, 0x1, 0x6c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:31:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000002340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 13:31:50 executing program 1: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00', 0x1424d5bc4e419d1d}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0x4}]) [ 2319.286628][ T4011] input: syz1 as /devices/virtual/input/input134 13:31:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) chroot(&(0x7f0000000180)='./file0\x00') 13:31:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/49, 0x18) getdents(r1, &(0x7f00000000c0)=""/41, 0x29) 13:31:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x5, 0x1, 0x6c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:31:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/49, 0x18) getdents(r1, &(0x7f00000000c0)=""/41, 0x29) 13:31:50 executing program 1: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00', 0x1424d5bc4e419d1d}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0x4}]) [ 2326.205013][ T1837] oom_reaper: reaped process 3990 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2327.069463][T18641] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2327.080503][T18641] CPU: 1 PID: 18641 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2327.088876][T18641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.098969][T18641] Call Trace: [ 2327.102344][T18641] dump_stack+0x1c9/0x220 [ 2327.106756][T18641] dump_header+0x1e7/0xd00 [ 2327.111239][T18641] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2327.117123][T18641] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2327.123344][T18641] ? ___ratelimit+0x542/0x720 [ 2327.128097][T18641] ? task_will_free_mem+0x2c9/0x810 [ 2327.133395][T18641] oom_kill_process+0x216/0x580 [ 2327.138330][T18641] out_of_memory+0x17b6/0x1ce0 [ 2327.143199][T18641] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2327.148895][T18641] alloc_pages_current+0x68d/0x9a0 [ 2327.154102][T18641] __page_cache_alloc+0x95/0x320 [ 2327.159120][T18641] pagecache_get_page+0xaf1/0x1220 [ 2327.164313][T18641] ? kmsan_get_metadata+0x4f/0x190 [ 2327.169508][T18641] filemap_fault+0x2632/0x2b70 [ 2327.174377][T18641] ext4_filemap_fault+0xbb/0x130 [ 2327.179384][T18641] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2327.184746][T18641] handle_mm_fault+0x6c4a/0x9f80 [ 2327.189756][T18641] ? filemap_fault+0x2b70/0x2b70 [ 2327.194811][T18641] do_user_addr_fault+0x905/0x1510 [ 2327.200027][T18641] ? kmsan_get_metadata+0x11e/0x190 [ 2327.205395][T18641] __do_page_fault+0x1a2/0x410 [ 2327.210245][T18641] do_page_fault+0xbb/0x500 [ 2327.214825][T18641] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2327.220279][T18641] page_fault+0x4e/0x60 [ 2327.224482][T18641] RIP: 0033:0x42c854 [ 2327.228429][T18641] Code: Bad RIP value. [ 2327.232539][T18641] RSP: 002b:000000c0000416a8 EFLAGS: 00010202 [ 2327.238677][T18641] RAX: ffffffffffffff92 RBX: 000000003b97c4da RCX: 0000000000460c23 [ 2327.246701][T18641] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001e269c0 [ 2327.254724][T18641] RBP: 000000c0000416e8 R08: 0000000000000000 R09: 0000000000000000 [ 2327.262753][T18641] R10: 000000c0000416d8 R11: 0000000000000202 R12: 00000229e89169cb [ 2327.271209][T18641] R13: 0000000000000001 R14: 00000229e89169cb R15: 0000000000000000 [ 2327.279891][T18641] Mem-Info: [ 2327.283321][T18641] active_anon:109717 inactive_anon:206 isolated_anon:0 [ 2327.283321][T18641] active_file:109 inactive_file:54 isolated_file:0 [ 2327.283321][T18641] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2327.283321][T18641] slab_reclaimable:6737 slab_unreclaimable:37786 [ 2327.283321][T18641] mapped:52352 shmem:299 pagetables:7159 bounce:0 [ 2327.283321][T18641] free:14630 free_pcp:0 free_cma:0 [ 2327.320614][T18641] Node 0 active_anon:425044kB inactive_anon:824kB active_file:432kB inactive_file:216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209408kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2327.349302][T18641] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2327.376288][T18641] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2327.405807][T18641] lowmem_reserve[]: 0 2736 3426 3426 [ 2327.411355][T18641] Node 0 DMA32 free:19576kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:405824kB inactive_anon:56kB active_file:172kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18820kB pagetables:19376kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2327.443132][T18641] lowmem_reserve[]: 0 0 690 690 [ 2327.448188][T18641] Node 0 Normal free:4256kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19108kB inactive_anon:768kB active_file:260kB inactive_file:284kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5684kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 2327.480398][T18641] lowmem_reserve[]: 0 0 0 0 [ 2327.485123][T18641] Node 1 Normal free:20648kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2327.516555][T18641] lowmem_reserve[]: 0 0 0 0 [ 2327.521196][T18641] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2327.540130][T18641] Node 0 DMA32: 645*4kB (UME) 289*8kB (UME) 216*16kB (UM) 132*32kB (UM) 46*64kB (UM) 32*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20124kB [ 2327.556172][T18641] Node 0 Normal: 503*4kB (UMH) 128*8kB (UMH) 53*16kB (UMH) 27*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5324kB [ 2327.571231][T18641] Node 1 Normal: 283*4kB (ME) 109*8kB (UME) 48*16kB (ME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20692kB [ 2327.588639][T18641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2327.598297][T18641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2327.607690][T18641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2327.617332][T18641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2327.626703][T18641] 432 total pagecache pages [ 2327.631239][T18641] 0 pages in swap cache [ 2327.635492][T18641] Swap cache stats: add 0, delete 0, find 0/0 [ 2327.641597][T18641] Free swap = 0kB [ 2327.645393][T18641] Total swap = 0kB [ 2327.649146][T18641] 1965979 pages RAM [ 2327.653046][T18641] 0 pages HighMem/MovableOnly [ 2327.657751][T18641] 332211 pages reserved [ 2327.661986][T18641] 0 pages cma reserved [ 2327.666097][T18641] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=9717,uid=0 [ 2327.680919][T18641] Out of memory: Killed process 9717 (syz-executor.1) total-vm:72584kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2327.699467][ T1837] oom_reaper: reaped process 9717 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2327.770021][T12211] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2327.780995][T12211] CPU: 0 PID: 12211 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2327.789368][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.799463][T12211] Call Trace: [ 2327.802833][T12211] dump_stack+0x1c9/0x220 [ 2327.807249][T12211] dump_header+0x1e7/0xd00 [ 2327.811740][T12211] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2327.817622][T12211] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2327.823835][T12211] ? ___ratelimit+0x542/0x720 [ 2327.828590][T12211] ? task_will_free_mem+0x2c9/0x810 [ 2327.833883][T12211] oom_kill_process+0x216/0x580 [ 2327.838816][T12211] out_of_memory+0x17b6/0x1ce0 [ 2327.843690][T12211] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2327.849386][T12211] alloc_pages_current+0x68d/0x9a0 [ 2327.854596][T12211] __page_cache_alloc+0x95/0x320 [ 2327.859623][T12211] pagecache_get_page+0xaf1/0x1220 [ 2327.864812][T12211] ? kmsan_get_metadata+0x4f/0x190 [ 2327.870007][T12211] filemap_fault+0x2632/0x2b70 [ 2327.874873][T12211] ext4_filemap_fault+0xbb/0x130 [ 2327.879877][T12211] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2327.885368][T12211] handle_mm_fault+0x6c4a/0x9f80 [ 2327.890493][T12211] ? filemap_fault+0x2b70/0x2b70 [ 2327.895554][T12211] do_user_addr_fault+0x905/0x1510 [ 2327.900766][T12211] ? kmsan_get_metadata+0x11e/0x190 [ 2327.906058][T12211] __do_page_fault+0x1a2/0x410 [ 2327.910910][T12211] do_page_fault+0xbb/0x500 [ 2327.915495][T12211] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2327.920965][T12211] page_fault+0x4e/0x60 [ 2327.925278][T12211] RIP: 0033:0x43b671 [ 2327.929328][T12211] Code: Bad RIP value. [ 2327.933441][T12211] RSP: 002b:000000c000051f10 EFLAGS: 00010202 [ 2327.939570][T12211] RAX: 0000000001e3f550 RBX: 000000c000042000 RCX: 0000000000000000 [ 2327.947607][T12211] RDX: 0000000001e3f550 RSI: 0000000000070f72 RDI: 000000000cf838db [ 2327.955733][T12211] RBP: 000000c000051f40 R08: 000000c000051f30 R09: 00007ffdc3bea0b8 [ 2327.965332][T12211] R10: 0000000000000000 R11: 0000000000000916 R12: 00000000004338c0 [ 2327.973360][T12211] R13: 0000000000000000 R14: 0000000000aab654 R15: 0000000000000000 [ 2327.981831][T12211] Mem-Info: [ 2327.985167][T12211] active_anon:109175 inactive_anon:206 isolated_anon:0 [ 2327.985167][T12211] active_file:17 inactive_file:23 isolated_file:0 [ 2327.985167][T12211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2327.985167][T12211] slab_reclaimable:6737 slab_unreclaimable:37786 [ 2327.985167][T12211] mapped:52252 shmem:299 pagetables:7159 bounce:0 [ 2327.985167][T12211] free:16751 free_pcp:45 free_cma:0 [ 2328.022643][T12211] Node 0 active_anon:422876kB inactive_anon:824kB active_file:64kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209008kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2328.051334][T12211] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2328.078307][T12211] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2328.108270][T12211] lowmem_reserve[]: 0 2736 3426 3426 [ 2328.113726][T12211] Node 0 DMA32 free:26864kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:403656kB inactive_anon:56kB active_file:144kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18756kB pagetables:19276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2328.145437][T12211] lowmem_reserve[]: 0 0 690 690 [ 2328.150363][T12211] Node 0 Normal free:3400kB min:11800kB low:14236kB high:16672kB reserved_highatomic:2048KB active_anon:19108kB inactive_anon:768kB active_file:76kB inactive_file:268kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5684kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 2328.182295][T12211] lowmem_reserve[]: 0 0 0 0 [ 2328.186877][T12211] Node 1 Normal free:20892kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2328.218098][T12211] lowmem_reserve[]: 0 0 0 0 [ 2328.222768][T12211] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2328.239301][T12211] Node 0 DMA32: 612*4kB (ME) 287*8kB (ME) 214*16kB (UM) 133*32kB (UM) 45*64kB (UM) 30*128kB (M) 1*256kB (M) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 22984kB [ 2328.258878][T12211] Node 0 Normal: 382*4kB (UMH) 102*8kB (UMH) 35*16kB (UMH) 18*32kB (UMH) 3*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3672kB [ 2328.273889][T12211] Node 1 Normal: 284*4kB (UME) 108*8kB (ME) 48*16kB (ME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20688kB [ 2328.291219][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2328.300907][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2328.310334][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2328.320024][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2328.329430][T12211] 352 total pagecache pages [ 2328.334054][T12211] 0 pages in swap cache [ 2328.338254][T12211] Swap cache stats: add 0, delete 0, find 0/0 [ 2328.344431][T12211] Free swap = 0kB [ 2328.348180][T12211] Total swap = 0kB [ 2328.352000][T12211] 1965979 pages RAM [ 2328.355838][T12211] 0 pages HighMem/MovableOnly [ 2328.360540][T12211] 332211 pages reserved [ 2328.364804][T12211] 0 pages cma reserved [ 2328.368911][T12211] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=6684,uid=0 [ 2328.383353][T12211] Out of memory: Killed process 6684 (syz-executor.5) total-vm:72716kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2328.448382][T12100] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2328.459157][T12100] CPU: 1 PID: 12100 Comm: rsyslogd Not tainted 5.5.0-rc1-syzkaller #0 [ 2328.467374][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2328.477830][T12100] Call Trace: [ 2328.481202][T12100] dump_stack+0x1c9/0x220 [ 2328.485628][T12100] dump_header+0x1e7/0xd00 [ 2328.490115][T12100] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2328.495993][T12100] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2328.502223][T12100] ? ___ratelimit+0x542/0x720 [ 2328.506973][T12100] ? task_will_free_mem+0x2c9/0x810 [ 2328.512278][T12100] oom_kill_process+0x216/0x580 [ 2328.517215][T12100] out_of_memory+0x17b6/0x1ce0 [ 2328.522099][T12100] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2328.527726][T12100] alloc_pages_current+0x68d/0x9a0 [ 2328.532900][T12100] __page_cache_alloc+0x95/0x320 [ 2328.537912][T12100] pagecache_get_page+0xaf1/0x1220 [ 2328.543106][T12100] ? kmsan_get_metadata+0x4f/0x190 [ 2328.548304][T12100] filemap_fault+0x2632/0x2b70 [ 2328.553168][T12100] ext4_filemap_fault+0xbb/0x130 [ 2328.558172][T12100] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2328.563530][T12100] handle_mm_fault+0x6c4a/0x9f80 [ 2328.568543][T12100] ? filemap_fault+0x2b70/0x2b70 [ 2328.573554][T12100] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2328.579473][T12100] do_user_addr_fault+0x905/0x1510 [ 2328.584676][T12100] ? kmsan_get_metadata+0x11e/0x190 [ 2328.589956][T12100] __do_page_fault+0x1a2/0x410 [ 2328.594803][T12100] do_page_fault+0xbb/0x500 [ 2328.599372][T12100] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2328.604829][T12100] page_fault+0x4e/0x60 [ 2328.609013][T12100] RIP: 0033:0x7fd4c9538579 [ 2328.613443][T12100] Code: Bad RIP value. [ 2328.617509][T12100] RSP: 002b:00007fd4c7f07da0 EFLAGS: 00010203 [ 2328.623600][T12100] RAX: 00007fd4c7f086b0 RBX: 0000000000000006 RCX: 00007fd4c973d61d [ 2328.631625][T12100] RDX: 0000000000000369 RSI: 00007fd4c973d5a0 RDI: 0000000000000006 [ 2328.639653][T12100] RBP: 00007fd4c973d5a0 R08: 00007fd4c953a620 R09: 0000000004000001 [ 2328.647672][T12100] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 2328.655691][T12100] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fd4c973c61e [ 2328.664328][T12100] Mem-Info: [ 2328.667648][T12100] active_anon:108630 inactive_anon:206 isolated_anon:0 [ 2328.667648][T12100] active_file:30 inactive_file:0 isolated_file:0 [ 2328.667648][T12100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2328.667648][T12100] slab_reclaimable:6737 slab_unreclaimable:37786 [ 2328.667648][T12100] mapped:52227 shmem:299 pagetables:7132 bounce:0 [ 2328.667648][T12100] free:16629 free_pcp:355 free_cma:0 [ 2328.704995][T12100] Node 0 active_anon:420696kB inactive_anon:824kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2328.733962][T12100] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2328.760919][T12100] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2328.790654][T12100] lowmem_reserve[]: 0 2736 3426 3426 [ 2328.796147][T12100] Node 0 DMA32 free:28624kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:401476kB inactive_anon:56kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18756kB pagetables:19268kB bounce:0kB free_pcp:1172kB local_pcp:232kB free_cma:0kB [ 2328.828358][T12100] lowmem_reserve[]: 0 0 690 690 [ 2328.833409][T12100] Node 0 Normal free:3416kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19108kB inactive_anon:768kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5684kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2328.864958][T12100] lowmem_reserve[]: 0 0 0 0 [ 2328.869608][T12100] Node 1 Normal free:20688kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2328.901203][T12100] lowmem_reserve[]: 0 0 0 0 [ 2328.905913][T12100] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2328.922483][T12100] Node 0 DMA32: 613*4kB (UME) 288*8kB (UME) 214*16kB (UM) 133*32kB (UM) 44*64kB (M) 31*128kB (UM) 2*256kB (UM) 1*512kB (U) 0*1024kB 2*2048kB (M) 0*4096kB = 24340kB [ 2328.939226][T12100] Node 0 Normal: 382*4kB (UMH) 102*8kB (UMH) 35*16kB (UMH) 18*32kB (UMH) 3*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3672kB [ 2328.954308][T12100] Node 1 Normal: 284*4kB (UME) 108*8kB (ME) 48*16kB (ME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20688kB [ 2328.972001][T12100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2328.983155][T12100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2328.992554][T12100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2329.002197][T12100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2329.011513][T12100] 329 total pagecache pages [ 2329.016126][T12100] 0 pages in swap cache [ 2329.026735][T12100] Swap cache stats: add 0, delete 0, find 0/0 [ 2329.032895][T12100] Free swap = 0kB [ 2329.036644][T12100] Total swap = 0kB [ 2329.040393][T12100] 1965979 pages RAM [ 2329.044295][T12100] 0 pages HighMem/MovableOnly [ 2329.048999][T12100] 332211 pages reserved [ 2329.053243][T12100] 0 pages cma reserved [ 2329.057348][T12100] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=6580,uid=0 [ 2329.071795][T12100] Out of memory: Killed process 6580 (syz-executor.0) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2329.090589][ T1837] oom_reaper: reaped process 6580 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2329.144858][T12215] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2329.156163][T12215] CPU: 1 PID: 12215 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2329.164550][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2329.174647][T12215] Call Trace: [ 2329.178021][T12215] dump_stack+0x1c9/0x220 [ 2329.182441][T12215] dump_header+0x1e7/0xd00 [ 2329.186936][T12215] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2329.192827][T12215] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2329.199073][T12215] ? ___ratelimit+0x542/0x720 [ 2329.203829][T12215] ? task_will_free_mem+0x2c9/0x810 [ 2329.209130][T12215] oom_kill_process+0x216/0x580 [ 2329.214075][T12215] out_of_memory+0x17b6/0x1ce0 [ 2329.218969][T12215] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2329.224681][T12215] alloc_pages_current+0x68d/0x9a0 [ 2329.229876][T12215] __page_cache_alloc+0x95/0x320 [ 2329.234891][T12215] pagecache_get_page+0xaf1/0x1220 [ 2329.240079][T12215] ? kmsan_get_metadata+0x4f/0x190 [ 2329.245279][T12215] filemap_fault+0x2632/0x2b70 [ 2329.250150][T12215] ext4_filemap_fault+0xbb/0x130 [ 2329.255172][T12215] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2329.260535][T12215] handle_mm_fault+0x6c4a/0x9f80 [ 2329.265554][T12215] ? filemap_fault+0x2b70/0x2b70 [ 2329.270614][T12215] do_user_addr_fault+0x905/0x1510 [ 2329.275815][T12215] ? kmsan_get_metadata+0x11e/0x190 [ 2329.281088][T12215] __do_page_fault+0x1a2/0x410 [ 2329.285944][T12215] do_page_fault+0xbb/0x500 [ 2329.290528][T12215] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2329.296088][T12215] page_fault+0x4e/0x60 [ 2329.300290][T12215] RIP: 0033:0x460c23 [ 2329.304247][T12215] Code: Bad RIP value. [ 2329.308476][T12215] RSP: 002b:000000c00003a6a0 EFLAGS: 00010202 [ 2329.314701][T12215] RAX: ffffffffffffff92 RBX: 000000003b92eee5 RCX: 0000000000460c23 [ 2329.322729][T12215] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001e26a40 [ 2329.330755][T12215] RBP: 000000c00003a6e8 R08: 0000000000000000 R09: 0000000000000000 [ 2329.338788][T12215] R10: 000000c00003a6d8 R11: 0000000000000202 R12: 00000229d9337455 [ 2329.346812][T12215] R13: 0000000000000001 R14: 00000229d9337455 R15: 0000000000000dd0 [ 2329.355236][T12215] Mem-Info: [ 2329.358494][T12215] active_anon:108091 inactive_anon:206 isolated_anon:0 [ 2329.358494][T12215] active_file:13 inactive_file:16 isolated_file:0 [ 2329.358494][T12215] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2329.358494][T12215] slab_reclaimable:6737 slab_unreclaimable:37786 [ 2329.358494][T12215] mapped:52226 shmem:299 pagetables:7093 bounce:0 [ 2329.358494][T12215] free:14953 free_pcp:282 free_cma:0 [ 2329.395951][T12215] Node 0 active_anon:418540kB inactive_anon:824kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2329.424599][T12215] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2329.451570][T12215] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2329.481113][T12215] lowmem_reserve[]: 0 2736 3426 3426 [ 2329.486626][T12215] Node 0 DMA32 free:21916kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:399320kB inactive_anon:56kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18632kB pagetables:19112kB bounce:0kB free_pcp:628kB local_pcp:232kB free_cma:0kB [ 2329.512607][ T3990] syz-executor.3: vmalloc: allocation failure, allocated 1124941824 of 2147491840 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2329.518703][T12215] lowmem_reserve[]: 0 0 690 690 [ 2329.535573][ T3990] CPU: 0 PID: 3990 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2329.540444][T12215] Node 0 Normal free:3420kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19108kB inactive_anon:768kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5684kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2329.548999][ T3990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2329.549015][ T3990] Call Trace: [ 2329.549085][ T3990] dump_stack+0x1c9/0x220 [ 2329.549184][ T3990] warn_alloc+0x4cc/0x680 [ 2329.580580][T12215] lowmem_reserve[]: 0 0 0 0 [ 2329.590608][ T3990] ? balance_callback+0x48/0x260 [ 2329.590684][ T3990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2329.590760][ T3990] __vmalloc_node_range+0xdc0/0x1270 [ 2329.594092][T12215] Node 1 Normal free:20688kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2329.598417][ T3990] vzalloc+0x106/0x120 [ 2329.598484][ T3990] ? ip_set_alloc+0x10a/0x140 [ 2329.602884][T12215] lowmem_reserve[]: 0 0 0 0 [ 2329.607327][ T3990] ? ip_set_alloc+0x10a/0x140 [ 2329.607398][ T3990] ip_set_alloc+0x10a/0x140 [ 2329.612393][T12215] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2329.618167][ T3990] hash_netnet_create+0x59c/0xf80 [ 2329.618238][ T3990] ? kmsan_get_metadata+0x20/0x190 [ 2329.623576][T12215] Node 0 DMA32: 613*4kB (UME) 287*8kB (ME) 213*16kB (M) 132*32kB (M) 45*64kB (UM) 30*128kB (M) 1*256kB (M) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 21916kB [ 2329.654809][ T3990] ? hash_netiface6_expire+0x1070/0x1070 [ 2329.654858][ T3990] ip_set_create+0xa19/0x1940 [ 2329.654962][ T3990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2329.659006][T12215] Node 0 Normal: 319*4kB (UMH) 102*8kB (UMH) 35*16kB (UMH) 18*32kB (UMH) 3*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3420kB [ 2329.663673][ T3990] ? ip_set_protocol+0x840/0x840 [ 2329.663728][ T3990] nfnetlink_rcv_msg+0xb7f/0xce0 [ 2329.663818][ T3990] ? kmsan_get_metadata+0x4f/0x190 [ 2329.668306][T12215] Node 1 Normal: 284*4kB (UME) 108*8kB (ME) 48*16kB (ME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20688kB [ 2329.672970][ T3990] ? kmsan_get_metadata+0x4f/0x190 [ 2329.673021][ T3990] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2329.673087][ T3990] ? kmsan_get_metadata+0x11e/0x190 [ 2329.677624][T12215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2329.693733][ T3990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2329.693796][ T3990] netlink_rcv_skb+0x431/0x620 [ 2329.693863][ T3990] ? nfnetlink_bind+0x1d0/0x1d0 [ 2329.698912][T12215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2329.704008][ T3990] nfnetlink_rcv+0x3bb/0x39e0 [ 2329.704074][ T3990] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2329.704159][ T3990] ? __se_sys_sendmsg+0x97/0xb0 [ 2329.720167][T12215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2329.725749][ T3990] ? __x64_sys_sendmsg+0x4a/0x70 [ 2329.725806][ T3990] ? kmsan_get_metadata+0x11e/0x190 [ 2329.725869][ T3990] ? kmsan_get_metadata+0x4f/0x190 [ 2329.730582][T12215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2329.736350][ T3990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2329.736403][ T3990] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2329.736475][ T3990] ? rhashtable_jhash2+0x3a9/0x4d0 [ 2329.751181][T12215] 328 total pagecache pages [ 2329.756084][ T3990] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2329.756131][ T3990] ? kmsan_get_metadata+0x11e/0x190 [ 2329.756195][ T3990] ? kmsan_get_metadata+0x4f/0x190 [ 2329.761150][T12215] 0 pages in swap cache [ 2329.766246][ T3990] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2329.766300][ T3990] ? kmsan_get_metadata+0x11e/0x190 [ 2329.766378][ T3990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2329.783349][T12215] Swap cache stats: add 0, delete 0, find 0/0 [ 2329.788413][ T3990] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2329.788465][ T3990] ? netlink_deliver_tap+0xca/0xeb0 [ 2329.788532][ T3990] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2329.794202][T12215] Free swap = 0kB [ 2329.799366][ T3990] ? __netlink_lookup+0x8fd/0x990 [ 2329.799435][ T3990] ? kmsan_get_metadata+0x11e/0x190 [ 2329.809468][T12215] Total swap = 0kB [ 2329.815209][ T3990] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2329.815262][ T3990] ? kmsan_get_metadata+0x11e/0x190 [ 2329.815331][ T3990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2329.820095][T12215] 1965979 pages RAM [ 2329.824949][ T3990] netlink_unicast+0xfa0/0x1100 [ 2329.825010][ T3990] ? nfnetlink_net_exit_batch+0x290/0x290 [ 2329.825090][ T3990] netlink_sendmsg+0x11f0/0x1480 [ 2329.834400][T12215] 0 pages HighMem/MovableOnly [ 2329.839072][ T3990] ? netlink_getsockopt+0x1430/0x1430 [ 2329.839152][ T3990] ____sys_sendmsg+0x1362/0x13f0 [ 2329.846383][T12215] 332211 pages reserved [ 2329.851226][ T3990] __sys_sendmsg+0x4f0/0x5e0 [ 2329.851300][ T3990] ? kmsan_copy_to_user+0x81/0x90 [ 2329.860882][T12215] 0 pages cma reserved [ 2329.865775][ T3990] ? _copy_to_user+0x168/0x1f0 [ 2329.865824][ T3990] ? kmsan_get_metadata+0x11e/0x190 [ 2329.865890][ T3990] ? kmsan_get_metadata+0x11e/0x190 [ 2329.871114][T12215] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=6545,uid=0 [ 2329.876220][ T3990] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2329.876273][ T3990] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2329.876346][ T3990] ? prepare_exit_to_usermode+0x1ca/0x530 [ 2329.885852][T12215] Out of memory: Killed process 6545 (syz-executor.0) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2329.891527][ T3990] __se_sys_sendmsg+0x97/0xb0 [ 2329.891609][ T3990] __x64_sys_sendmsg+0x4a/0x70 [ 2329.953825][T18641] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2329.956703][ T3990] do_syscall_64+0xb6/0x160 [ 2329.956786][ T3990] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2330.149339][ T3990] RIP: 0033:0x45af49 [ 2330.153269][ T3990] Code: Bad RIP value. [ 2330.157356][ T3990] RSP: 002b:00007f90621a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2330.165803][ T3990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 2330.173805][ T3990] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 2330.181819][ T3990] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2330.189852][ T3990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90621a86d4 [ 2330.199780][ T3990] R13: 00000000004c9d34 R14: 00000000004e2d78 R15: 00000000ffffffff [ 2330.207827][T18641] CPU: 1 PID: 18641 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2330.208719][ T3990] Mem-Info: [ 2330.216198][T18641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2330.216213][T18641] Call Trace: [ 2330.216283][T18641] dump_stack+0x1c9/0x220 [ 2330.216361][T18641] dump_header+0x1e7/0xd00 [ 2330.219529][ T3990] active_anon:107554 inactive_anon:206 isolated_anon:0 [ 2330.219529][ T3990] active_file:13 inactive_file:16 isolated_file:0 [ 2330.219529][ T3990] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2330.219529][ T3990] slab_reclaimable:6737 slab_unreclaimable:37786 [ 2330.219529][ T3990] mapped:52226 shmem:299 pagetables:7056 bounce:0 [ 2330.219529][ T3990] free:16489 free_pcp:458 free_cma:0 [ 2330.229535][T18641] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2330.229588][T18641] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2330.229651][T18641] ? ___ratelimit+0x542/0x720 [ 2330.233069][ T3990] Node 0 active_anon:416392kB inactive_anon:824kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2330.237287][T18641] ? task_will_free_mem+0x2c9/0x810 [ 2330.241775][ T3990] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2330.278815][T18641] oom_kill_process+0x216/0x580 [ 2330.278879][T18641] out_of_memory+0x17b6/0x1ce0 [ 2330.278990][T18641] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2330.284826][ T3990] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2330.291002][T18641] alloc_pages_current+0x68d/0x9a0 [ 2330.295670][ T3990] lowmem_reserve[]: 0 2736 3426 3426 [ 2330.323956][T18641] __page_cache_alloc+0x95/0x320 [ 2330.324014][T18641] pagecache_get_page+0xaf1/0x1220 [ 2330.324075][T18641] ? kmsan_get_metadata+0x4f/0x190 [ 2330.324129][T18641] filemap_fault+0x2632/0x2b70 [ 2330.324211][T18641] ext4_filemap_fault+0xbb/0x130 [ 2330.324261][T18641] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2330.324323][T18641] handle_mm_fault+0x6c4a/0x9f80 [ 2330.324378][T18641] ? filemap_fault+0x2b70/0x2b70 [ 2330.324476][T18641] do_user_addr_fault+0x905/0x1510 [ 2330.324543][T18641] ? kmsan_get_metadata+0x11e/0x190 [ 2330.324602][T18641] __do_page_fault+0x1a2/0x410 [ 2330.324658][T18641] do_page_fault+0xbb/0x500 [ 2330.324710][T18641] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2330.324776][T18641] page_fault+0x4e/0x60 [ 2330.324806][T18641] RIP: 0033:0x42c854 [ 2330.324846][T18641] Code: Bad RIP value. [ 2330.324870][T18641] RSP: 002b:000000c0000416a8 EFLAGS: 00010202 [ 2330.324908][T18641] RAX: ffffffffffffff92 RBX: 000000003b97c4da RCX: 0000000000460c23 [ 2330.324935][T18641] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001e269c0 [ 2330.324962][T18641] RBP: 000000c0000416e8 R08: 0000000000000000 R09: 0000000000000000 [ 2330.324991][T18641] R10: 000000c0000416d8 R11: 0000000000000202 R12: 00000229e89169cb [ 2330.325018][T18641] R13: 0000000000000001 R14: 00000229e89169cb R15: 0000000000000000 [ 2330.328300][T18641] Mem-Info: [ 2330.332018][ T3990] Node 0 DMA32 free:28060kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:397216kB inactive_anon:56kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18632kB pagetables:18964kB bounce:0kB free_pcp:1200kB local_pcp:396kB free_cma:0kB [ 2330.358885][T18641] active_anon:107554 inactive_anon:206 isolated_anon:0 [ 2330.358885][T18641] active_file:13 inactive_file:16 isolated_file:0 [ 2330.358885][T18641] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2330.358885][T18641] slab_reclaimable:6737 slab_unreclaimable:37786 [ 2330.358885][T18641] mapped:52226 shmem:299 pagetables:7056 bounce:0 [ 2330.358885][T18641] free:16489 free_pcp:458 free_cma:0 [ 2330.358998][T18641] Node 0 active_anon:416392kB inactive_anon:824kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2330.363832][ T3990] lowmem_reserve[]: 0 0 690 690 [ 2330.368672][T18641] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2330.374223][ T3990] Node 0 Normal free:3420kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19108kB inactive_anon:768kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5684kB bounce:0kB free_pcp:384kB local_pcp:252kB free_cma:0kB [ 2330.403448][T18641] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2330.403582][T18641] lowmem_reserve[]: 0 2736 3426 3426 [ 2330.408713][ T3990] lowmem_reserve[]: 0 0 0 0 [ 2330.414048][T18641] Node 0 DMA32 free:28060kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:397216kB inactive_anon:56kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18632kB pagetables:18964kB bounce:0kB free_pcp:1200kB local_pcp:804kB free_cma:0kB [ 2330.414187][T18641] lowmem_reserve[]: 0 0 690 690 [ 2330.419136][ T3990] Node 1 Normal free:20688kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2330.424285][T18641] Node 0 Normal free:3420kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19108kB inactive_anon:768kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5684kB bounce:0kB free_pcp:384kB local_pcp:132kB free_cma:0kB [ 2330.424418][T18641] lowmem_reserve[]: 0 0 0 0 [ 2330.429531][ T3990] lowmem_reserve[]: 0 0 0 0 [ 2330.434447][T18641] Node 1 Normal free:20688kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2330.434584][T18641] lowmem_reserve[]: 0 0 0 0 [ 2330.439644][ T3990] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2330.444979][T18641] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2330.450032][ T3990] Node 0 DMA32: 613*4kB (UME) 287*8kB (ME) 213*16kB (M) 132*32kB (M) 45*64kB (UM) 30*128kB (M) 1*256kB (M) 1*512kB (U) 0*1024kB 4*2048kB (UM) 0*4096kB = 28060kB [ 2330.455025][T18641] Node 0 DMA32: 613*4kB (UME) 287*8kB (ME) 213*16kB (M) 132*32kB (M) 45*64kB (UM) 30*128kB (M) 1*256kB (M) 1*512kB (U) 0*1024kB 4*2048kB (UM) 0*4096kB = 28060kB [ 2330.460203][ T3990] Node 0 Normal: 319*4kB (UMH) 102*8kB (UMH) 35*16kB (UMH) 18*32kB (UMH) 3*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3420kB [ 2330.465434][T18641] Node 0 Normal: 319*4kB (UMH) 102*8kB (UMH) 35*16kB (UMH) 18*32kB (UMH) 3*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3420kB [ 2330.470262][ T3990] Node 1 Normal: 284*4kB (UME) 108*8kB (ME) 48*16kB (ME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20688kB [ 2330.474805][T18641] Node 1 Normal: 284*4kB (UME) 108*8kB (ME) 48*16kB (ME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20688kB [ 2330.480258][ T3990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2330.484450][T18641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2330.484502][T18641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2330.488402][ T3990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2330.492861][T18641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2330.492914][T18641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2330.498986][ T3990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2330.506988][T18641] 328 total pagecache pages [ 2330.507007][T18641] 0 pages in swap cache [ 2330.507067][T18641] Swap cache stats: add 0, delete 0, find 0/0 [ 2330.515119][ T3990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2330.523101][T18641] Free swap = 0kB [ 2330.523115][T18641] Total swap = 0kB [ 2330.523132][T18641] 1965979 pages RAM [ 2330.523169][T18641] 0 pages HighMem/MovableOnly [ 2330.531153][ T3990] 328 total pagecache pages [ 2330.539159][T18641] 332211 pages reserved [ 2330.539173][T18641] 0 pages cma reserved [ 2330.539196][T18641] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=5773,uid=0 [ 2330.542421][ T3990] 0 pages in swap cache [ 2330.574409][T18641] Out of memory: Killed process 5773 (syz-executor.1) total-vm:72584kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2330.611468][ T3990] Swap cache stats: add 0, delete 0, find 0/0 [ 2330.643809][ T1837] oom_reaper: reaped process 5773 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2330.644765][ T3990] Free swap = 0kB [ 2330.804453][T12211] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2330.810474][ T3990] Total swap = 0kB [ 2330.842608][T12211] CPU: 1 PID: 12211 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2330.846771][ T3990] 1965979 pages RAM [ 2330.851305][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2330.882611][ T3990] 0 pages HighMem/MovableOnly [ 2330.887082][T12211] Call Trace: [ 2330.903285][ T3990] 332211 pages reserved [ 2330.919409][T12211] dump_stack+0x1c9/0x220 [ 2330.919507][T12211] dump_header+0x1e7/0xd00 [ 2330.935583][ T3990] 0 pages cma reserved [ 2330.951613][T12211] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2330.951662][T12211] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2330.951733][T12211] ? ___ratelimit+0x542/0x720 [ 2331.268791][T12211] ? task_will_free_mem+0x2c9/0x810 [ 2331.274053][T12211] oom_kill_process+0x216/0x580 [ 2331.278953][T12211] out_of_memory+0x17b6/0x1ce0 [ 2331.283791][T12211] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2331.289432][T12211] alloc_pages_current+0x68d/0x9a0 [ 2331.294591][T12211] __page_cache_alloc+0x95/0x320 [ 2331.299567][T12211] pagecache_get_page+0xaf1/0x1220 [ 2331.304718][T12211] ? kmsan_get_metadata+0x4f/0x190 [ 2331.309866][T12211] filemap_fault+0x2632/0x2b70 [ 2331.314698][T12211] ext4_filemap_fault+0xbb/0x130 [ 2331.319665][T12211] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2331.324987][T12211] handle_mm_fault+0x6c4a/0x9f80 [ 2331.329959][T12211] ? filemap_fault+0x2b70/0x2b70 [ 2331.334965][T12211] do_user_addr_fault+0x905/0x1510 [ 2331.340131][T12211] ? kmsan_get_metadata+0x11e/0x190 [ 2331.345370][T12211] __do_page_fault+0x1a2/0x410 [ 2331.350175][T12211] do_page_fault+0xbb/0x500 [ 2331.354708][T12211] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2331.360125][T12211] page_fault+0x4e/0x60 [ 2331.364296][T12211] RIP: 0033:0x43b671 [ 2331.368227][T12211] Code: Bad RIP value. [ 2331.372307][T12211] RSP: 002b:000000c000051f10 EFLAGS: 00010202 [ 2331.378393][T12211] RAX: 0000000001e3f550 RBX: 000000c000042000 RCX: 0000000000000000 [ 2331.386402][T12211] RDX: 0000000001e3f550 RSI: 0000000000070f72 RDI: 000000000cf838db [ 2331.394438][T12211] RBP: 000000c000051f40 R08: 000000c000051f30 R09: 00007ffdc3bea0b8 [ 2331.402436][T12211] R10: 0000000000000000 R11: 0000000000000916 R12: 00000000004338c0 [ 2331.410432][T12211] R13: 0000000000000000 R14: 0000000000aab654 R15: 0000000000000000 [ 2331.418930][T12211] Mem-Info: [ 2331.422318][T12211] active_anon:107002 inactive_anon:206 isolated_anon:0 [ 2331.422318][T12211] active_file:28 inactive_file:1 isolated_file:0 [ 2331.422318][T12211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2331.422318][T12211] slab_reclaimable:6737 slab_unreclaimable:37786 [ 2331.422318][T12211] mapped:52226 shmem:299 pagetables:7054 bounce:0 [ 2331.422318][T12211] free:18025 free_pcp:595 free_cma:0 [ 2331.459661][T12211] Node 0 active_anon:414184kB inactive_anon:824kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 337920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2331.488261][T12211] Node 1 active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2331.515227][T12211] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2331.544727][T12211] lowmem_reserve[]: 0 2736 3426 3426 [ 2331.550161][T12211] Node 0 DMA32 free:34204kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:395020kB inactive_anon:56kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18572kB pagetables:18808kB bounce:0kB free_pcp:2096kB local_pcp:1124kB free_cma:0kB [ 2331.582258][T12211] lowmem_reserve[]: 0 0 690 690 [ 2331.587248][T12211] Node 0 Normal free:3420kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19052kB inactive_anon:768kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:15944kB pagetables:5684kB bounce:0kB free_pcp:612kB local_pcp:360kB free_cma:0kB [ 2331.619584][T12211] lowmem_reserve[]: 0 0 0 0 [ 2331.624281][T12211] Node 1 Normal free:20688kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2331.655856][T12211] lowmem_reserve[]: 0 0 0 0 [ 2331.660491][T12211] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2331.677043][T12211] Node 0 DMA32: 613*4kB (UME) 287*8kB (ME) 213*16kB (M) 132*32kB (M) 45*64kB (UM) 30*128kB (M) 1*256kB (M) 1*512kB (U) 0*1024kB 7*2048kB (UM) 0*4096kB = 34204kB [ 2331.696244][T12211] Node 0 Normal: 319*4kB (UMH) 102*8kB (UMH) 35*16kB (UMH) 18*32kB (UMH) 3*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3420kB [ 2331.711293][T12211] Node 1 Normal: 284*4kB (UME) 108*8kB (ME) 48*16kB (ME) 28*32kB (UME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20688kB [ 2331.728709][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2331.738438][T12211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2331.747916][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2331.757630][T12211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2331.767133][T12211] 328 total pagecache pages [ 2331.771738][T12211] 0 pages in swap cache [ 2331.776057][T12211] Swap cache stats: add 0, delete 0, find 0/0 [ 2331.782289][T12211] Free swap = 0kB [ 2331.786106][T12211] Total swap = 0kB [ 2331.789918][T12211] 1965979 pages RAM [ 2331.793857][T12211] 0 pages HighMem/MovableOnly [ 2331.798629][T12211] 332211 pages reserved [ 2331.802940][T12211] 0 pages cma reserved [ 2331.807121][T12211] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=3490,uid=0 [ 2331.822151][T12211] Out of memory: Killed process 3490 (syz-executor.1) total-vm:72584kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 13:32:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) chroot(&(0x7f0000000180)='./file0\x00') 13:32:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/49, 0x18) getdents(r1, &(0x7f00000000c0)=""/41, 0x29) 13:32:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/49, 0x18) getdents(r1, &(0x7f00000000c0)=""/41, 0x29) 13:32:05 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000240)="3080", 0x2, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7ff, 0x20103) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r3) gettid() r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) sendfile(r4, r4, 0x0, 0x24000000) 13:32:05 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x5, 0x1, 0x6c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:32:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/49, 0x18) getdents(r1, &(0x7f00000000c0)=""/41, 0x29) 13:32:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/49, 0x18) getdents(r1, &(0x7f00000000c0)=""/41, 0x29) 13:32:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 13:32:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) chroot(&(0x7f0000000180)='./file0\x00') 13:32:06 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001380)={0x2, @pix_mp}) 13:32:06 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x5, 0x1, 0x6c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:32:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x100000000000002) 13:32:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r4, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0xa4000960) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)) 13:32:06 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001380)={0x2, @pix_mp}) 13:32:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f000047b000/0x4000)=nil, 0x4000, 0x3) 13:32:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000401ff8fdbff0388c8f05d69d51dee9e"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x20a, 0x200002, &(0x7f0000000c40)={0x77359400}) 13:32:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x100000000000002) 13:32:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r4, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0xa4000960) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)) 13:32:07 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001380)={0x2, @pix_mp}) [ 2345.137562][ T1] init invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2345.148067][ T1] CPU: 0 PID: 1 Comm: init Not tainted 5.5.0-rc1-syzkaller #0 [ 2345.155891][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2345.166048][ T1] Call Trace: [ 2345.169475][ T1] dump_stack+0x1c9/0x220 [ 2345.173946][ T1] dump_header+0x1e7/0xd00 [ 2345.178493][ T1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2345.184427][ T1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2345.190705][ T1] ? ___ratelimit+0x542/0x720 [ 2345.195512][ T1] ? task_will_free_mem+0x2c9/0x810 [ 2345.200852][ T1] oom_kill_process+0x216/0x580 [ 2345.205850][ T1] out_of_memory+0x17b6/0x1ce0 [ 2345.210785][ T1] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2345.216551][ T1] alloc_pages_current+0x68d/0x9a0 [ 2345.221804][ T1] __page_cache_alloc+0x95/0x320 [ 2345.226875][ T1] pagecache_get_page+0xaf1/0x1220 [ 2345.232126][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2345.237374][ T1] filemap_fault+0x2632/0x2b70 [ 2345.242291][ T1] ext4_filemap_fault+0xbb/0x130 [ 2345.247364][ T1] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2345.252789][ T1] handle_mm_fault+0x6c4a/0x9f80 [ 2345.257863][ T1] ? filemap_fault+0x2b70/0x2b70 [ 2345.262928][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2345.268218][ T1] do_user_addr_fault+0x905/0x1510 [ 2345.273484][ T1] ? kmsan_get_metadata+0x11e/0x190 [ 2345.278832][ T1] __do_page_fault+0x1a2/0x410 [ 2345.283744][ T1] do_page_fault+0xbb/0x500 [ 2345.288631][ T1] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2345.294229][ T1] page_fault+0x4e/0x60 [ 2345.298488][ T1] RIP: 0033:0x404d65 [ 2345.302500][ T1] Code: Bad RIP value. [ 2345.306788][ T1] RSP: 002b:00007fff6637e040 EFLAGS: 00010217 [ 2345.312974][ T1] RAX: 0000000000000000 RBX: 00007fff6637e1e0 RCX: 00007f9e7fdd9dd3 [ 2345.321061][ T1] RDX: 0000000000000000 RSI: 00007fff6637e390 RDI: 000000000000000b [ 2345.329144][ T1] RBP: 00007fff6637e390 R08: 00007fff6637e410 R09: 0000000000000001 [ 2345.337226][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2345.345312][ T1] R13: 00007fff6637e770 R14: 0000000000000000 R15: 0000000000000000 [ 2345.353888][ T1] Mem-Info: [ 2345.357189][ T1] active_anon:106998 inactive_anon:206 isolated_anon:0 [ 2345.357189][ T1] active_file:11 inactive_file:2 isolated_file:0 [ 2345.357189][ T1] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2345.357189][ T1] slab_reclaimable:6728 slab_unreclaimable:37787 [ 2345.357189][ T1] mapped:52226 shmem:299 pagetables:7004 bounce:0 [ 2345.357189][ T1] free:25872 free_pcp:126 free_cma:0 [ 2345.394652][ T1] Node 0 active_anon:414164kB inactive_anon:824kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 337920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2345.423272][ T1] Node 1 active_anon:13828kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2345.450313][ T1] Node 0 DMA free:13900kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2345.479863][ T1] lowmem_reserve[]: 0 2736 3426 3426 [ 2345.485362][ T1] Node 0 DMA32 free:41016kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:394968kB inactive_anon:60kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18436kB pagetables:18700kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2345.517279][ T1] lowmem_reserve[]: 0 0 690 690 [ 2345.522358][ T1] Node 0 Normal free:7276kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19084kB inactive_anon:764kB active_file:24kB inactive_file:16kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5740kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2345.554304][ T1] lowmem_reserve[]: 0 0 0 0 [ 2345.558931][ T1] Node 1 Normal free:41296kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2345.590155][ T1] lowmem_reserve[]: 0 0 0 0 [ 2345.594850][ T1] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13900kB [ 2345.611392][ T1] Node 0 DMA32: 593*4kB (UME) 302*8kB (UME) 214*16kB (UM) 143*32kB (UM) 49*64kB (UM) 30*128kB (M) 2*256kB (M) 1*512kB (U) 0*1024kB 2*2048kB (M) 4*4096kB (UM) = 41268kB [ 2345.628526][ T1] Node 0 Normal: 632*4kB (UMEH) 223*8kB (UMEH) 51*16kB (MEH) 35*32kB (UMH) 12*64kB (MEH) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7528kB [ 2345.644359][ T1] Node 1 Normal: 284*4kB (UME) 106*8kB (ME) 49*16kB (UME) 28*32kB (UME) 4*64kB (ME) 4*128kB (ME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41296kB [ 2345.662189][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2345.671844][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2345.681318][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2345.691059][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2345.700500][ T1] 312 total pagecache pages [ 2345.705150][ T1] 0 pages in swap cache [ 2345.709405][ T1] Swap cache stats: add 0, delete 0, find 0/0 [ 2345.715634][ T1] Free swap = 0kB [ 2345.719441][ T1] Total swap = 0kB [ 2345.723358][ T1] 1965979 pages RAM [ 2345.727243][ T1] 0 pages HighMem/MovableOnly [ 2345.732056][ T1] 332211 pages reserved [ 2345.736291][ T1] 0 pages cma reserved [ 2345.740464][ T1] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=3435,uid=0 [ 2345.755347][ T1] Out of memory: Killed process 3435 (syz-executor.1) total-vm:72584kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2345.773919][ T1837] oom_reaper: reaped process 3435 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2347.123823][ T1] init invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2347.134296][ T1] CPU: 0 PID: 1 Comm: init Not tainted 5.5.0-rc1-syzkaller #0 [ 2347.141870][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2347.152021][ T1] Call Trace: [ 2347.155476][ T1] dump_stack+0x1c9/0x220 [ 2347.159945][ T1] dump_header+0x1e7/0xd00 [ 2347.164492][ T1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2347.170540][ T1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2347.176826][ T1] ? ___ratelimit+0x542/0x720 [ 2347.181644][ T1] ? task_will_free_mem+0x2c9/0x810 [ 2347.186992][ T1] oom_kill_process+0x216/0x580 [ 2347.191999][ T1] out_of_memory+0x17b6/0x1ce0 [ 2347.196932][ T1] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2347.202694][ T1] alloc_pages_current+0x68d/0x9a0 [ 2347.207945][ T1] __page_cache_alloc+0x95/0x320 [ 2347.213023][ T1] pagecache_get_page+0xaf1/0x1220 [ 2347.218268][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2347.223511][ T1] filemap_fault+0x2632/0x2b70 [ 2347.228432][ T1] ext4_filemap_fault+0xbb/0x130 [ 2347.233497][ T1] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2347.238912][ T1] handle_mm_fault+0x6c4a/0x9f80 [ 2347.243994][ T1] ? filemap_fault+0x2b70/0x2b70 [ 2347.249058][ T1] ? kmsan_get_metadata+0x4f/0x190 [ 2347.254347][ T1] do_user_addr_fault+0x905/0x1510 [ 2347.259611][ T1] ? kmsan_get_metadata+0x11e/0x190 [ 2347.264948][ T1] __do_page_fault+0x1a2/0x410 [ 2347.269851][ T1] do_page_fault+0xbb/0x500 [ 2347.274484][ T1] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2347.280000][ T1] page_fault+0x4e/0x60 [ 2347.284251][ T1] RIP: 0033:0x404d65 [ 2347.288253][ T1] Code: Bad RIP value. [ 2347.292419][ T1] RSP: 002b:00007fff6637e040 EFLAGS: 00010217 [ 2347.298688][ T1] RAX: 0000000000000000 RBX: 00007fff6637e1e0 RCX: 00007f9e7fdd9dd3 [ 2347.306767][ T1] RDX: 0000000000000000 RSI: 00007fff6637e390 RDI: 000000000000000b [ 2347.314850][ T1] RBP: 00007fff6637e390 R08: 00007fff6637e410 R09: 0000000000000001 [ 2347.322929][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2347.331006][ T1] R13: 00007fff6637e770 R14: 0000000000000000 R15: 0000000000000000 [ 2347.339427][ T1] Mem-Info: [ 2347.342799][ T1] active_anon:106457 inactive_anon:206 isolated_anon:0 [ 2347.342799][ T1] active_file:4 inactive_file:9 isolated_file:0 [ 2347.342799][ T1] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2347.342799][ T1] slab_reclaimable:6728 slab_unreclaimable:37787 [ 2347.342799][ T1] mapped:52226 shmem:299 pagetables:6978 bounce:0 [ 2347.342799][ T1] free:25056 free_pcp:141 free_cma:0 [ 2347.379996][ T1] Node 0 active_anon:412000kB inactive_anon:824kB active_file:12kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2347.408784][ T1] Node 1 active_anon:13828kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2347.436011][ T1] Node 0 DMA free:13900kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2347.465590][ T1] lowmem_reserve[]: 0 2736 3426 3426 [ 2347.471016][ T1] Node 0 DMA32 free:41412kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:392816kB inactive_anon:60kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18372kB pagetables:18596kB bounce:0kB free_pcp:276kB local_pcp:28kB free_cma:0kB [ 2347.502871][ T1] lowmem_reserve[]: 0 0 690 690 [ 2347.507851][ T1] Node 0 Normal free:3616kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19072kB inactive_anon:764kB active_file:12kB inactive_file:28kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5740kB bounce:0kB free_pcp:288kB local_pcp:32kB free_cma:0kB [ 2347.539718][ T1] lowmem_reserve[]: 0 0 0 0 [ 2347.544442][ T1] Node 1 Normal free:41296kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2347.575668][ T1] lowmem_reserve[]: 0 0 0 0 [ 2347.580304][ T1] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13900kB [ 2347.596952][ T1] Node 0 DMA32: 651*4kB (UME) 297*8kB (ME) 217*16kB (UM) 142*32kB (M) 50*64kB (UM) 31*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 4*2048kB (UM) 3*4096kB (UM) = 41412kB [ 2347.613819][ T1] Node 0 Normal: 294*4kB (MEH) 101*8kB (UMEH) 28*16kB (UMH) 21*32kB (UMEH) 6*64kB (UH) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3616kB [ 2347.629394][ T1] Node 1 Normal: 284*4kB (UME) 106*8kB (ME) 49*16kB (UME) 28*32kB (UME) 4*64kB (ME) 4*128kB (ME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41296kB [ 2347.647222][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2347.656950][ T1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2347.666416][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2347.676148][ T1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2347.685607][ T1] 312 total pagecache pages [ 2347.690199][ T1] 0 pages in swap cache [ 2347.694553][ T1] Swap cache stats: add 0, delete 0, find 0/0 [ 2347.700703][ T1] Free swap = 0kB [ 2347.704585][ T1] Total swap = 0kB [ 2347.708393][ T1] 1965979 pages RAM [ 2347.712460][ T1] 0 pages HighMem/MovableOnly [ 2347.717226][ T1] 332211 pages reserved [ 2347.721456][ T1] 0 pages cma reserved [ 2347.725696][ T1] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=3391,uid=0 [ 2347.740572][ T1] Out of memory: Killed process 3391 (syz-executor.0) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2347.758924][ T1837] oom_reaper: reaped process 3391 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2349.012308][T12100] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2349.023149][T12100] CPU: 1 PID: 12100 Comm: rsyslogd Not tainted 5.5.0-rc1-syzkaller #0 [ 2349.031358][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2349.041455][T12100] Call Trace: [ 2349.044836][T12100] dump_stack+0x1c9/0x220 [ 2349.049249][T12100] dump_header+0x1e7/0xd00 [ 2349.053738][T12100] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2349.059628][T12100] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2349.065850][T12100] ? ___ratelimit+0x542/0x720 [ 2349.070600][T12100] ? task_will_free_mem+0x2c9/0x810 [ 2349.075898][T12100] oom_kill_process+0x216/0x580 [ 2349.080833][T12100] out_of_memory+0x17b6/0x1ce0 [ 2349.085716][T12100] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2349.091353][T12100] alloc_pages_current+0x68d/0x9a0 [ 2349.096501][T12100] __page_cache_alloc+0x95/0x320 [ 2349.101467][T12100] pagecache_get_page+0xaf1/0x1220 [ 2349.106626][T12100] ? kmsan_get_metadata+0x4f/0x190 [ 2349.111756][T12100] filemap_fault+0x2632/0x2b70 [ 2349.116622][T12100] ext4_filemap_fault+0xbb/0x130 [ 2349.121575][T12100] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2349.126928][T12100] handle_mm_fault+0x6c4a/0x9f80 [ 2349.131892][T12100] ? filemap_fault+0x2b70/0x2b70 [ 2349.136919][T12100] do_user_addr_fault+0x905/0x1510 [ 2349.142054][T12100] ? kmsan_get_metadata+0x11e/0x190 [ 2349.147264][T12100] __do_page_fault+0x1a2/0x410 [ 2349.152046][T12100] do_page_fault+0xbb/0x500 [ 2349.156558][T12100] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2349.162380][T12100] page_fault+0x4e/0x60 [ 2349.166534][T12100] RIP: 0033:0x43fbe6 [ 2349.170475][T12100] Code: Bad RIP value. [ 2349.174574][T12100] RSP: 002b:00007fd4c7f07d00 EFLAGS: 00010202 [ 2349.180644][T12100] RAX: 0000000000000000 RBX: 00007fd4c0009478 RCX: 0000000000000018 [ 2349.188620][T12100] RDX: 000004eccc8895d2 RSI: 0000000000000000 RDI: 00007fd4c7f07d00 [ 2349.196598][T12100] RBP: 00007fd4c0009470 R08: 000000005e15d9e3 R09: 000000005e15d9e3 [ 2349.204576][T12100] R10: 001e4ffee5142858 R11: 000004eccb3ea964 R12: 0000000000000000 [ 2349.212582][T12100] R13: 00007fd4c973d5a3 R14: 0000000000000ea4 R15: 00007fd4c973c615 [ 2349.221007][T12100] Mem-Info: [ 2349.224391][T12100] active_anon:105916 inactive_anon:206 isolated_anon:0 [ 2349.224391][T12100] active_file:2 inactive_file:0 isolated_file:0 [ 2349.224391][T12100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2349.224391][T12100] slab_reclaimable:6728 slab_unreclaimable:37787 [ 2349.224391][T12100] mapped:52231 shmem:299 pagetables:6952 bounce:0 [ 2349.224391][T12100] free:25046 free_pcp:126 free_cma:0 [ 2349.261725][T12100] Node 0 active_anon:409836kB inactive_anon:824kB active_file:32kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 333824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2349.290339][T12100] Node 1 active_anon:13828kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2349.317456][T12100] Node 0 DMA free:13900kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2349.347023][T12100] lowmem_reserve[]: 0 2736 3426 3426 [ 2349.352530][T12100] Node 0 DMA32 free:41332kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:390652kB inactive_anon:60kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18308kB pagetables:18492kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 2349.384363][T12100] lowmem_reserve[]: 0 0 690 690 [ 2349.389366][T12100] Node 0 Normal free:3656kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19072kB inactive_anon:764kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:16004kB pagetables:5740kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2349.421157][T12100] lowmem_reserve[]: 0 0 0 0 [ 2349.425876][T12100] Node 1 Normal free:41332kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2349.457150][T12100] lowmem_reserve[]: 0 0 0 0 [ 2349.461791][T12100] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13900kB [ 2349.478473][T12100] Node 0 DMA32: 645*4kB (ME) 290*8kB (UME) 217*16kB (UM) 144*32kB (UM) 51*64kB (M) 30*128kB (M) 3*256kB (UM) 0*512kB 0*1024kB 4*2048kB (M) 3*4096kB (UM) = 41332kB [ 2349.495325][T12100] Node 0 Normal: 300*4kB (MEH) 103*8kB (UMEH) 28*16kB (UMH) 21*32kB (UMEH) 6*64kB (UH) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3656kB [ 2349.511011][T12100] Node 1 Normal: 289*4kB (UME) 108*8kB (UME) 49*16kB (UME) 28*32kB (UME) 4*64kB (ME) 4*128kB (ME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41332kB [ 2349.528998][T12100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2349.538756][T12100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2349.548305][T12100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2349.558042][T12100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2349.567569][T12100] 312 total pagecache pages [ 2349.572263][T12100] 0 pages in swap cache [ 2349.576541][T12100] Swap cache stats: add 0, delete 0, find 0/0 [ 2349.582841][T12100] Free swap = 0kB [ 2349.586594][T12100] Total swap = 0kB [ 2349.590350][T12100] 1965979 pages RAM [ 2349.594262][T12100] 0 pages HighMem/MovableOnly [ 2349.598962][T12100] 332211 pages reserved [ 2349.603223][T12100] 0 pages cma reserved [ 2349.607326][T12100] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=30484,uid=0 [ 2349.622256][T12100] Out of memory: Killed process 30484 (syz-executor.5) total-vm:72716kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2349.973170][T12216] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2349.984334][T12216] CPU: 1 PID: 12216 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2349.992702][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2350.002783][T12216] Call Trace: [ 2350.006135][T12216] dump_stack+0x1c9/0x220 [ 2350.010514][T12216] dump_header+0x1e7/0xd00 [ 2350.014966][T12216] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2350.020804][T12216] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2350.026999][T12216] ? ___ratelimit+0x542/0x720 [ 2350.031727][T12216] ? task_will_free_mem+0x176/0x810 [ 2350.036975][T12216] oom_kill_process+0x216/0x580 [ 2350.041879][T12216] out_of_memory+0x17b6/0x1ce0 [ 2350.046734][T12216] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2350.052376][T12216] alloc_pages_current+0x68d/0x9a0 [ 2350.057542][T12216] __page_cache_alloc+0x95/0x320 [ 2350.062518][T12216] pagecache_get_page+0xaf1/0x1220 [ 2350.067669][T12216] ? kmsan_get_metadata+0x4f/0x190 [ 2350.072837][T12216] filemap_fault+0x2632/0x2b70 [ 2350.077664][T12216] ext4_filemap_fault+0xbb/0x130 [ 2350.082722][T12216] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2350.088056][T12216] handle_mm_fault+0x6c4a/0x9f80 [ 2350.093039][T12216] ? filemap_fault+0x2b70/0x2b70 [ 2350.098055][T12216] do_user_addr_fault+0x905/0x1510 [ 2350.103216][T12216] ? kmsan_get_metadata+0x11e/0x190 [ 2350.108458][T12216] __do_page_fault+0x1a2/0x410 [ 2350.113272][T12216] do_page_fault+0xbb/0x500 [ 2350.117813][T12216] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2350.123240][T12216] page_fault+0x4e/0x60 [ 2350.127411][T12216] RIP: 0033:0x42c860 [ 2350.131332][T12216] Code: Bad RIP value. [ 2350.135414][T12216] RSP: 002b:000000c00012bf18 EFLAGS: 00010246 [ 2350.141502][T12216] RAX: 0000000000000000 RBX: 000000c000000180 RCX: 000000c004ccb9c8 [ 2350.149504][T12216] RDX: 0000000000000000 RSI: 000000000000075f RDI: 0000000000437cd0 [ 2350.157516][T12216] RBP: 000000c00012bf38 R08: 000000005f9f32e1 R09: 0000022314d1ad71 [ 2350.165515][T12216] R10: 0000000000000000 R11: 000000000000092d R12: ffffffffffffffff [ 2350.173507][T12216] R13: 0000000000000016 R14: 0000000000000015 R15: 0000000000000019 [ 2350.181608][T12216] Mem-Info: [ 2350.184912][T12216] active_anon:105379 inactive_anon:206 isolated_anon:0 [ 2350.184912][T12216] active_file:8 inactive_file:0 isolated_file:0 [ 2350.184912][T12216] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2350.184912][T12216] slab_reclaimable:6703 slab_unreclaimable:37787 [ 2350.184912][T12216] mapped:52251 shmem:299 pagetables:6952 bounce:0 [ 2350.184912][T12216] free:24915 free_pcp:6 free_cma:0 [ 2350.221953][T12216] Node 0 active_anon:407688kB inactive_anon:824kB active_file:24kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209004kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 333824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2350.256546][T12216] Node 1 active_anon:13828kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2350.283417][T12216] Node 0 DMA free:13900kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2350.312835][T12216] lowmem_reserve[]: 0 2736 3426 3426 [ 2350.318199][T12216] Node 0 DMA32 free:40772kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:388504kB inactive_anon:60kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18252kB pagetables:18492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2350.350064][T12216] lowmem_reserve[]: 0 0 690 690 [ 2350.355081][T12216] Node 0 Normal free:3656kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19072kB inactive_anon:764kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:15944kB pagetables:5740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2350.386627][T12216] lowmem_reserve[]: 0 0 0 0 [ 2350.391158][T12216] Node 1 Normal free:41332kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13828kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2350.422291][T12216] lowmem_reserve[]: 0 0 0 0 [ 2350.426814][T12216] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13900kB [ 2350.443136][T12216] Node 0 DMA32: 611*4kB (UME) 293*8kB (UME) 216*16kB (M) 143*32kB (M) 51*64kB (M) 32*128kB (UM) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 5*2048kB (M) 2*4096kB (UM) = 40916kB [ 2350.460269][T12216] Node 0 Normal: 375*4kB (UMEH) 134*8kB (UMEH) 28*16kB (UMH) 21*32kB (UMEH) 6*64kB (UH) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4204kB [ 2350.475790][T12216] Node 1 Normal: 289*4kB (UME) 108*8kB (UME) 49*16kB (UME) 28*32kB (UME) 4*64kB (ME) 4*128kB (ME) 4*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 5*4096kB (U) = 41332kB [ 2350.493634][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2350.503575][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2350.512985][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2350.522658][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2350.532132][T12216] 374 total pagecache pages [ 2350.536667][T12216] 0 pages in swap cache [ 2350.540863][T12216] Swap cache stats: add 0, delete 0, find 0/0 [ 2350.547049][T12216] Free swap = 0kB [ 2350.550799][T12216] Total swap = 0kB [ 2350.554619][T12216] 1965979 pages RAM [ 2350.558458][T12216] 0 pages HighMem/MovableOnly [ 2350.563245][T12216] 332211 pages reserved [ 2350.567426][T12216] 0 pages cma reserved [ 2350.571530][T12216] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=4050,uid=0 [ 2350.586295][T12216] Out of memory: Killed process 4052 (syz-executor.3) total-vm:72584kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2350.604311][ T1837] oom_reaper: reaped process 4052 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2351.005651][T12216] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2351.017889][T12216] CPU: 1 PID: 12216 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2351.026251][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2351.036314][T12216] Call Trace: [ 2351.039773][T12216] dump_stack+0x1c9/0x220 [ 2351.044139][T12216] dump_header+0x1e7/0xd00 [ 2351.048573][T12216] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2351.054421][T12216] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2351.060610][T12216] ? ___ratelimit+0x542/0x720 [ 2351.065338][T12216] ? task_will_free_mem+0x2c9/0x810 [ 2351.070626][T12216] oom_kill_process+0x216/0x580 [ 2351.075559][T12216] out_of_memory+0x17b6/0x1ce0 [ 2351.080409][T12216] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2351.086053][T12216] alloc_pages_current+0x68d/0x9a0 [ 2351.091210][T12216] __page_cache_alloc+0x95/0x320 [ 2351.096190][T12216] pagecache_get_page+0xaf1/0x1220 [ 2351.101344][T12216] ? kmsan_get_metadata+0x4f/0x190 [ 2351.106491][T12216] filemap_fault+0x2632/0x2b70 [ 2351.111311][T12216] ext4_filemap_fault+0xbb/0x130 [ 2351.116283][T12216] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2351.121603][T12216] handle_mm_fault+0x6c4a/0x9f80 [ 2351.126576][T12216] ? filemap_fault+0x2b70/0x2b70 [ 2351.131593][T12216] do_user_addr_fault+0x905/0x1510 [ 2351.136752][T12216] ? kmsan_get_metadata+0x11e/0x190 [ 2351.141998][T12216] __do_page_fault+0x1a2/0x410 [ 2351.146806][T12216] do_page_fault+0xbb/0x500 [ 2351.151346][T12216] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2351.156762][T12216] page_fault+0x4e/0x60 [ 2351.160936][T12216] RIP: 0033:0x42c860 [ 2351.164861][T12216] Code: Bad RIP value. [ 2351.168952][T12216] RSP: 002b:000000c00012bf18 EFLAGS: 00010246 [ 2351.175045][T12216] RAX: 0000000000000000 RBX: 000000c000000180 RCX: 000000c004ccb9c8 [ 2351.183053][T12216] RDX: 0000000000000000 RSI: 000000000000075f RDI: 0000000000437cd0 [ 2351.191055][T12216] RBP: 000000c00012bf38 R08: 000000005f9f32e1 R09: 0000022314d1ad71 [ 2351.199057][T12216] R10: 0000000000000000 R11: 000000000000092d R12: ffffffffffffffff [ 2351.207062][T12216] R13: 0000000000000016 R14: 0000000000000015 R15: 0000000000000019 [ 2351.215939][T12216] Mem-Info: [ 2351.219325][T12216] active_anon:104839 inactive_anon:206 isolated_anon:0 [ 2351.219325][T12216] active_file:26 inactive_file:0 isolated_file:0 [ 2351.219325][T12216] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2351.219325][T12216] slab_reclaimable:6703 slab_unreclaimable:37787 [ 2351.219325][T12216] mapped:52242 shmem:299 pagetables:6925 bounce:0 [ 2351.219325][T12216] free:14406 free_pcp:3 free_cma:0 [ 2351.256444][T12216] Node 0 active_anon:405532kB inactive_anon:824kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208968kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 329728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2351.285112][T12216] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2351.312075][T12216] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2351.341583][T12216] lowmem_reserve[]: 0 2736 3426 3426 [ 2351.347096][T12216] Node 0 DMA32 free:18904kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:386348kB inactive_anon:60kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18244kB pagetables:18408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2351.378707][T12216] lowmem_reserve[]: 0 0 690 690 [ 2351.383868][T12216] Node 0 Normal free:3800kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19072kB inactive_anon:764kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:15940kB pagetables:5716kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 2351.415574][T12216] lowmem_reserve[]: 0 0 0 0 [ 2351.420231][T12216] Node 1 Normal free:20628kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2351.451654][T12216] lowmem_reserve[]: 0 0 0 0 [ 2351.456371][T12216] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2351.472929][T12216] Node 0 DMA32: 629*4kB (UME) 271*8kB (UME) 193*16kB (UM) 133*32kB (UME) 49*64kB (UM) 31*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19132kB [ 2351.488798][T12216] Node 0 Normal: 321*4kB (UMEH) 145*8kB (UMEH) 32*16kB (UMH) 21*32kB (UMEH) 6*64kB (UH) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4140kB [ 2351.504490][T12216] Node 1 Normal: 285*4kB (ME) 107*8kB (ME) 49*16kB (UME) 27*32kB (ME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20668kB [ 2351.521741][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2351.531471][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2351.532201][ T4052] syz-executor.3: vmalloc: allocation failure, allocated 1140678656 of 2147491840 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2351.540892][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2351.557843][ T4052] CPU: 0 PID: 4052 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2351.567336][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2351.575835][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2351.575852][ T4052] Call Trace: [ 2351.575919][ T4052] dump_stack+0x1c9/0x220 [ 2351.576001][ T4052] warn_alloc+0x4cc/0x680 [ 2351.585656][T12216] 339 total pagecache pages [ 2351.595694][ T4052] ? balance_callback+0x48/0x260 [ 2351.595789][ T4052] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2351.599072][T12216] 0 pages in swap cache [ 2351.603399][ T4052] __vmalloc_node_range+0xdc0/0x1270 [ 2351.603499][ T4052] vzalloc+0x106/0x120 [ 2351.607841][T12216] Swap cache stats: add 0, delete 0, find 0/0 [ 2351.612315][ T4052] ? ip_set_alloc+0x10a/0x140 [ 2351.612362][ T4052] ? ip_set_alloc+0x10a/0x140 [ 2351.612426][ T4052] ip_set_alloc+0x10a/0x140 [ 2351.617371][T12216] Free swap = 0kB [ 2351.623178][ T4052] hash_netnet_create+0x59c/0xf80 [ 2351.623233][ T4052] ? kmsan_get_metadata+0x20/0x190 [ 2351.623310][ T4052] ? hash_netiface6_expire+0x1070/0x1070 [ 2351.627461][T12216] Total swap = 0kB [ 2351.632734][ T4052] ip_set_create+0xa19/0x1940 [ 2351.632853][ T4052] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2351.636930][T12216] 1965979 pages RAM [ 2351.642981][ T4052] ? ip_set_protocol+0x840/0x840 [ 2351.643034][ T4052] nfnetlink_rcv_msg+0xb7f/0xce0 [ 2351.643123][ T4052] ? kmsan_get_metadata+0x4f/0x190 [ 2351.647788][T12216] 0 pages HighMem/MovableOnly [ 2351.652452][ T4052] ? kmsan_get_metadata+0x4f/0x190 [ 2351.652502][ T4052] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2351.652569][ T4052] ? kmsan_get_metadata+0x11e/0x190 [ 2351.657081][T12216] 332211 pages reserved [ 2351.660787][ T4052] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2351.660867][ T4052] netlink_rcv_skb+0x431/0x620 [ 2351.665955][T12216] 0 pages cma reserved [ 2351.671017][ T4052] ? nfnetlink_bind+0x1d0/0x1d0 [ 2351.671080][ T4052] nfnetlink_rcv+0x3bb/0x39e0 [ 2351.671167][ T4052] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2351.676843][T12216] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=12255,uid=0 [ 2351.680501][ T4052] ? __se_sys_sendmsg+0x97/0xb0 [ 2351.680577][ T4052] ? __x64_sys_sendmsg+0x4a/0x70 [ 2351.685422][T12216] Out of memory: Killed process 12255 (syz-executor.2) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2351.691135][ T4052] ? kmsan_get_metadata+0x11e/0x190 [ 2351.691199][ T4052] ? kmsan_get_metadata+0x4f/0x190 [ 2351.767538][T12216] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2351.780188][ T4052] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2351.780241][ T4052] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2351.780307][ T4052] ? rhashtable_jhash2+0x3a9/0x4d0 [ 2351.844637][ T4052] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2351.850743][ T4052] ? kmsan_get_metadata+0x11e/0x190 [ 2351.855985][ T4052] ? kmsan_get_metadata+0x4f/0x190 [ 2351.861134][ T4052] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2351.866819][ T4052] ? kmsan_get_metadata+0x11e/0x190 [ 2351.872087][ T4052] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2351.877954][ T4052] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2351.884080][ T4052] ? netlink_deliver_tap+0xca/0xeb0 [ 2351.889336][ T4052] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2351.895460][ T4052] ? __netlink_lookup+0x8fd/0x990 [ 2351.900541][ T4052] ? kmsan_get_metadata+0x11e/0x190 [ 2351.905778][ T4052] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2351.911452][ T4052] ? kmsan_get_metadata+0x11e/0x190 [ 2351.916696][ T4052] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2351.922631][ T4052] netlink_unicast+0xfa0/0x1100 [ 2351.927542][ T4052] ? nfnetlink_net_exit_batch+0x290/0x290 [ 2351.933325][ T4052] netlink_sendmsg+0x11f0/0x1480 [ 2351.938342][ T4052] ? netlink_getsockopt+0x1430/0x1430 [ 2351.943763][ T4052] ____sys_sendmsg+0x1362/0x13f0 [ 2351.948773][ T4052] __sys_sendmsg+0x4f0/0x5e0 [ 2351.953447][ T4052] ? kmsan_copy_to_user+0x81/0x90 [ 2351.958515][ T4052] ? _copy_to_user+0x168/0x1f0 [ 2351.963316][ T4052] ? kmsan_get_metadata+0x11e/0x190 [ 2351.968556][ T4052] ? kmsan_get_metadata+0x11e/0x190 [ 2351.973808][ T4052] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2351.979664][ T4052] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2351.985796][ T4052] ? prepare_exit_to_usermode+0x1ca/0x530 [ 2351.992094][ T4052] __se_sys_sendmsg+0x97/0xb0 [ 2351.996827][ T4052] __x64_sys_sendmsg+0x4a/0x70 [ 2352.001630][ T4052] do_syscall_64+0xb6/0x160 [ 2352.006184][ T4052] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2352.012104][ T4052] RIP: 0033:0x45af49 [ 2352.016033][ T4052] Code: Bad RIP value. [ 2352.020121][ T4052] RSP: 002b:00007f90621a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2352.028569][ T4052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 2352.036742][ T4052] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 2352.044936][ T4052] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2352.052936][ T4052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90621a86d4 [ 2352.060939][ T4052] R13: 00000000004c9d34 R14: 00000000004e2d78 R15: 00000000ffffffff [ 2352.068977][T12216] CPU: 1 PID: 12216 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 2352.069482][ T4052] Mem-Info: [ 2352.077350][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2352.077366][T12216] Call Trace: [ 2352.077433][T12216] dump_stack+0x1c9/0x220 [ 2352.077509][T12216] dump_header+0x1e7/0xd00 [ 2352.080685][ T4052] active_anon:104302 inactive_anon:206 isolated_anon:0 [ 2352.080685][ T4052] active_file:26 inactive_file:0 isolated_file:0 [ 2352.080685][ T4052] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2352.080685][ T4052] slab_reclaimable:6703 slab_unreclaimable:37787 [ 2352.080685][ T4052] mapped:52242 shmem:299 pagetables:6925 bounce:0 [ 2352.080685][ T4052] free:15870 free_pcp:415 free_cma:0 [ 2352.090686][T12216] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2352.090738][T12216] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2352.090801][T12216] ? ___ratelimit+0x542/0x720 [ 2352.094216][ T4052] Node 0 active_anon:403384kB inactive_anon:824kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208968kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 329728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2352.098439][T12216] ? task_will_free_mem+0x2c9/0x810 [ 2352.103014][ T4052] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2352.139886][T12216] oom_kill_process+0x216/0x580 [ 2352.139951][T12216] out_of_memory+0x17b6/0x1ce0 [ 2352.140045][T12216] __alloc_pages_nodemask+0x514c/0x5fd0 [ 2352.145887][ T4052] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2352.152100][T12216] alloc_pages_current+0x68d/0x9a0 [ 2352.156763][ T4052] lowmem_reserve[]: 0 2736 3426 3426 [ 2352.185001][T12216] __page_cache_alloc+0x95/0x320 [ 2352.185064][T12216] pagecache_get_page+0xaf1/0x1220 [ 2352.185122][T12216] ? kmsan_get_metadata+0x4f/0x190 [ 2352.185190][T12216] filemap_fault+0x2632/0x2b70 [ 2352.190375][ T4052] Node 0 DMA32 free:25264kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:384284kB inactive_anon:60kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18244kB pagetables:18408kB bounce:0kB free_pcp:268kB local_pcp:0kB free_cma:0kB [ 2352.217153][T12216] ext4_filemap_fault+0xbb/0x130 [ 2352.217202][T12216] ? ext4_page_mkwrite+0x25d0/0x25d0 [ 2352.217276][T12216] handle_mm_fault+0x6c4a/0x9f80 [ 2352.222159][ T4052] lowmem_reserve[]: 0 0 690 690 [ 2352.226911][T12216] ? filemap_fault+0x2b70/0x2b70 [ 2352.232503][ T4052] Node 0 Normal free:3800kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19072kB inactive_anon:764kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:15940kB pagetables:5716kB bounce:0kB free_pcp:1144kB local_pcp:244kB free_cma:0kB [ 2352.261694][T12216] do_user_addr_fault+0x905/0x1510 [ 2352.261763][T12216] ? kmsan_get_metadata+0x11e/0x190 [ 2352.261834][T12216] __do_page_fault+0x1a2/0x410 [ 2352.266978][ T4052] lowmem_reserve[]: 0 0 0 0 [ 2352.272267][T12216] do_page_fault+0xbb/0x500 [ 2352.272321][T12216] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 2352.272401][T12216] page_fault+0x4e/0x60 [ 2352.277312][ T4052] Node 1 Normal free:20628kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2352.282432][T12216] RIP: 0033:0x42c860 [ 2352.282471][T12216] Code: Bad RIP value. [ 2352.282496][T12216] RSP: 002b:000000c00012bf18 EFLAGS: 00010246 [ 2352.282540][T12216] RAX: 0000000000000000 RBX: 000000c000000180 RCX: 000000c004ccb9c8 [ 2352.282566][T12216] RDX: 0000000000000000 RSI: 000000000000075f RDI: 0000000000437cd0 [ 2352.282594][T12216] RBP: 000000c00012bf38 R08: 000000005f9f32e1 R09: 0000022314d1ad71 [ 2352.282644][T12216] R10: 0000000000000000 R11: 000000000000092d R12: ffffffffffffffff [ 2352.287742][ T4052] lowmem_reserve[]: 0 0 0 0 [ 2352.292513][T12216] R13: 0000000000000016 R14: 0000000000000015 R15: 0000000000000019 [ 2352.293634][T12216] Mem-Info: [ 2352.324620][ T4052] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2352.329313][T12216] active_anon:104302 inactive_anon:206 isolated_anon:0 [ 2352.329313][T12216] active_file:26 inactive_file:0 isolated_file:0 [ 2352.329313][T12216] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2352.329313][T12216] slab_reclaimable:6703 slab_unreclaimable:37787 [ 2352.329313][T12216] mapped:52242 shmem:299 pagetables:6925 bounce:0 [ 2352.329313][T12216] free:15870 free_pcp:415 free_cma:0 [ 2352.334546][ T4052] Node 0 DMA32: 618*4kB (ME) 265*8kB (UME) 193*16kB (UM) 128*32kB (ME) 49*64kB (UM) 31*128kB (UME) 0*256kB 0*512kB 0*1024kB 3*2048kB (UM) 0*4096kB = 25024kB [ 2352.339660][T12216] Node 0 active_anon:403384kB inactive_anon:824kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208968kB dirty:0kB writeback:0kB shmem:1196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 329728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2352.344481][ T4052] Node 0 Normal: 321*4kB (UMEH) 145*8kB (UMEH) 32*16kB (UMH) 21*32kB (UMEH) 6*64kB (UH) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4140kB [ 2352.349584][T12216] Node 1 active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2352.381209][ T4052] Node 1 Normal: 285*4kB (ME) 107*8kB (ME) 49*16kB (UME) 27*32kB (ME) 4*64kB (ME) 5*128kB (UME) 3*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 6*2048kB (UME) 0*4096kB = 20668kB [ 2352.386521][T12216] Node 0 DMA free:13788kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:24kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2352.386639][T12216] lowmem_reserve[]: 0 2736 3426 3426 [ 2352.386709][T12216] Node 0 DMA32 free:25264kB min:38664kB low:48328kB high:57992kB reserved_highatomic:0KB active_anon:384284kB inactive_anon:60kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2807028kB mlocked:0kB kernel_stack:18244kB pagetables:18408kB bounce:0kB free_pcp:268kB local_pcp:268kB free_cma:0kB [ 2352.392061][ T4052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2352.396836][T12216] lowmem_reserve[]: 0 0 690 690 [ 2352.401315][ T4052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2352.401349][ T4052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2352.401402][ T4052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2352.405981][T12216] Node 0 Normal free:3800kB min:9752kB low:12188kB high:14624kB reserved_highatomic:2048KB active_anon:19072kB inactive_anon:764kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:706728kB mlocked:0kB kernel_stack:15940kB pagetables:5716kB bounce:0kB free_pcp:1144kB local_pcp:900kB free_cma:0kB [ 2352.406121][T12216] lowmem_reserve[]: 0 0 0 0 [ 2352.411491][ T4052] 339 total pagecache pages [ 2352.411509][ T4052] 0 pages in swap cache [ 2352.411534][ T4052] Swap cache stats: add 0, delete 0, find 0/0 [ 2352.411547][ T4052] Free swap = 0kB [ 2352.411560][ T4052] Total swap = 0kB [ 2352.411598][ T4052] 1965979 pages RAM [ 2352.415910][T12216] Node 1 Normal free:20628kB min:41472kB low:51840kB high:62208kB reserved_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3005412kB mlocked:0kB kernel_stack:3360kB pagetables:3576kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2352.447256][ T4052] 0 pages HighMem/MovableOnly [ 2352.447297][ T4052] 332211 pages reserved [ 2352.451229][T12216] lowmem_reserve[]: 0 0 0 0 [ 2352.455423][ T4052] 0 pages cma reserved [ 2352.461488][T12216] Node 0 DMA: 5*4kB (ME) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13788kB [ 2352.906648][T12216] Node 0 DMA32: 6079*4kB (UME) 2154*8kB (UME) 1004*16kB (UM) 544*32kB (UME) 338*64kB (UM) 481*128kB (UME) 241*256kB (U) 168*512kB (U) 49*1024kB (U) 23*2048kB (UM) 1*4096kB (U) = 407308kB [ 2352.925416][T12216] Node 0 Normal: 474*4kB (UMEH) 186*8kB (UMEH) 65*16kB (UMH) 29*32kB (UMEH) 10*64kB (UH) 19*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8424kB [ 2352.941264][T12216] Node 1 Normal: 1867*4kB (UME) 560*8kB (UME) 183*16kB (UME) 352*32kB (UME) 101*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (UM) 3*1024kB (UE) 6*2048kB (UME) 0*4096kB = 50908kB [ 2352.959343][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2352.968996][T12216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2352.978378][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2352.988025][T12216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2352.997387][T12216] 338 total pagecache pages [ 2353.001967][T12216] 0 pages in swap cache [ 2353.006159][T12216] Swap cache stats: add 0, delete 0, find 0/0 [ 2353.012298][T12216] Free swap = 0kB [ 2353.016039][T12216] Total swap = 0kB [ 2353.019788][T12216] 1965979 pages RAM [ 2353.023668][T12216] 0 pages HighMem/MovableOnly [ 2353.028370][T12216] 332211 pages reserved [ 2353.032653][T12216] 0 pages cma reserved [ 2353.036755][T12216] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=18944,uid=0 [ 2353.051657][T12216] Out of memory: Killed process 18944 (syz-executor.2) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 2353.117345][ T1837] oom_reaper: reaped process 18944 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 13:32:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f000047b000/0x4000)=nil, 0x4000, 0x3) 13:32:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x100000000000002) 13:32:26 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001380)={0x2, @pix_mp}) 13:32:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000401ff8fdbff0388c8f05d69d51dee9e"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x20a, 0x200002, &(0x7f0000000c40)={0x77359400}) 13:32:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r4, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0xa4000960) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)) 13:32:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f000047b000/0x4000)=nil, 0x4000, 0x3) 13:32:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f000047b000/0x4000)=nil, 0x4000, 0x3) 13:32:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x100000000000002) 13:32:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000401ff8fdbff0388c8f05d69d51dee9e"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x20a, 0x200002, &(0x7f0000000c40)={0x77359400}) 13:32:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="100000000a1401001a00000000000000"], 0x10}}, 0x0) 13:32:27 executing program 4: r0 = getpid() ioprio_set$pid(0x1, r0, 0x0) 13:32:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000401ff8fdbff0388c8f05d69d51dee9e"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x20a, 0x200002, &(0x7f0000000c40)={0x77359400}) 13:32:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r4, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0xa4000960) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)) 13:32:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) ioctl$LOOP_CLR_FD(r0, 0x4c07) 13:32:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000401ff8fdbff0388c8f05d69d51dee9e"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x20a, 0x200002, &(0x7f0000000c40)={0x77359400}) 13:32:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="100000000a1401001a00000000000000"], 0x10}}, 0x0) 13:32:27 executing program 4: r0 = getpid() ioprio_set$pid(0x1, r0, 0x0) 13:32:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000401ff8fdbff0388c8f05d69d51dee9e"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x20a, 0x200002, &(0x7f0000000c40)={0x77359400}) 13:32:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001500190d09004bd4e40d8c560a84ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e0000000000ffff", 0x48}], 0x1) 13:32:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="100000000a1401001a00000000000000"], 0x10}}, 0x0) 13:32:28 executing program 4: r0 = getpid() ioprio_set$pid(0x1, r0, 0x0) 13:32:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000401ff8fdbff0388c8f05d69d51dee9e"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x20a, 0x200002, &(0x7f0000000c40)={0x77359400}) 13:32:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r0, &(0x7f0000000280)=""/134, 0x2c) getdents64(r0, &(0x7f0000000340)=""/4096, 0x1000) 13:32:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001500190d09004bd4e40d8c560a84ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e0000000000ffff", 0x48}], 0x1) 13:32:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000", 0x11) 13:32:28 executing program 4: r0 = getpid() ioprio_set$pid(0x1, r0, 0x0) 13:32:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="100000000a1401001a00000000000000"], 0x10}}, 0x0) 13:32:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 13:32:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r0, &(0x7f0000000280)=""/134, 0x2c) getdents64(r0, &(0x7f0000000340)=""/4096, 0x1000) 13:32:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001500190d09004bd4e40d8c560a84ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e0000000000ffff", 0x48}], 0x1) 13:32:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r0, &(0x7f0000000280)=""/134, 0x2c) getdents64(r0, &(0x7f0000000340)=""/4096, 0x1000) 13:32:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 13:32:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 13:32:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001500190d09004bd4e40d8c560a84ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e0000000000ffff", 0x48}], 0x1) 13:32:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r0, &(0x7f0000000280)=""/134, 0x2c) getdents64(r0, &(0x7f0000000340)=""/4096, 0x1000) 13:32:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r0, &(0x7f0000000280)=""/134, 0x2c) getdents64(r0, &(0x7f0000000340)=""/4096, 0x1000) 13:32:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 13:32:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r0, &(0x7f0000000280)=""/134, 0x2c) getdents64(r0, &(0x7f0000000340)=""/4096, 0x1000) 13:32:29 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "d1c8c6b1f44f52b5f1b8287c318e53ba2774163d6fc8a7ab2f75159fed4ef145"}) 13:32:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 13:32:29 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) read$usbmon(r0, 0x0, 0x0) 13:32:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r0, &(0x7f0000000280)=""/134, 0x2c) getdents64(r0, &(0x7f0000000340)=""/4096, 0x1000) 13:32:29 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "d1c8c6b1f44f52b5f1b8287c318e53ba2774163d6fc8a7ab2f75159fed4ef145"}) 13:32:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) 13:32:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 13:32:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 13:32:30 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x894c, 0x0) 13:32:30 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) read$usbmon(r0, 0x0, 0x0) 13:32:30 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "d1c8c6b1f44f52b5f1b8287c318e53ba2774163d6fc8a7ab2f75159fed4ef145"}) 13:32:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) 13:32:30 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) read$usbmon(r0, 0x0, 0x0) 13:32:30 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) read$usbmon(r0, 0x0, 0x0) 13:32:30 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x894c, 0x0) 13:32:30 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 13:32:30 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "d1c8c6b1f44f52b5f1b8287c318e53ba2774163d6fc8a7ab2f75159fed4ef145"}) 13:32:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000d00000000000000000069703667726530000000000000000000677265300000000000000000000000006272696467655f736c6176655f31000076657468315f746f5f62726964676500aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000b0000000b8000000e800000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000006d65726b000000000000000000000000000000000000000000000000000000001000215f00000000000000000009000000000000000000001500000000000000000069705f7674693000000000000000000073797a5f74756e00000000000000000073697430000000000000000000000000626f6e64300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000c0000000c0000000f000000068656c70657200000000000000000000000000000000000000000000000000002800000000000000000000005241530000000000000000000000000000000000000000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000"]}, 0x2e0) 13:32:30 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x894c, 0x0) 13:32:30 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) read$usbmon(r0, 0x0, 0x0) 13:32:30 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) read$usbmon(r0, 0x0, 0x0) 13:32:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001100010200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013006c2cc0e6c65faf097ececa9f57564db25ad5562ff5e2336fccbb0bfca000"/53], 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:32:30 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:31 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x894c, 0x0) 13:32:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) 13:32:31 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) read$usbmon(r0, 0x0, 0x0) 13:32:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$key(0xf, 0x3, 0x2) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 13:32:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001100010200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013006c2cc0e6c65faf097ececa9f57564db25ad5562ff5e2336fccbb0bfca000"/53], 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:32:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0effd, 0x0, "225a4374327cada684f6caa230f674e75e201c0100"}) 13:32:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0) 13:32:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001100010200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013006c2cc0e6c65faf097ececa9f57564db25ad5562ff5e2336fccbb0bfca000"/53], 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:32:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000020000d0800000000000004000a00140000000000000000000400010014000200fe8000000000000000007bf32b5100000000000000"], 0x34}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000000000002bc, 0x0) 13:32:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 13:32:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0effd, 0x0, "225a4374327cada684f6caa230f674e75e201c0100"}) 13:32:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$key(0xf, 0x3, 0x2) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 13:32:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001100010200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013006c2cc0e6c65faf097ececa9f57564db25ad5562ff5e2336fccbb0bfca000"/53], 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:32:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000020000d0800000000000004000a00140000000000000000000400010014000200fe8000000000000000007bf32b5100000000000000"], 0x34}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000000000002bc, 0x0) 13:32:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x5aaf7a5f2f85022f, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_TYPE={0x8}]}, 0x24}}, 0x0) 13:32:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0effd, 0x0, "225a4374327cada684f6caa230f674e75e201c0100"}) 13:32:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$key(0xf, 0x3, 0x2) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 2361.094001][ T4367] validate_nla: 2 callbacks suppressed [ 2361.094027][ T4367] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2361.109119][ T4367] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 13:32:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000020000d0800000000000004000a00140000000000000000000400010014000200fe8000000000000000007bf32b5100000000000000"], 0x34}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000000000002bc, 0x0) [ 2361.220390][ T4378] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2361.229262][ T4378] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 13:32:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0) 13:32:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x40f0effd, 0x0, "225a4374327cada684f6caa230f674e75e201c0100"}) 13:32:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5522, 0x0) 13:32:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000020000d0800000000000004000a00140000000000000000000400010014000200fe8000000000000000007bf32b5100000000000000"], 0x34}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000000000002bc, 0x0) 13:32:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x5aaf7a5f2f85022f, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_TYPE={0x8}]}, 0x24}}, 0x0) 13:32:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$key(0xf, 0x3, 0x2) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 13:32:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5522, 0x0) [ 2361.690821][ T4405] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2361.699238][ T4405] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 13:32:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0) 13:32:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x5aaf7a5f2f85022f, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_TYPE={0x8}]}, 0x24}}, 0x0) 13:32:32 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5522, 0x0) 13:32:33 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 13:32:33 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1000024, 0x0) 13:32:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5522, 0x0) [ 2362.043803][ T4421] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2362.052225][ T4421] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 13:32:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0) 13:32:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5522, 0x0) 13:32:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x5aaf7a5f2f85022f, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_TYPE={0x8}]}, 0x24}}, 0x0) 13:32:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5522, 0x0) 13:32:33 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1000024, 0x0) [ 2362.415634][ T4446] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2362.424051][ T4446] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 13:32:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5522, 0x0) 13:32:33 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x2]}}, 0x20) 13:32:33 executing program 3: unshare(0x2000400) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4018920a, 0x0) 13:32:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8}]}, 0x20}}, 0x0) 13:32:33 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 13:32:33 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1000024, 0x0) 13:32:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/101, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x5) 13:32:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x2]}}, 0x20) 13:32:34 executing program 3: unshare(0x2000400) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4018920a, 0x0) 13:32:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1000024, 0x0) 13:32:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8}]}, 0x20}}, 0x0) 13:32:34 executing program 3: unshare(0x2000400) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4018920a, 0x0) 13:32:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x2]}}, 0x20) 13:32:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/101, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x5) 13:32:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c) 13:32:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8}]}, 0x20}}, 0x0) 13:32:34 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 13:32:34 executing program 3: unshare(0x2000400) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4018920a, 0x0) 13:32:34 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x313, @time={0x0, 0x4000000}}) 13:32:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x2]}}, 0x20) 13:32:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x20, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x8}]}, 0x20}}, 0x0) 13:32:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/101, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x5) 13:32:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x1a0ffffffff, 0x5f, 0x80ffff, 0x2e], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) 13:32:35 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x313, @time={0x0, 0x4000000}}) 13:32:35 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 13:32:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/101, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x5) 13:32:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000fe487ff5394eaa3b3641397869e0738ed577b2cd22ac6852cde0cd09161cd4de631db48d194f064252ada3ab91ff740e857726980fb6dc30c2c56ca094c04621188e44355ed0a4eb1e856d22af4fa2bcceaea63335e0f3af640872396153da8794adf4d211a758598a5064abfad86ab2a7c03c1eaed356fa61271cc895923bcc16e97243b8483e71ac79cfc3f92659d663d411e514ee3f6e65c50ccdf875372749661ce26ed9717368293f790f9e10bdb00ff4eabbf2e398588fd7aed306ac621125800bdb79f3feabd58b04c5a8b7241fe5aa44", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002c00070500"/20, @ANYRES32=r6, @ANYBLOB="0000ffff0000ffff802000800c000100677265645a9b000004000200"], 0x34}}, 0x0) 13:32:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x1a0ffffffff, 0x5f, 0x80ffff, 0x2e], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) [ 2364.429922][ T4556] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2364.616723][ T4556] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 13:32:35 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 13:32:35 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x313, @time={0x0, 0x4000000}}) 13:32:35 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 13:32:35 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 13:32:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x1a0ffffffff, 0x5f, 0x80ffff, 0x2e], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) 13:32:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000fe487ff5394eaa3b3641397869e0738ed577b2cd22ac6852cde0cd09161cd4de631db48d194f064252ada3ab91ff740e857726980fb6dc30c2c56ca094c04621188e44355ed0a4eb1e856d22af4fa2bcceaea63335e0f3af640872396153da8794adf4d211a758598a5064abfad86ab2a7c03c1eaed356fa61271cc895923bcc16e97243b8483e71ac79cfc3f92659d663d411e514ee3f6e65c50ccdf875372749661ce26ed9717368293f790f9e10bdb00ff4eabbf2e398588fd7aed306ac621125800bdb79f3feabd58b04c5a8b7241fe5aa44", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002c00070500"/20, @ANYRES32=r6, @ANYBLOB="0000ffff0000ffff802000800c000100677265645a9b000004000200"], 0x34}}, 0x0) 13:32:36 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x313, @time={0x0, 0x4000000}}) [ 2364.965464][ T4586] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 13:32:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x1a0ffffffff, 0x5f, 0x80ffff, 0x2e], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) 13:32:36 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 13:32:36 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 13:32:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000fe487ff5394eaa3b3641397869e0738ed577b2cd22ac6852cde0cd09161cd4de631db48d194f064252ada3ab91ff740e857726980fb6dc30c2c56ca094c04621188e44355ed0a4eb1e856d22af4fa2bcceaea63335e0f3af640872396153da8794adf4d211a758598a5064abfad86ab2a7c03c1eaed356fa61271cc895923bcc16e97243b8483e71ac79cfc3f92659d663d411e514ee3f6e65c50ccdf875372749661ce26ed9717368293f790f9e10bdb00ff4eabbf2e398588fd7aed306ac621125800bdb79f3feabd58b04c5a8b7241fe5aa44", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002c00070500"/20, @ANYRES32=r6, @ANYBLOB="0000ffff0000ffff802000800c000100677265645a9b000004000200"], 0x34}}, 0x0) 13:32:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 2365.457013][ T4606] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 13:32:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 13:32:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/36, 0x24}], 0x1, 0x800) 13:32:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x0}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000003, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:36 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 13:32:36 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 13:32:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000fe487ff5394eaa3b3641397869e0738ed577b2cd22ac6852cde0cd09161cd4de631db48d194f064252ada3ab91ff740e857726980fb6dc30c2c56ca094c04621188e44355ed0a4eb1e856d22af4fa2bcceaea63335e0f3af640872396153da8794adf4d211a758598a5064abfad86ab2a7c03c1eaed356fa61271cc895923bcc16e97243b8483e71ac79cfc3f92659d663d411e514ee3f6e65c50ccdf875372749661ce26ed9717368293f790f9e10bdb00ff4eabbf2e398588fd7aed306ac621125800bdb79f3feabd58b04c5a8b7241fe5aa44", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002c00070500"/20, @ANYRES32=r6, @ANYBLOB="0000ffff0000ffff802000800c000100677265645a9b000004000200"], 0x34}}, 0x0) 13:32:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 13:32:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/36, 0x24}], 0x1, 0x800) [ 2365.886129][ T4626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 13:32:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x3c4, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc79) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) r2 = socket$inet(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000f0000000000000008000800080000b70000", 0x52) 13:32:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r2, 0x23, &(0x7f00007dc000)}, 0x10) 13:32:37 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x7}}) 13:32:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 13:32:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/36, 0x24}], 0x1, 0x800) 13:32:37 executing program 1: fsopen(&(0x7f0000000340)='squashfs\x00', 0x0) 13:32:37 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:32:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/36, 0x24}], 0x1, 0x800) 13:32:37 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, r0, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 13:32:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r2, 0x23, &(0x7f00007dc000)}, 0x10) 13:32:37 executing program 1: fsopen(&(0x7f0000000340)='squashfs\x00', 0x0) 13:32:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x3c4, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc79) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) r2 = socket$inet(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000f0000000000000008000800080000b70000", 0x52) 13:32:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:32:38 executing program 1: fsopen(&(0x7f0000000340)='squashfs\x00', 0x0) 13:32:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r2, 0x23, &(0x7f00007dc000)}, 0x10) 13:32:38 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, r0, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 13:32:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x3c4, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc79) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) r2 = socket$inet(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000f0000000000000008000800080000b70000", 0x52) 13:32:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:38 executing program 1: fsopen(&(0x7f0000000340)='squashfs\x00', 0x0) 13:32:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r2, 0x23, &(0x7f00007dc000)}, 0x10) 13:32:38 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, r0, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 13:32:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:32:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x3c4, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc79) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) r2 = socket$inet(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005f0214fffffffff8070000000f0000000000000008000800080000b70000", 0x52) 13:32:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz0\x00', {}, 0x0, [], [0x0, 0x3]}, 0x45c) 13:32:38 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, r0, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 13:32:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:32:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3fffffff80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0x14}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) [ 2367.895632][ T4735] input: syz1 as /devices/virtual/input/input135 13:32:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2368.021732][ T4742] input: syz1 as /devices/virtual/input/input136 13:32:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 13:32:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r3}]]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001800)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x7}}}, 0x24}}, 0x0) [ 2368.216408][ T4747] batman_adv: batadv0: Adding interface: ipvlan1 [ 2368.224663][ T4747] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2368.251456][ T4747] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active 13:32:39 executing program 4: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 13:32:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz0\x00', {}, 0x0, [], [0x0, 0x3]}, 0x45c) 13:32:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz0\x00', {}, 0x0, [], [0x0, 0x3]}, 0x45c) [ 2368.398223][ T4747] batman_adv: batadv0: Removing interface: ipvlan1 [ 2368.485528][ T4747] bridge0: port 3(ipvlan1) entered blocking state [ 2368.493221][ T4747] bridge0: port 3(ipvlan1) entered disabled state 13:32:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) [ 2368.647076][ T4765] input: syz1 as /devices/virtual/input/input137 [ 2368.647759][ T4764] input: syz1 as /devices/virtual/input/input138 [ 2368.677678][ T4747] batman_adv: batadv0: Adding interface: ipvlan1 [ 2368.684445][ T4747] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2368.710070][ T4747] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active 13:32:39 executing program 4: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 13:32:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r3}]]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001800)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x7}}}, 0x24}}, 0x0) [ 2368.904433][ T4747] batman_adv: batadv0: Removing interface: ipvlan1 13:32:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz0\x00', {}, 0x0, [], [0x0, 0x3]}, 0x45c) [ 2368.976917][ T4747] bridge0: port 3(ipvlan1) entered blocking state [ 2368.984073][ T4747] bridge0: port 3(ipvlan1) entered disabled state 13:32:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 13:32:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3fffffff80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0x14}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) 13:32:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz0\x00', {}, 0x0, [], [0x0, 0x3]}, 0x45c) 13:32:40 executing program 4: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 2369.248803][ T4785] input: syz1 as /devices/virtual/input/input139 [ 2369.306390][ T4791] input: syz1 as /devices/virtual/input/input140 13:32:40 executing program 4: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 13:32:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r3}]]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001800)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x7}}}, 0x24}}, 0x0) [ 2369.419900][ T4796] batman_adv: batadv0: Adding interface: ipvlan1 [ 2369.427426][ T4796] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2369.453667][ T4796] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active 13:32:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz0\x00', {}, 0x0, [], [0x0, 0x3]}, 0x45c) 13:32:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) [ 2369.629441][ T4796] batman_adv: batadv0: Removing interface: ipvlan1 13:32:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz0\x00', {}, 0x0, [], [0x0, 0x3]}, 0x45c) [ 2369.686972][ T4796] bridge0: port 3(ipvlan1) entered blocking state [ 2369.695487][ T4796] bridge0: port 3(ipvlan1) entered disabled state [ 2369.757189][ T4808] input: syz1 as /devices/virtual/input/input141 13:32:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3fffffff80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0x14}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) 13:32:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r3}]]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001800)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x7}}}, 0x24}}, 0x0) [ 2369.892416][ T4813] input: syz1 as /devices/virtual/input/input142 13:32:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3fffffff80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0x14}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) 13:32:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 13:32:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) [ 2370.123219][ T4819] batman_adv: batadv0: Adding interface: ipvlan1 [ 2370.129968][ T4819] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2370.156517][ T4819] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 2370.227805][ T4823] batman_adv: batadv0: Adding interface: ipvlan1 [ 2370.234709][ T4823] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2370.260554][ T4823] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 2370.277657][ T4819] batman_adv: batadv0: Removing interface: ipvlan1 [ 2370.323265][ T4819] bridge0: port 3(ipvlan1) entered blocking state [ 2370.331290][ T4819] bridge0: port 3(ipvlan1) entered disabled state 13:32:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) bind$netlink(r0, &(0x7f00000000c0), 0xc) 13:32:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0x4a, 0x1006}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 2370.441866][ T4823] batman_adv: batadv0: Removing interface: ipvlan1 [ 2370.524094][ T4823] bridge0: port 3(ipvlan1) entered blocking state [ 2370.531484][ T4823] bridge0: port 3(ipvlan1) entered disabled state 13:32:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 13:32:41 executing program 3: set_robust_list(0x0, 0x0) 13:32:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3fffffff80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0x14}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) 13:32:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3fffffff80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0x14}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) 13:32:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) bind$netlink(r0, &(0x7f00000000c0), 0xc) 13:32:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0x4a, 0x1006}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 2370.929163][ T4849] batman_adv: batadv0: Adding interface: ipvlan1 [ 2370.936853][ T4849] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2370.962849][ T4849] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active 13:32:42 executing program 3: set_robust_list(0x0, 0x0) [ 2370.989180][ T4851] batman_adv: batadv0: Adding interface: ipvlan1 [ 2370.996238][ T4851] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2371.022440][ T4851] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 2371.075512][ T4849] batman_adv: batadv0: Removing interface: ipvlan1 13:32:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 13:32:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) bind$netlink(r0, &(0x7f00000000c0), 0xc) [ 2371.142239][ T4849] bridge0: port 3(ipvlan1) entered blocking state [ 2371.150219][ T4849] bridge0: port 3(ipvlan1) entered disabled state [ 2371.168107][ T4857] batman_adv: batadv0: Removing interface: ipvlan1 13:32:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0x4a, 0x1006}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 13:32:42 executing program 3: set_robust_list(0x0, 0x0) [ 2371.339135][ T4857] bridge0: port 3(ipvlan1) entered blocking state [ 2371.346003][ T4857] bridge0: port 3(ipvlan1) entered disabled state 13:32:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) bind$netlink(r0, &(0x7f00000000c0), 0xc) 13:32:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000200)={'bond0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 13:32:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000001480)='/dev/binder#\x00', 0x0, 0x1800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x4c, 0x0, &(0x7f0000001600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001680)="ae"}) 13:32:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3fffffff80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0x14}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}}, 0x0) 13:32:42 executing program 3: set_robust_list(0x0, 0x0) 13:32:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0x4a, 0x1006}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 13:32:42 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 13:32:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000001480)='/dev/binder#\x00', 0x0, 0x1800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x4c, 0x0, &(0x7f0000001600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001680)="ae"}) 13:32:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000200)={'bond0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) [ 2371.867209][ T4884] batman_adv: batadv0: Adding interface: ipvlan1 [ 2371.874148][ T4884] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2371.900042][ T4884] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 2371.954411][ T4893] batman_adv: batadv0: Removing interface: ipvlan1 13:32:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7f}, 0x10) write(r0, &(0x7f000018efdc)="2400000052001f0214f9f407000904000200071010000100feffffff0800000000000000", 0x24) 13:32:43 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 2372.082626][ C0] net_ratelimit: 8 callbacks suppressed [ 2372.082651][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2372.094878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2372.101677][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2372.108119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2372.114832][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2372.121169][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2372.145392][ T4893] bridge0: port 3(ipvlan1) entered blocking state [ 2372.152232][ T4893] bridge0: port 3(ipvlan1) entered disabled state 13:32:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280)=""/77, &(0x7f0000000100)=0x4d) close(r4) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e000901"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000500)={0x1, [0xfff8]}, 0x6) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 13:32:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000001480)='/dev/binder#\x00', 0x0, 0x1800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x4c, 0x0, &(0x7f0000001600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001680)="ae"}) 13:32:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000200)={'bond0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 13:32:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7f}, 0x10) write(r0, &(0x7f000018efdc)="2400000052001f0214f9f407000904000200071010000100feffffff0800000000000000", 0x24) 13:32:43 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 13:32:43 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b62, &(0x7f0000000040)=""/163) 13:32:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000200)={'bond0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 13:32:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000001480)='/dev/binder#\x00', 0x0, 0x1800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x4c, 0x0, &(0x7f0000001600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001680)="ae"}) 13:32:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7f}, 0x10) write(r0, &(0x7f000018efdc)="2400000052001f0214f9f407000904000200071010000100feffffff0800000000000000", 0x24) 13:32:43 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b62, &(0x7f0000000040)=""/163) 13:32:44 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 13:32:44 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32, @ANYBLOB="ac03000000000000000000000c0080eb860000007570ffff2000"], 0x3}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 13:32:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001400090500000000000000690201dcb1", @ANYRES32=r1, @ANYBLOB="14000200080000000000000000000000000000501f4c00a566fc24aa"], 0x2c}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2c, 0x1100000000000000, &(0x7f0000000580), 0x2a9, &(0x7f0000000100)=[@op]}], 0x492499d, 0x0) 13:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2a0) 13:32:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7f}, 0x10) write(r0, &(0x7f000018efdc)="2400000052001f0214f9f407000904000200071010000100feffffff0800000000000000", 0x24) 13:32:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000055dff6)='/dev/ptmx\x00', 0x40101, 0x0) write(r0, &(0x7f0000f03f44)="09000000b36c5529a5534195cbffb4fffffff6091715f12f8f549f29496490f3f2afa9fd016f97ea68e0b7400fd558010287ce86ed8d843591ec4c782f85000000097f39147a2c89310932b0f6017ef5f00dfc01010000000000ffbf13", 0x5d) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x400003}) 13:32:44 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00007e0000)=""/4, &(0x7f0000000280)=0x4) 13:32:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b62, &(0x7f0000000040)=""/163) 13:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2a0) [ 2373.483653][ T4963] validate_nla: 4 callbacks suppressed [ 2373.483680][ T4963] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:32:44 executing program 3: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendfile(r2, r1, 0x0, 0x800000bf) [ 2373.595307][ T4963] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:32:44 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00007e0000)=""/4, &(0x7f0000000280)=0x4) 13:32:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b62, &(0x7f0000000040)=""/163) [ 2373.678178][ T4969] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:32:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000055dff6)='/dev/ptmx\x00', 0x40101, 0x0) write(r0, &(0x7f0000f03f44)="09000000b36c5529a5534195cbffb4fffffff6091715f12f8f549f29496490f3f2afa9fd016f97ea68e0b7400fd558010287ce86ed8d843591ec4c782f85000000097f39147a2c89310932b0f6017ef5f00dfc01010000000000ffbf13", 0x5d) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x400003}) [ 2373.786361][ T4969] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:32:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2a0) 13:32:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001400090500000000000000690201dcb1", @ANYRES32=r1, @ANYBLOB="14000200080000000000000000000000000000501f4c00a566fc24aa"], 0x2c}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2c, 0x1100000000000000, &(0x7f0000000580), 0x2a9, &(0x7f0000000100)=[@op]}], 0x492499d, 0x0) 13:32:45 executing program 3: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendfile(r2, r1, 0x0, 0x800000bf) 13:32:45 executing program 4: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendfile(r2, r1, 0x0, 0x800000bf) 13:32:45 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00007e0000)=""/4, &(0x7f0000000280)=0x4) 13:32:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000055dff6)='/dev/ptmx\x00', 0x40101, 0x0) write(r0, &(0x7f0000f03f44)="09000000b36c5529a5534195cbffb4fffffff6091715f12f8f549f29496490f3f2afa9fd016f97ea68e0b7400fd558010287ce86ed8d843591ec4c782f85000000097f39147a2c89310932b0f6017ef5f00dfc01010000000000ffbf13", 0x5d) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x400003}) [ 2374.218282][ T4993] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2374.264125][ T4993] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:32:45 executing program 3: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendfile(r2, r1, 0x0, 0x800000bf) 13:32:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x2, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2a0) 13:32:45 executing program 4: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendfile(r2, r1, 0x0, 0x800000bf) 13:32:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001400090500000000000000690201dcb1", @ANYRES32=r1, @ANYBLOB="14000200080000000000000000000000000000501f4c00a566fc24aa"], 0x2c}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2c, 0x1100000000000000, &(0x7f0000000580), 0x2a9, &(0x7f0000000100)=[@op]}], 0x492499d, 0x0) 13:32:45 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00007e0000)=""/4, &(0x7f0000000280)=0x4) 13:32:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000055dff6)='/dev/ptmx\x00', 0x40101, 0x0) write(r0, &(0x7f0000f03f44)="09000000b36c5529a5534195cbffb4fffffff6091715f12f8f549f29496490f3f2afa9fd016f97ea68e0b7400fd558010287ce86ed8d843591ec4c782f85000000097f39147a2c89310932b0f6017ef5f00dfc01010000000000ffbf13", 0x5d) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x400003}) [ 2374.660615][ T5013] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:32:45 executing program 3: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendfile(r2, r1, 0x0, 0x800000bf) 13:32:45 executing program 4: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendfile(r2, r1, 0x0, 0x800000bf) [ 2374.720435][ T5013] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:32:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 13:32:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 13:32:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001400090500000000000000690201dcb1", @ANYRES32=r1, @ANYBLOB="14000200080000000000000000000000000000501f4c00a566fc24aa"], 0x2c}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2c, 0x1100000000000000, &(0x7f0000000580), 0x2a9, &(0x7f0000000100)=[@op]}], 0x492499d, 0x0) 13:32:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 13:32:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, "0094a50000002ea2317d9e4f005800"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:32:46 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7301}, 0x3f11) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="18", 0x1}], 0x1}, 0x0) [ 2375.201415][ T5034] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2375.267438][ T5034] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:32:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) 13:32:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 13:32:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 13:32:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, "0094a50000002ea2317d9e4f005800"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:32:46 executing program 2: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 13:32:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000086dd60b409000000000000000000000000fbffe0000002ff0200002200000ad0469600000020018830907800c20400000008f1f8782bfadab4f0d0ae505b6bef00000020ffffffffffff000000000074ca2cd89ff72512f86702ba791a0000f53100000000feff6b60338fa2ed4357933437c45150b540f35835349a1062113ee59e652e38bc82ae710600000000001ffb7bb6b43b9a7304c8ab934c9da86e852e16a269ad000000000000378af989c2c7575d2f1aabb772aac3bb2930f032d33984fc548e2bbc4e34106f411384e9173a8935ff15822a54155759ced27054ea96c94efff2082335ea8a8eeb9b7759bb87f9dfbc25d46d03c7141b5797d14f47821ee337c2faf20568fc92894ae8e5b8af377f11479d9465bbba5e782b74e072de97b0ed0000000000000000000000000000000000dd9e129724d36bded88b010678fca70100000025d06cc9417b70dd30a180299a227bbf832cda60f3bb0222e0179d3d3a281bed808b832cb904ba0e75b67e4835a5f853254d52804826b1897c2b2cb3f8cd58c1541b8ee9ec9e658694780c3f234a916cb7562977c10b0513789ab4f4e5eb24326aeeda46999fd9bea4276b2c5d592bd255c4421910c06671fb00d30ad520be2ad51b036773000000000000000000000000000000d56d43398b21bf69720bfecc14e96d6e5fb28a82dd6c0ae2f448e4b642ab384d11921d4221c10443ab243ae871af397be4b0386011f2d696a6df996f5ae99c73651a18f4de802ba8b6c91b7fc0478f49c7afd419b1b54c61c9902c8dc42f309553816a8281c64b03a045e86ab1188469911891080832e799e48f2d86ee666829b1c25b577505bf78823d34537de35b6dca60eec615f463fe50d3b4c0bf39f043487d6a12f9b3c55247059cdca4d443da0fbe4782f8e15074919b8ebc38730c49b35c7867d1227e98ad68bd04ff007c522800000000000000000000000000000000d81cbdd297f9a55eda6fc4e821f42c0739e7e4f241711f5714e2e2959852f542f8e096e9ba169f70b1948e1dcdabbbb5aba37cd84c6af562b5ed17abe34369d8ca5d0b7a20cae895cdf614df4c3327290d68363f21af6f8a786ca58d05f6a4fd2806b8f4391620ead939656e5d94a9eaebc5e4f5634b0c2af6c5b204f014815c3b7e54f92542825758440edebe28714a5c67730c857b1dbb70c4bdc29f397853bdc4541f1bd3b3fc0da7968a5d010aeb2665108e3badf2df8f103d56678e88c9ad716e6cac95ecbce4acfcb57c93e167582e620a02759d7fb82a43f1a7a434df388c5d865a0000000000b9e1f589bc996d54acb6bf4c00548a1ca01d7bf2f15d726b231f29eb7368bbf892a14d6ec79d3f7cc3311601295f7e4e10df86b29c9c6f62896187cf6c810106cb895b2986f369b593"], 0x0) 13:32:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 13:32:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 13:32:46 executing program 2: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 13:32:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, "0094a50000002ea2317d9e4f005800"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:32:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000086dd60b409000000000000000000000000fbffe0000002ff0200002200000ad0469600000020018830907800c20400000008f1f8782bfadab4f0d0ae505b6bef00000020ffffffffffff000000000074ca2cd89ff72512f86702ba791a0000f53100000000feff6b60338fa2ed4357933437c45150b540f35835349a1062113ee59e652e38bc82ae710600000000001ffb7bb6b43b9a7304c8ab934c9da86e852e16a269ad000000000000378af989c2c7575d2f1aabb772aac3bb2930f032d33984fc548e2bbc4e34106f411384e9173a8935ff15822a54155759ced27054ea96c94efff2082335ea8a8eeb9b7759bb87f9dfbc25d46d03c7141b5797d14f47821ee337c2faf20568fc92894ae8e5b8af377f11479d9465bbba5e782b74e072de97b0ed0000000000000000000000000000000000dd9e129724d36bded88b010678fca70100000025d06cc9417b70dd30a180299a227bbf832cda60f3bb0222e0179d3d3a281bed808b832cb904ba0e75b67e4835a5f853254d52804826b1897c2b2cb3f8cd58c1541b8ee9ec9e658694780c3f234a916cb7562977c10b0513789ab4f4e5eb24326aeeda46999fd9bea4276b2c5d592bd255c4421910c06671fb00d30ad520be2ad51b036773000000000000000000000000000000d56d43398b21bf69720bfecc14e96d6e5fb28a82dd6c0ae2f448e4b642ab384d11921d4221c10443ab243ae871af397be4b0386011f2d696a6df996f5ae99c73651a18f4de802ba8b6c91b7fc0478f49c7afd419b1b54c61c9902c8dc42f309553816a8281c64b03a045e86ab1188469911891080832e799e48f2d86ee666829b1c25b577505bf78823d34537de35b6dca60eec615f463fe50d3b4c0bf39f043487d6a12f9b3c55247059cdca4d443da0fbe4782f8e15074919b8ebc38730c49b35c7867d1227e98ad68bd04ff007c522800000000000000000000000000000000d81cbdd297f9a55eda6fc4e821f42c0739e7e4f241711f5714e2e2959852f542f8e096e9ba169f70b1948e1dcdabbbb5aba37cd84c6af562b5ed17abe34369d8ca5d0b7a20cae895cdf614df4c3327290d68363f21af6f8a786ca58d05f6a4fd2806b8f4391620ead939656e5d94a9eaebc5e4f5634b0c2af6c5b204f014815c3b7e54f92542825758440edebe28714a5c67730c857b1dbb70c4bdc29f397853bdc4541f1bd3b3fc0da7968a5d010aeb2665108e3badf2df8f103d56678e88c9ad716e6cac95ecbce4acfcb57c93e167582e620a02759d7fb82a43f1a7a434df388c5d865a0000000000b9e1f589bc996d54acb6bf4c00548a1ca01d7bf2f15d726b231f29eb7368bbf892a14d6ec79d3f7cc3311601295f7e4e10df86b29c9c6f62896187cf6c810106cb895b2986f369b593"], 0x0) 13:32:47 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7301}, 0x3f11) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="18", 0x1}], 0x1}, 0x0) 13:32:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 13:32:47 executing program 2: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 13:32:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0xffffffffffffffff) 13:32:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, "0094a50000002ea2317d9e4f005800"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:32:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) 13:32:47 executing program 2: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 13:32:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0xffffffffffffffff) 13:32:47 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7301}, 0x3f11) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="18", 0x1}], 0x1}, 0x0) 13:32:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r3, 0xdd42ddecb798d42f}, 0x14}}, 0x0) 13:32:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r0, r0, 0x0, 0x4000005) 13:32:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2377.066544][ T5121] usb usb2: usbfs: process 5121 (syz-executor.2) did not claim interface 0 before use 13:32:48 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7301}, 0x3f11) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="18", 0x1}], 0x1}, 0x0) 13:32:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0xffffffffffffffff) 13:32:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r0, r0, 0x0, 0x4000005) 13:32:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x80006) sendfile(r0, r1, 0x0, 0x1) 13:32:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:32:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0xffffffffffffffff) 13:32:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:32:48 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7301}, 0x3f11) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="18", 0x1}], 0x1}, 0x0) 13:32:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r0, r0, 0x0, 0x4000005) 13:32:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x80006) sendfile(r0, r1, 0x0, 0x1) 13:32:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400, "954e8000000000000000000000000000000029000000000000001e00"}) 13:32:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r0, r0, 0x0, 0x4000005) 13:32:49 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7301}, 0x3f11) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="18", 0x1}], 0x1}, 0x0) 13:32:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:32:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x80006) sendfile(r0, r1, 0x0, 0x1) 13:32:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400, "954e8000000000000000000000000000000029000000000000001e00"}) 13:32:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000500)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000540)='threaded\x00', 0x9) 13:32:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000500)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000540)='threaded\x00', 0x9) 13:32:49 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4}) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x8}}, 0x5, 0x0}}) 13:32:49 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129cde3}], 0x1, &(0x7f00000001c0)=""/17, 0x10036, 0x7301}, 0x3f11) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="18", 0x1}], 0x1}, 0x0) 13:32:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x80006) sendfile(r0, r1, 0x0, 0x1) 13:32:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400, "954e8000000000000000000000000000000029000000000000001e00"}) 13:32:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000500)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000540)='threaded\x00', 0x9) 13:32:50 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4}) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x8}}, 0x5, 0x0}}) 13:32:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@local}) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="22aa1ef22e") getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:50 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000500)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000540)='threaded\x00', 0x9) 13:32:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400, "954e8000000000000000000000000000000029000000000000001e00"}) 13:32:50 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4}) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x8}}, 0x5, 0x0}}) 13:32:50 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}) 13:32:50 executing program 2: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4}) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x8}}, 0x5, 0x0}}) 13:32:50 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}) 13:32:50 executing program 5: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) 13:32:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 13:32:51 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000007d40)='/dev/sequencer\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 13:32:51 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}) 13:32:51 executing program 2: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000080)='2', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf9, 0x0, &(0x7f0000000000)) 13:32:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@local}) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="22aa1ef22e") getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:51 executing program 5: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) 13:32:51 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000007d40)='/dev/sequencer\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 13:32:51 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}) 13:32:51 executing program 2: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000080)='2', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf9, 0x0, &(0x7f0000000000)) 13:32:51 executing program 5: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) 13:32:51 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000007d40)='/dev/sequencer\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 13:32:51 executing program 4: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x8, 0x0, {{0x3}, 0xffffff7f}}, 0x80, 0x0}, 0x0) 13:32:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 13:32:52 executing program 2: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000080)='2', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf9, 0x0, &(0x7f0000000000)) 13:32:52 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000007d40)='/dev/sequencer\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 13:32:52 executing program 5: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) 13:32:52 executing program 4: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x8, 0x0, {{0x3}, 0xffffff7f}}, 0x80, 0x0}, 0x0) 13:32:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@local}) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="22aa1ef22e") getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:52 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r2, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)) 13:32:52 executing program 2: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000080)='2', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf9, 0x0, &(0x7f0000000000)) 13:32:52 executing program 4: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x8, 0x0, {{0x3}, 0xffffff7f}}, 0x80, 0x0}, 0x0) 13:32:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200002c0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 13:32:52 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r2, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)) 13:32:52 executing program 4: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x8, 0x0, {{0x3}, 0xffffff7f}}, 0x80, 0x0}, 0x0) 13:32:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 13:32:53 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r2, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)) 13:32:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0}) ppoll(&(0x7f00000003c0)=[{r0}, {r1}, {}, {r2, 0xc625}], 0x4, &(0x7f0000000440)={r3}, 0x0, 0x0) 13:32:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@local}) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)="22aa1ef22e") getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200002c0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 13:32:53 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r2, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)) 13:32:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa6215e1c90fed90ac00000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200002c0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 13:32:53 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r2, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)) 13:32:53 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r2, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)) 13:32:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0}) ppoll(&(0x7f00000003c0)=[{r0}, {r1}, {}, {r2, 0xc625}], 0x4, &(0x7f0000000440)={r3}, 0x0, 0x0) 13:32:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200002c0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 13:32:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x80}]}}}]}, 0x50}}, 0x0) 13:32:53 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r2, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)) 13:32:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 13:32:54 executing program 1: clone(0x2008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x158, 0x158, 0x158, 0x158, 0x158, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) 13:32:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0}) ppoll(&(0x7f00000003c0)=[{r0}, {r1}, {}, {r2, 0xc625}], 0x4, &(0x7f0000000440)={r3}, 0x0, 0x0) 13:32:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x80}]}}}]}, 0x50}}, 0x0) 13:32:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x40000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1}) 13:32:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_FILTERING={0x8, 0x7, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 13:32:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) [ 2383.149844][ T5370] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 13:32:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x40000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1}) [ 2383.275914][ T5385] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 13:32:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0}) ppoll(&(0x7f00000003c0)=[{r0}, {r1}, {}, {r2, 0xc625}], 0x4, &(0x7f0000000440)={r3}, 0x0, 0x0) 13:32:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x80}]}}}]}, 0x50}}, 0x0) 13:32:54 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340)=[{&(0x7f0000000100)="24000000120007031dfffd946fa283000f000a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:32:54 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x40000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1}) [ 2383.621842][ T5401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2383.650182][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:32:55 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x9, 0x7, 0xda], [{0x0, 0x1}, {}, {}, {0xffffffff}]}) 13:32:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 13:32:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x80}]}}}]}, 0x50}}, 0x0) 13:32:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x40000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1}) 13:32:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340)=[{&(0x7f0000000100)="24000000120007031dfffd946fa283000f000a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:32:55 executing program 0: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) open_tree(0xffffffffffffffff, 0x0, 0x1) [ 2384.090697][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:32:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x200080002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) 13:32:55 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x9, 0x7, 0xda], [{0x0, 0x1}, {}, {}, {0xffffffff}]}) 13:32:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_buf(r0, 0x29, 0xd3, 0x0, 0x0) 13:32:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 13:32:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340)=[{&(0x7f0000000100)="24000000120007031dfffd946fa283000f000a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:32:55 executing program 0: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) open_tree(0xffffffffffffffff, 0x0, 0x1) [ 2384.416330][ T5431] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 2384.505550][ T5438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:32:55 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x9, 0x7, 0xda], [{0x0, 0x1}, {}, {}, {0xffffffff}]}) 13:32:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_buf(r0, 0x29, 0xd3, 0x0, 0x0) 13:32:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 13:32:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340)=[{&(0x7f0000000100)="24000000120007031dfffd946fa283000f000a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:32:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x200080002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) 13:32:55 executing program 0: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) open_tree(0xffffffffffffffff, 0x0, 0x1) 13:32:55 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x9, 0x7, 0xda], [{0x0, 0x1}, {}, {}, {0xffffffff}]}) [ 2384.851075][ T5454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2384.869852][ T5456] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 13:32:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100002400070500"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x120}}, 0x0) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:32:56 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_buf(r0, 0x29, 0xd3, 0x0, 0x0) 13:32:56 executing program 0: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) open_tree(0xffffffffffffffff, 0x0, 0x1) 13:32:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, 0xfffffffffffffffe) fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:32:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x200080002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) 13:32:56 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_buf(r0, 0x29, 0xd3, 0x0, 0x0) 13:32:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 13:32:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100002400070500"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x120}}, 0x0) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2385.315360][ T5476] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 13:32:56 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:32:56 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x800, 0x2, 0x0, 0x0, 0x8}, 0x20) 13:32:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 13:32:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x200080002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) 13:32:56 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:32:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff01000000d80008001c00010002fffefd0100000007000000ff0f0000ffffff7f05000000100002003f00080000000100410600001c000100033209000300000007000000070000007f00000000000000040002001c00010003f109000000000002000000fdffffff01000000070000001400020001fc000083040300e601000082a400001c000100ff066b9806000000020000000900000000feffff05000000100002000700010001000002030000001c0001000020e900b40000100100000007000000fcffffff050000001000020007002000070000000100000008000100687462001c00020018000200030000000000000000000000000000000000000015f024673a40c4fdf1bd0316415f1912"], 0x120}}, 0x0) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2385.777005][ T5496] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 13:32:56 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x800, 0x2, 0x0, 0x0, 0x8}, 0x20) 13:32:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, 0xfffffffffffffffe) fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:32:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 13:32:57 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:32:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:32:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100002400070500"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x120}}, 0x0) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:32:57 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x800, 0x2, 0x0, 0x0, 0x8}, 0x20) 13:32:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 13:32:57 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x800, 0x2, 0x0, 0x0, 0x8}, 0x20) 13:32:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:32:57 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:32:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 13:32:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x16) 13:32:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, 0xfffffffffffffffe) fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:32:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x2d2, {{0x29, 0x0, 0x3000000, @loopback}}}, 0x2d2) close(r0) 13:32:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x85aa, 0x4) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:32:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x20100}}]}, 0x24}}, 0x0) 13:32:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x16) 13:32:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 13:32:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x2d2, {{0x29, 0x0, 0x3000000, @loopback}}}, 0x2d2) close(r0) 13:32:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x16) 13:32:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x2d2, {{0x29, 0x0, 0x3000000, @loopback}}}, 0x2d2) close(r0) 13:32:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x20100}}]}, 0x24}}, 0x0) 13:32:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 13:32:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x20100}}]}, 0x24}}, 0x0) 13:32:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, 0xfffffffffffffffe) fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:32:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x2d2, {{0x29, 0x0, 0x3000000, @loopback}}}, 0x2d2) close(r0) 13:32:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x16) 13:32:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 13:32:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x2d2, {{0x29, 0x0, 0x3000000, @loopback}}}, 0x2d2) close(r0) 13:32:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x20100}}]}, 0x24}}, 0x0) 13:32:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x2d2, {{0x29, 0x0, 0x3000000, @loopback}}}, 0x2d2) close(r0) 13:32:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:32:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x2d2, {{0x29, 0x0, 0x3000000, @loopback}}}, 0x2d2) close(r0) 13:32:59 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:32:59 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000380)={0x0, @ctrl={0x0, 0x0, @value64}}) 13:32:59 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_hwaddr=@random="c6adb5424b99"}) [ 2388.957852][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state 13:33:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13:33:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:33:00 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000380)={0x0, @ctrl={0x0, 0x0, @value64}}) 13:33:00 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_hwaddr=@random="c6adb5424b99"}) 13:33:00 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:00 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:00 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000380)={0x0, @ctrl={0x0, 0x0, @value64}}) 13:33:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13:33:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:33:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_hwaddr=@random="c6adb5424b99"}) 13:33:00 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:00 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000380)={0x0, @ctrl={0x0, 0x0, @value64}}) 13:33:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:33:00 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_hwaddr=@random="c6adb5424b99"}) 13:33:00 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13:33:01 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:01 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000380)={0x0, @ctrl={0x0, 0x0, @value64}}) 13:33:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 13:33:01 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x1}, 0x0, 0x0) 13:33:01 executing program 3: r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x0) 13:33:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13:33:01 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:01 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000380)={0x0, @ctrl={0x0, 0x0, @value64}}) 13:33:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 13:33:01 executing program 3: r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x0) 13:33:01 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x1}, 0x0, 0x0) 13:33:01 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x80032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 13:33:01 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x98f90a, 0xe7}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000380)={0x0, @ctrl={0x0, 0x0, @value64}}) 13:33:01 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7f) r1 = socket$inet6(0xa, 0x8000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x176) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x326}, 0x8000000000002000) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018a, 0x0) 13:33:01 executing program 3: r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x0) 13:33:01 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x1}, 0x0, 0x0) 13:33:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 13:33:02 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x80032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 13:33:02 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4010744d, &(0x7f0000000080)={0x0, 0x0}) 13:33:02 executing program 3: r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x0) 13:33:02 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x1}, 0x0, 0x0) 13:33:02 executing program 0: perf_event_open(&(0x7f0000005fdd)={0x0, 0x253, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:33:02 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x80032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 13:33:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 13:33:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xa, 0x7f8, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:33:02 executing program 0: perf_event_open(&(0x7f0000005fdd)={0x0, 0x253, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:33:02 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x80032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 13:33:02 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x90000915, 0x0) 13:33:02 executing program 4: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="6df5136d047d6aec2585bf3925be7099cf78a5bc72b7a3461973242f3a34495270b4bb932a6082778d9d959eb6ee54ef25bd2f90b0b02a10ac5366bc4439fab064d4728af9866d2db6b27d7f48f69db32d9af6063fae80cb3ea62e7db31979c1444ffa8c0d684811fa1e29dcc1010159630bcb7498fd7f539822879fceb4100ad87415ed5c44fe2273f9b9ffb606908b3b688bc3918025033bb78e16e83da4fabd4fd26c5efc185cbe126dea6b41205a908c183bfb53d9180fecb3305fe4ac9b8f5f3711c3cc0cfab1df0940351396dc1c822bda5d2f1e3be869e4106c88b238fea2f1a79de189184e2e5997fd266cc6f7ff4d874b41fcc7abfa87004dcdd8a9cb4bc9b9d16c0d8d7428c4295fbf59e74a89679d863cb77d223b6a247ab205f58bc9069bd9564b2e995b2a1bee88e7769d0dfca2df4bc7d5e9e23903fd9a548b593a6fa608eb3540449cc49bfb64ac185a83ec48abdb3a120f8d47c66e9be645948f34606b744e4227bf64d24cbc026c44b0f2bc53804da3cdc1c822f74318259e05f80539af31ae38eaa2d7b0bc0df528db09ab2260ac36c94fd53fc8a99092942ddfc27d32c4132f2cc8c36b3f45f35a73ac77b3aa02fa511729326705920fa58fc04b2f80960f9a24d1892d3bd248a983d98f6f6520ee3a19f9badd5b5b3013a81d1d182bd80521c57c93fb828daf72c9b1a2e11f52473579da124f145acbeeb034ddf310bbf6f61bb66fc46ae3864510bda8d3ac84efae95a766ca968e946539eb51f81f390e7ed847dd1d079386e8d5e50d70a8ed21520c5bb7e7dc67d4a26c7a59ecd43fba54b336b655506ab94092176f9a4d46949cc79b630c16d1190e6ef1f1c515c85f98cfc66c84df35b6be394ca6180ebb68b64bee9f06950e7320ff441c1cd5f7db41635f7f104c333de3cd95a8b564c0de029fa6e611aa6d71c99b650331908e63e946cf1e35655cbd2c8b341f71fefd03b95eaa7cdce50089425500bae0fbbcfd197af4ea33685ff51a70045949aed42e3122c39f3e3d45aabcbf7136d46e8894e8f319b0c16de697989f6bae9d3d2e14bcafdc65d0a07c4aff44360f9efa7b1059a2634554706feb5807ec2f30cc28cbe3aa4b1553710572e57d218174e0a736cfb7d6dd796073ab1690144880165a227863e8b366cf409128d97c83eefac13b50aba459de54a25fd4eff3c69ae89ceab4dbb383842ef936040a4be9dca7dbbabc60f0fb2266fe1ca2750b772e7c93eb9b02f4411f8ad5c180c4d525fd633d55c3e167dc27ee0cac801da12368e4abe1bd7b675c1a64d78d7852749e93eba5047ac73aa24bbdc3c8f5b5e311df6ca39df1300d3eb91cabf04d61ec9f94bf4125c21e31f738df51443a3512533a2e9f8abee19ceb2e4c8dfdfa12753e097b5c0c19d3f9735c4b326e85c66b939680a452e4be33e15951007bc47862e9e161515e40857348a41693d7beabbceabaa1f4cc2882d5ca4be67f147a19531bb0c6dcc3efb433785025b9aff6bf0c90e795cfe250c871b339d591875334ad2c74581b7ce7f4f6e436f37eb25bda7c5ea34141f6b42abef46d381f911008cde7d656df93066a4b78ee67b53f46c2b31f966196895064c7ba91b1fa63558dc60396678b12c3e2e01148b211bd9666d245ceea8490611f994eb98fc2ae18fb778df8a79eff94f332bdad851e181f90c20eecda7f41cb152a47b81cd6d136e6a7a827a8cb3b6db89c921deed3692a990704ad4f27f771b1bd388d475272447f522f293209e0ee1d61ad38618971cb90bb2ba2c9595fabc0ba0a1ec9bdfb09ebc99d2424e48e98b3dc6947b50e2d06f998d3e7df650abdeb014f2da4a0d62dbe669de5779e0d471d6d0833aadc9a847f729cc984f50de5b35472b696d0766f67f5e1fe6f29b7d6697933211f6c2a27bfe34b6aa36cd82cc359c684b23e7df791ea1b581e529b9917701364dc237898fc38fdb4ff21c33d51809ee9f4da9bbc674327003e9766402641401b055c11f469d6471af1890375ac9546e088433a9712e9c1408f26d53c067877a25bee969e0cc11276959153db4777b6eba6bb23226b799fb6c7953ca2bb114cadb7397946425ed625bb93663d61f9bc1df2af532e00bf0567eba4ebd9d98ee52699f4d38fe6a3ba13d413c65c557a7c120fee02c33f2e4f1647ced326e66205c7e192b3b1ecfca909c7c2d5bea5f19685f3a65b8ef2982c9228042729eee23a2e7fe9db0b3f12a0cb85015defe3099b54c0a8d7adfabd7b1726900fe1de27b0bee805553cdafa8c62a3c10d75094bd284219b31a389a8c4adbb02ad5e9f0bfddd188afc29b47ba5bd4deb7b1d6ee1bbf9e4f09e91ec17e8c490c2117871cad0c4a3a3d05ac9f82abdcf20e72fb2da7a15ad8cb045a2964aa0366d71f76c90cb3a5f3b9e1414708c028285dafffafae5b0c2edfe9f6bf39868562898bd26c0651da1e601e5d58b0f004d51e5a06976a2fda71a8f060d45f43db0cd57481e72416e2eb046ba01468defec7b060a72284774e9480cce07749c61b2d3a8ba8e12270130270e92864e1a2a968999e8502d1b229eb2c89959952351d4022f8d5b380f85595dd1f595f7467cba2076d9e627708280f12d5a5e6e3bd3d465ef7b519041fdde31746768255f4570853ccf9ce9457a7be40e4006781fb146315ac152729388934fa12a3b5c90a312c6bf995fee39a27deeb8bb8f52611c5c5b32988a771565d57e751d0488e16cba9ea7c4cce381679419133750aaf69ae686f651a8e5fb9a82d8b36f29ed00ee0c0f99345132157e78dd3330ff2fc9ab551d1ff26f0d5fc2d43b85fad869a7978a1966e93dc5a959f73da26929fd8b4e97b3910ce2aa92a859b90ff9dd5460e6c7b34303de6553cab2684858a4c2861d16c1b70c82eacba3627fe6189019ea31f305aef03144fecebc5349790b2604e2bfd22b55f99ddbd25b17f90af72fbbdfe43b40908617550135ad8cd1b59a5f3120a6fa4f67cb4d0976548113fe18820fe79bc144f5cda250ebe0f5b396b83ca71344ac2332a1b1270c2e96fb3daf81e6741bf000b3e9f8862fefdd94c368efb9a839efae7c9a1db88b58faf7ce301de61eb94b16a126cbd50dad2b70db7fa007fdc98085eb7da2696cea56ee32dc0c9a5cf4fc009c7a6a1d35b37b3d18ed9abbf0ba6d38404e102d097406e8aca4ed1697d03b8dd42a0743b372cc7212c12e38599b91d7b40e894cfdc8976c6154ba5a6e7fe244e65cbf3f350affb18f27f4975339abaf94a99fb206507d5cc931c509a3f0c1b106689a8e90611f520c298140598bc3d5b097619fb4be391f041b265133a57295cc9c9a83edea1e0750ec6d6bad3b845f03c88583b27b678d17438a4cad27b06c78af3f3651832288879a7a34e390554f561dcfd378fa727c02b1e2d230ad2dfc504ec44fdad5c8ef91610056e9a3a94b38c26e51e400e5738b0ae4aad91e13d5d5ec1c9eaab9b359660904f24c0d349ca7e223aa07811493963bc5118d3a991c6f31f71e4e7b2b5c66518e53ccb7b64e723003fe6cd7deb799a891ad81b054cd277af18d1cc130963a0dc14971ca69c504e990ddc12990d0faf32de8d601605dbb35761e6611ffe81758efa1e165d08b2ae1f74117e879289e8f1601a6ed6efce2aa28178f39817c8b92dd1a26c2e331bf652b6fc9165cf7bcb4c10c59bf75019b5af159dc5727621c9069be04c5b1543f5e45f43cfce3fb5cb1d2351ff03f62c4569237ecfad40b4f9e60a00d643333574352a2b6389cb3a272cb6e3a9280879455ec8b26c2737ea20693a1a45c0326992c202067d4e0c01e4c40e59129342f638ec3a4ff70d29a0dea3c0550d36e7aa123f693f22bcdb171e819eb8d0e522a6a49330f8bfd35aa4cd2e2d855395dcbbe2059044de477680ce737026fbdb869376bb732ed496ca11f896139e7715fd06744327ce617b9fec658f3df03bce10becd0bf9e8aec996b509bfb2bb157874cdb5d9fe208bcff31c524f24b95dd656d0594ff2df593259216394b06bc1426ae4bf3d8328c96222d2178a974eb6150b75bc7a8dfe196886eb8eaec1ba8eb972a0f24a7ef2174c489b6d7ead73de70997b1ff9e7afe3bad73235148266ecba0d40c6308988869569e3c14a70491cf163a9cf2d1e203d58aa8dd24b324f9fd67301ef5f4a14a60e17899c958c74617f1cfc334af0e0a85db30ac8bb8ed21158938f8e912761f66fde9dd9837e92c0140e629e159471615b4544bec1dfc7be35ea948391dab09fe7a385b2ea513858236ae1a837033da15d408c90c3e20a61809f12ba6bc9b32d3bdf7ac04333b58fa4635bd83e2dd369971", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) 13:33:02 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4010744d, &(0x7f0000000080)={0x0, 0x0}) 13:33:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xa, 0x7f8, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:33:03 executing program 0: perf_event_open(&(0x7f0000005fdd)={0x0, 0x253, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:33:03 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x90000915, 0x0) 13:33:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x134) 13:33:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xa, 0x7f8, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:33:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4010744d, &(0x7f0000000080)={0x0, 0x0}) 13:33:03 executing program 0: perf_event_open(&(0x7f0000005fdd)={0x0, 0x253, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:33:03 executing program 4: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="6df5136d047d6aec2585bf3925be7099cf78a5bc72b7a3461973242f3a34495270b4bb932a6082778d9d959eb6ee54ef25bd2f90b0b02a10ac5366bc4439fab064d4728af9866d2db6b27d7f48f69db32d9af6063fae80cb3ea62e7db31979c1444ffa8c0d684811fa1e29dcc1010159630bcb7498fd7f539822879fceb4100ad87415ed5c44fe2273f9b9ffb606908b3b688bc3918025033bb78e16e83da4fabd4fd26c5efc185cbe126dea6b41205a908c183bfb53d9180fecb3305fe4ac9b8f5f3711c3cc0cfab1df0940351396dc1c822bda5d2f1e3be869e4106c88b238fea2f1a79de189184e2e5997fd266cc6f7ff4d874b41fcc7abfa87004dcdd8a9cb4bc9b9d16c0d8d7428c4295fbf59e74a89679d863cb77d223b6a247ab205f58bc9069bd9564b2e995b2a1bee88e7769d0dfca2df4bc7d5e9e23903fd9a548b593a6fa608eb3540449cc49bfb64ac185a83ec48abdb3a120f8d47c66e9be645948f34606b744e4227bf64d24cbc026c44b0f2bc53804da3cdc1c822f74318259e05f80539af31ae38eaa2d7b0bc0df528db09ab2260ac36c94fd53fc8a99092942ddfc27d32c4132f2cc8c36b3f45f35a73ac77b3aa02fa511729326705920fa58fc04b2f80960f9a24d1892d3bd248a983d98f6f6520ee3a19f9badd5b5b3013a81d1d182bd80521c57c93fb828daf72c9b1a2e11f52473579da124f145acbeeb034ddf310bbf6f61bb66fc46ae3864510bda8d3ac84efae95a766ca968e946539eb51f81f390e7ed847dd1d079386e8d5e50d70a8ed21520c5bb7e7dc67d4a26c7a59ecd43fba54b336b655506ab94092176f9a4d46949cc79b630c16d1190e6ef1f1c515c85f98cfc66c84df35b6be394ca6180ebb68b64bee9f06950e7320ff441c1cd5f7db41635f7f104c333de3cd95a8b564c0de029fa6e611aa6d71c99b650331908e63e946cf1e35655cbd2c8b341f71fefd03b95eaa7cdce50089425500bae0fbbcfd197af4ea33685ff51a70045949aed42e3122c39f3e3d45aabcbf7136d46e8894e8f319b0c16de697989f6bae9d3d2e14bcafdc65d0a07c4aff44360f9efa7b1059a2634554706feb5807ec2f30cc28cbe3aa4b1553710572e57d218174e0a736cfb7d6dd796073ab1690144880165a227863e8b366cf409128d97c83eefac13b50aba459de54a25fd4eff3c69ae89ceab4dbb383842ef936040a4be9dca7dbbabc60f0fb2266fe1ca2750b772e7c93eb9b02f4411f8ad5c180c4d525fd633d55c3e167dc27ee0cac801da12368e4abe1bd7b675c1a64d78d7852749e93eba5047ac73aa24bbdc3c8f5b5e311df6ca39df1300d3eb91cabf04d61ec9f94bf4125c21e31f738df51443a3512533a2e9f8abee19ceb2e4c8dfdfa12753e097b5c0c19d3f9735c4b326e85c66b939680a452e4be33e15951007bc47862e9e161515e40857348a41693d7beabbceabaa1f4cc2882d5ca4be67f147a19531bb0c6dcc3efb433785025b9aff6bf0c90e795cfe250c871b339d591875334ad2c74581b7ce7f4f6e436f37eb25bda7c5ea34141f6b42abef46d381f911008cde7d656df93066a4b78ee67b53f46c2b31f966196895064c7ba91b1fa63558dc60396678b12c3e2e01148b211bd9666d245ceea8490611f994eb98fc2ae18fb778df8a79eff94f332bdad851e181f90c20eecda7f41cb152a47b81cd6d136e6a7a827a8cb3b6db89c921deed3692a990704ad4f27f771b1bd388d475272447f522f293209e0ee1d61ad38618971cb90bb2ba2c9595fabc0ba0a1ec9bdfb09ebc99d2424e48e98b3dc6947b50e2d06f998d3e7df650abdeb014f2da4a0d62dbe669de5779e0d471d6d0833aadc9a847f729cc984f50de5b35472b696d0766f67f5e1fe6f29b7d6697933211f6c2a27bfe34b6aa36cd82cc359c684b23e7df791ea1b581e529b9917701364dc237898fc38fdb4ff21c33d51809ee9f4da9bbc674327003e9766402641401b055c11f469d6471af1890375ac9546e088433a9712e9c1408f26d53c067877a25bee969e0cc11276959153db4777b6eba6bb23226b799fb6c7953ca2bb114cadb7397946425ed625bb93663d61f9bc1df2af532e00bf0567eba4ebd9d98ee52699f4d38fe6a3ba13d413c65c557a7c120fee02c33f2e4f1647ced326e66205c7e192b3b1ecfca909c7c2d5bea5f19685f3a65b8ef2982c9228042729eee23a2e7fe9db0b3f12a0cb85015defe3099b54c0a8d7adfabd7b1726900fe1de27b0bee805553cdafa8c62a3c10d75094bd284219b31a389a8c4adbb02ad5e9f0bfddd188afc29b47ba5bd4deb7b1d6ee1bbf9e4f09e91ec17e8c490c2117871cad0c4a3a3d05ac9f82abdcf20e72fb2da7a15ad8cb045a2964aa0366d71f76c90cb3a5f3b9e1414708c028285dafffafae5b0c2edfe9f6bf39868562898bd26c0651da1e601e5d58b0f004d51e5a06976a2fda71a8f060d45f43db0cd57481e72416e2eb046ba01468defec7b060a72284774e9480cce07749c61b2d3a8ba8e12270130270e92864e1a2a968999e8502d1b229eb2c89959952351d4022f8d5b380f85595dd1f595f7467cba2076d9e627708280f12d5a5e6e3bd3d465ef7b519041fdde31746768255f4570853ccf9ce9457a7be40e4006781fb146315ac152729388934fa12a3b5c90a312c6bf995fee39a27deeb8bb8f52611c5c5b32988a771565d57e751d0488e16cba9ea7c4cce381679419133750aaf69ae686f651a8e5fb9a82d8b36f29ed00ee0c0f99345132157e78dd3330ff2fc9ab551d1ff26f0d5fc2d43b85fad869a7978a1966e93dc5a959f73da26929fd8b4e97b3910ce2aa92a859b90ff9dd5460e6c7b34303de6553cab2684858a4c2861d16c1b70c82eacba3627fe6189019ea31f305aef03144fecebc5349790b2604e2bfd22b55f99ddbd25b17f90af72fbbdfe43b40908617550135ad8cd1b59a5f3120a6fa4f67cb4d0976548113fe18820fe79bc144f5cda250ebe0f5b396b83ca71344ac2332a1b1270c2e96fb3daf81e6741bf000b3e9f8862fefdd94c368efb9a839efae7c9a1db88b58faf7ce301de61eb94b16a126cbd50dad2b70db7fa007fdc98085eb7da2696cea56ee32dc0c9a5cf4fc009c7a6a1d35b37b3d18ed9abbf0ba6d38404e102d097406e8aca4ed1697d03b8dd42a0743b372cc7212c12e38599b91d7b40e894cfdc8976c6154ba5a6e7fe244e65cbf3f350affb18f27f4975339abaf94a99fb206507d5cc931c509a3f0c1b106689a8e90611f520c298140598bc3d5b097619fb4be391f041b265133a57295cc9c9a83edea1e0750ec6d6bad3b845f03c88583b27b678d17438a4cad27b06c78af3f3651832288879a7a34e390554f561dcfd378fa727c02b1e2d230ad2dfc504ec44fdad5c8ef91610056e9a3a94b38c26e51e400e5738b0ae4aad91e13d5d5ec1c9eaab9b359660904f24c0d349ca7e223aa07811493963bc5118d3a991c6f31f71e4e7b2b5c66518e53ccb7b64e723003fe6cd7deb799a891ad81b054cd277af18d1cc130963a0dc14971ca69c504e990ddc12990d0faf32de8d601605dbb35761e6611ffe81758efa1e165d08b2ae1f74117e879289e8f1601a6ed6efce2aa28178f39817c8b92dd1a26c2e331bf652b6fc9165cf7bcb4c10c59bf75019b5af159dc5727621c9069be04c5b1543f5e45f43cfce3fb5cb1d2351ff03f62c4569237ecfad40b4f9e60a00d643333574352a2b6389cb3a272cb6e3a9280879455ec8b26c2737ea20693a1a45c0326992c202067d4e0c01e4c40e59129342f638ec3a4ff70d29a0dea3c0550d36e7aa123f693f22bcdb171e819eb8d0e522a6a49330f8bfd35aa4cd2e2d855395dcbbe2059044de477680ce737026fbdb869376bb732ed496ca11f896139e7715fd06744327ce617b9fec658f3df03bce10becd0bf9e8aec996b509bfb2bb157874cdb5d9fe208bcff31c524f24b95dd656d0594ff2df593259216394b06bc1426ae4bf3d8328c96222d2178a974eb6150b75bc7a8dfe196886eb8eaec1ba8eb972a0f24a7ef2174c489b6d7ead73de70997b1ff9e7afe3bad73235148266ecba0d40c6308988869569e3c14a70491cf163a9cf2d1e203d58aa8dd24b324f9fd67301ef5f4a14a60e17899c958c74617f1cfc334af0e0a85db30ac8bb8ed21158938f8e912761f66fde9dd9837e92c0140e629e159471615b4544bec1dfc7be35ea948391dab09fe7a385b2ea513858236ae1a837033da15d408c90c3e20a61809f12ba6bc9b32d3bdf7ac04333b58fa4635bd83e2dd369971", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) 13:33:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xa, 0x7f8, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:33:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x134) 13:33:03 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x90000915, 0x0) 13:33:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4010744d, &(0x7f0000000080)={0x0, 0x0}) 13:33:03 executing program 3: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="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", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) 13:33:03 executing program 0: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="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", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) 13:33:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x134) 13:33:03 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x90000915, 0x0) 13:33:03 executing program 4: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="6df5136d047d6aec2585bf3925be7099cf78a5bc72b7a3461973242f3a34495270b4bb932a6082778d9d959eb6ee54ef25bd2f90b0b02a10ac5366bc4439fab064d4728af9866d2db6b27d7f48f69db32d9af6063fae80cb3ea62e7db31979c1444ffa8c0d684811fa1e29dcc1010159630bcb7498fd7f539822879fceb4100ad87415ed5c44fe2273f9b9ffb606908b3b688bc3918025033bb78e16e83da4fabd4fd26c5efc185cbe126dea6b41205a908c183bfb53d9180fecb3305fe4ac9b8f5f3711c3cc0cfab1df0940351396dc1c822bda5d2f1e3be869e4106c88b238fea2f1a79de189184e2e5997fd266cc6f7ff4d874b41fcc7abfa87004dcdd8a9cb4bc9b9d16c0d8d7428c4295fbf59e74a89679d863cb77d223b6a247ab205f58bc9069bd9564b2e995b2a1bee88e7769d0dfca2df4bc7d5e9e23903fd9a548b593a6fa608eb3540449cc49bfb64ac185a83ec48abdb3a120f8d47c66e9be645948f34606b744e4227bf64d24cbc026c44b0f2bc53804da3cdc1c822f74318259e05f80539af31ae38eaa2d7b0bc0df528db09ab2260ac36c94fd53fc8a99092942ddfc27d32c4132f2cc8c36b3f45f35a73ac77b3aa02fa511729326705920fa58fc04b2f80960f9a24d1892d3bd248a983d98f6f6520ee3a19f9badd5b5b3013a81d1d182bd80521c57c93fb828daf72c9b1a2e11f52473579da124f145acbeeb034ddf310bbf6f61bb66fc46ae3864510bda8d3ac84efae95a766ca968e946539eb51f81f390e7ed847dd1d079386e8d5e50d70a8ed21520c5bb7e7dc67d4a26c7a59ecd43fba54b336b655506ab94092176f9a4d46949cc79b630c16d1190e6ef1f1c515c85f98cfc66c84df35b6be394ca6180ebb68b64bee9f06950e7320ff441c1cd5f7db41635f7f104c333de3cd95a8b564c0de029fa6e611aa6d71c99b650331908e63e946cf1e35655cbd2c8b341f71fefd03b95eaa7cdce50089425500bae0fbbcfd197af4ea33685ff51a70045949aed42e3122c39f3e3d45aabcbf7136d46e8894e8f319b0c16de697989f6bae9d3d2e14bcafdc65d0a07c4aff44360f9efa7b1059a2634554706feb5807ec2f30cc28cbe3aa4b1553710572e57d218174e0a736cfb7d6dd796073ab1690144880165a227863e8b366cf409128d97c83eefac13b50aba459de54a25fd4eff3c69ae89ceab4dbb383842ef936040a4be9dca7dbbabc60f0fb2266fe1ca2750b772e7c93eb9b02f4411f8ad5c180c4d525fd633d55c3e167dc27ee0cac801da12368e4abe1bd7b675c1a64d78d7852749e93eba5047ac73aa24bbdc3c8f5b5e311df6ca39df1300d3eb91cabf04d61ec9f94bf4125c21e31f738df51443a3512533a2e9f8abee19ceb2e4c8dfdfa12753e097b5c0c19d3f9735c4b326e85c66b939680a452e4be33e15951007bc47862e9e161515e40857348a41693d7beabbceabaa1f4cc2882d5ca4be67f147a19531bb0c6dcc3efb433785025b9aff6bf0c90e795cfe250c871b339d591875334ad2c74581b7ce7f4f6e436f37eb25bda7c5ea34141f6b42abef46d381f911008cde7d656df93066a4b78ee67b53f46c2b31f966196895064c7ba91b1fa63558dc60396678b12c3e2e01148b211bd9666d245ceea8490611f994eb98fc2ae18fb778df8a79eff94f332bdad851e181f90c20eecda7f41cb152a47b81cd6d136e6a7a827a8cb3b6db89c921deed3692a990704ad4f27f771b1bd388d475272447f522f293209e0ee1d61ad38618971cb90bb2ba2c9595fabc0ba0a1ec9bdfb09ebc99d2424e48e98b3dc6947b50e2d06f998d3e7df650abdeb014f2da4a0d62dbe669de5779e0d471d6d0833aadc9a847f729cc984f50de5b35472b696d0766f67f5e1fe6f29b7d6697933211f6c2a27bfe34b6aa36cd82cc359c684b23e7df791ea1b581e529b9917701364dc237898fc38fdb4ff21c33d51809ee9f4da9bbc674327003e9766402641401b055c11f469d6471af1890375ac9546e088433a9712e9c1408f26d53c067877a25bee969e0cc11276959153db4777b6eba6bb23226b799fb6c7953ca2bb114cadb7397946425ed625bb93663d61f9bc1df2af532e00bf0567eba4ebd9d98ee52699f4d38fe6a3ba13d413c65c557a7c120fee02c33f2e4f1647ced326e66205c7e192b3b1ecfca909c7c2d5bea5f19685f3a65b8ef2982c9228042729eee23a2e7fe9db0b3f12a0cb85015defe3099b54c0a8d7adfabd7b1726900fe1de27b0bee805553cdafa8c62a3c10d75094bd284219b31a389a8c4adbb02ad5e9f0bfddd188afc29b47ba5bd4deb7b1d6ee1bbf9e4f09e91ec17e8c490c2117871cad0c4a3a3d05ac9f82abdcf20e72fb2da7a15ad8cb045a2964aa0366d71f76c90cb3a5f3b9e1414708c028285dafffafae5b0c2edfe9f6bf39868562898bd26c0651da1e601e5d58b0f004d51e5a06976a2fda71a8f060d45f43db0cd57481e72416e2eb046ba01468defec7b060a72284774e9480cce07749c61b2d3a8ba8e12270130270e92864e1a2a968999e8502d1b229eb2c89959952351d4022f8d5b380f85595dd1f595f7467cba2076d9e627708280f12d5a5e6e3bd3d465ef7b519041fdde31746768255f4570853ccf9ce9457a7be40e4006781fb146315ac152729388934fa12a3b5c90a312c6bf995fee39a27deeb8bb8f52611c5c5b32988a771565d57e751d0488e16cba9ea7c4cce381679419133750aaf69ae686f651a8e5fb9a82d8b36f29ed00ee0c0f99345132157e78dd3330ff2fc9ab551d1ff26f0d5fc2d43b85fad869a7978a1966e93dc5a959f73da26929fd8b4e97b3910ce2aa92a859b90ff9dd5460e6c7b34303de6553cab2684858a4c2861d16c1b70c82eacba3627fe6189019ea31f305aef03144fecebc5349790b2604e2bfd22b55f99ddbd25b17f90af72fbbdfe43b40908617550135ad8cd1b59a5f3120a6fa4f67cb4d0976548113fe18820fe79bc144f5cda250ebe0f5b396b83ca71344ac2332a1b1270c2e96fb3daf81e6741bf000b3e9f8862fefdd94c368efb9a839efae7c9a1db88b58faf7ce301de61eb94b16a126cbd50dad2b70db7fa007fdc98085eb7da2696cea56ee32dc0c9a5cf4fc009c7a6a1d35b37b3d18ed9abbf0ba6d38404e102d097406e8aca4ed1697d03b8dd42a0743b372cc7212c12e38599b91d7b40e894cfdc8976c6154ba5a6e7fe244e65cbf3f350affb18f27f4975339abaf94a99fb206507d5cc931c509a3f0c1b106689a8e90611f520c298140598bc3d5b097619fb4be391f041b265133a57295cc9c9a83edea1e0750ec6d6bad3b845f03c88583b27b678d17438a4cad27b06c78af3f3651832288879a7a34e390554f561dcfd378fa727c02b1e2d230ad2dfc504ec44fdad5c8ef91610056e9a3a94b38c26e51e400e5738b0ae4aad91e13d5d5ec1c9eaab9b359660904f24c0d349ca7e223aa07811493963bc5118d3a991c6f31f71e4e7b2b5c66518e53ccb7b64e723003fe6cd7deb799a891ad81b054cd277af18d1cc130963a0dc14971ca69c504e990ddc12990d0faf32de8d601605dbb35761e6611ffe81758efa1e165d08b2ae1f74117e879289e8f1601a6ed6efce2aa28178f39817c8b92dd1a26c2e331bf652b6fc9165cf7bcb4c10c59bf75019b5af159dc5727621c9069be04c5b1543f5e45f43cfce3fb5cb1d2351ff03f62c4569237ecfad40b4f9e60a00d643333574352a2b6389cb3a272cb6e3a9280879455ec8b26c2737ea20693a1a45c0326992c202067d4e0c01e4c40e59129342f638ec3a4ff70d29a0dea3c0550d36e7aa123f693f22bcdb171e819eb8d0e522a6a49330f8bfd35aa4cd2e2d855395dcbbe2059044de477680ce737026fbdb869376bb732ed496ca11f896139e7715fd06744327ce617b9fec658f3df03bce10becd0bf9e8aec996b509bfb2bb157874cdb5d9fe208bcff31c524f24b95dd656d0594ff2df593259216394b06bc1426ae4bf3d8328c96222d2178a974eb6150b75bc7a8dfe196886eb8eaec1ba8eb972a0f24a7ef2174c489b6d7ead73de70997b1ff9e7afe3bad73235148266ecba0d40c6308988869569e3c14a70491cf163a9cf2d1e203d58aa8dd24b324f9fd67301ef5f4a14a60e17899c958c74617f1cfc334af0e0a85db30ac8bb8ed21158938f8e912761f66fde9dd9837e92c0140e629e159471615b4544bec1dfc7be35ea948391dab09fe7a385b2ea513858236ae1a837033da15d408c90c3e20a61809f12ba6bc9b32d3bdf7ac04333b58fa4635bd83e2dd369971", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) 13:33:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdf3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160800180006ac0f00000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 13:33:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x134) 13:33:04 executing program 0: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="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", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) 13:33:04 executing program 3: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="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", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) [ 2393.296994][ T5828] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. 13:33:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x6000, 0xe5, &(0x7f0000000200)=""/229}, {0x100000, 0x36, &(0x7f0000000400)=""/54}, {0xa000, 0x96, &(0x7f0000000440)=""/150}, {0x0, 0x98, &(0x7f0000000500)=""/152}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) 13:33:04 executing program 4: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="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", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) 13:33:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0xd0, 0x0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 13:33:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdf3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160800180006ac0f00000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 13:33:04 executing program 3: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="6df5136d047d6aec2585bf3925be7099cf78a5bc72b7a3461973242f3a34495270b4bb932a6082778d9d959eb6ee54ef25bd2f90b0b02a10ac5366bc4439fab064d4728af9866d2db6b27d7f48f69db32d9af6063fae80cb3ea62e7db31979c1444ffa8c0d684811fa1e29dcc1010159630bcb7498fd7f539822879fceb4100ad87415ed5c44fe2273f9b9ffb606908b3b688bc3918025033bb78e16e83da4fabd4fd26c5efc185cbe126dea6b41205a908c183bfb53d9180fecb3305fe4ac9b8f5f3711c3cc0cfab1df0940351396dc1c822bda5d2f1e3be869e4106c88b238fea2f1a79de189184e2e5997fd266cc6f7ff4d874b41fcc7abfa87004dcdd8a9cb4bc9b9d16c0d8d7428c4295fbf59e74a89679d863cb77d223b6a247ab205f58bc9069bd9564b2e995b2a1bee88e7769d0dfca2df4bc7d5e9e23903fd9a548b593a6fa608eb3540449cc49bfb64ac185a83ec48abdb3a120f8d47c66e9be645948f34606b744e4227bf64d24cbc026c44b0f2bc53804da3cdc1c822f74318259e05f80539af31ae38eaa2d7b0bc0df528db09ab2260ac36c94fd53fc8a99092942ddfc27d32c4132f2cc8c36b3f45f35a73ac77b3aa02fa511729326705920fa58fc04b2f80960f9a24d1892d3bd248a983d98f6f6520ee3a19f9badd5b5b3013a81d1d182bd80521c57c93fb828daf72c9b1a2e11f52473579da124f145acbeeb034ddf310bbf6f61bb66fc46ae3864510bda8d3ac84efae95a766ca968e946539eb51f81f390e7ed847dd1d079386e8d5e50d70a8ed21520c5bb7e7dc67d4a26c7a59ecd43fba54b336b655506ab94092176f9a4d46949cc79b630c16d1190e6ef1f1c515c85f98cfc66c84df35b6be394ca6180ebb68b64bee9f06950e7320ff441c1cd5f7db41635f7f104c333de3cd95a8b564c0de029fa6e611aa6d71c99b650331908e63e946cf1e35655cbd2c8b341f71fefd03b95eaa7cdce50089425500bae0fbbcfd197af4ea33685ff51a70045949aed42e3122c39f3e3d45aabcbf7136d46e8894e8f319b0c16de697989f6bae9d3d2e14bcafdc65d0a07c4aff44360f9efa7b1059a2634554706feb5807ec2f30cc28cbe3aa4b1553710572e57d218174e0a736cfb7d6dd796073ab1690144880165a227863e8b366cf409128d97c83eefac13b50aba459de54a25fd4eff3c69ae89ceab4dbb383842ef936040a4be9dca7dbbabc60f0fb2266fe1ca2750b772e7c93eb9b02f4411f8ad5c180c4d525fd633d55c3e167dc27ee0cac801da12368e4abe1bd7b675c1a64d78d7852749e93eba5047ac73aa24bbdc3c8f5b5e311df6ca39df1300d3eb91cabf04d61ec9f94bf4125c21e31f738df51443a3512533a2e9f8abee19ceb2e4c8dfdfa12753e097b5c0c19d3f9735c4b326e85c66b939680a452e4be33e15951007bc47862e9e161515e40857348a41693d7beabbceabaa1f4cc2882d5ca4be67f147a19531bb0c6dcc3efb433785025b9aff6bf0c90e795cfe250c871b339d591875334ad2c74581b7ce7f4f6e436f37eb25bda7c5ea34141f6b42abef46d381f911008cde7d656df93066a4b78ee67b53f46c2b31f966196895064c7ba91b1fa63558dc60396678b12c3e2e01148b211bd9666d245ceea8490611f994eb98fc2ae18fb778df8a79eff94f332bdad851e181f90c20eecda7f41cb152a47b81cd6d136e6a7a827a8cb3b6db89c921deed3692a990704ad4f27f771b1bd388d475272447f522f293209e0ee1d61ad38618971cb90bb2ba2c9595fabc0ba0a1ec9bdfb09ebc99d2424e48e98b3dc6947b50e2d06f998d3e7df650abdeb014f2da4a0d62dbe669de5779e0d471d6d0833aadc9a847f729cc984f50de5b35472b696d0766f67f5e1fe6f29b7d6697933211f6c2a27bfe34b6aa36cd82cc359c684b23e7df791ea1b581e529b9917701364dc237898fc38fdb4ff21c33d51809ee9f4da9bbc674327003e9766402641401b055c11f469d6471af1890375ac9546e088433a9712e9c1408f26d53c067877a25bee969e0cc11276959153db4777b6eba6bb23226b799fb6c7953ca2bb114cadb7397946425ed625bb93663d61f9bc1df2af532e00bf0567eba4ebd9d98ee52699f4d38fe6a3ba13d413c65c557a7c120fee02c33f2e4f1647ced326e66205c7e192b3b1ecfca909c7c2d5bea5f19685f3a65b8ef2982c9228042729eee23a2e7fe9db0b3f12a0cb85015defe3099b54c0a8d7adfabd7b1726900fe1de27b0bee805553cdafa8c62a3c10d75094bd284219b31a389a8c4adbb02ad5e9f0bfddd188afc29b47ba5bd4deb7b1d6ee1bbf9e4f09e91ec17e8c490c2117871cad0c4a3a3d05ac9f82abdcf20e72fb2da7a15ad8cb045a2964aa0366d71f76c90cb3a5f3b9e1414708c028285dafffafae5b0c2edfe9f6bf39868562898bd26c0651da1e601e5d58b0f004d51e5a06976a2fda71a8f060d45f43db0cd57481e72416e2eb046ba01468defec7b060a72284774e9480cce07749c61b2d3a8ba8e12270130270e92864e1a2a968999e8502d1b229eb2c89959952351d4022f8d5b380f85595dd1f595f7467cba2076d9e627708280f12d5a5e6e3bd3d465ef7b519041fdde31746768255f4570853ccf9ce9457a7be40e4006781fb146315ac152729388934fa12a3b5c90a312c6bf995fee39a27deeb8bb8f52611c5c5b32988a771565d57e751d0488e16cba9ea7c4cce381679419133750aaf69ae686f651a8e5fb9a82d8b36f29ed00ee0c0f99345132157e78dd3330ff2fc9ab551d1ff26f0d5fc2d43b85fad869a7978a1966e93dc5a959f73da26929fd8b4e97b3910ce2aa92a859b90ff9dd5460e6c7b34303de6553cab2684858a4c2861d16c1b70c82eacba3627fe6189019ea31f305aef03144fecebc5349790b2604e2bfd22b55f99ddbd25b17f90af72fbbdfe43b40908617550135ad8cd1b59a5f3120a6fa4f67cb4d0976548113fe18820fe79bc144f5cda250ebe0f5b396b83ca71344ac2332a1b1270c2e96fb3daf81e6741bf000b3e9f8862fefdd94c368efb9a839efae7c9a1db88b58faf7ce301de61eb94b16a126cbd50dad2b70db7fa007fdc98085eb7da2696cea56ee32dc0c9a5cf4fc009c7a6a1d35b37b3d18ed9abbf0ba6d38404e102d097406e8aca4ed1697d03b8dd42a0743b372cc7212c12e38599b91d7b40e894cfdc8976c6154ba5a6e7fe244e65cbf3f350affb18f27f4975339abaf94a99fb206507d5cc931c509a3f0c1b106689a8e90611f520c298140598bc3d5b097619fb4be391f041b265133a57295cc9c9a83edea1e0750ec6d6bad3b845f03c88583b27b678d17438a4cad27b06c78af3f3651832288879a7a34e390554f561dcfd378fa727c02b1e2d230ad2dfc504ec44fdad5c8ef91610056e9a3a94b38c26e51e400e5738b0ae4aad91e13d5d5ec1c9eaab9b359660904f24c0d349ca7e223aa07811493963bc5118d3a991c6f31f71e4e7b2b5c66518e53ccb7b64e723003fe6cd7deb799a891ad81b054cd277af18d1cc130963a0dc14971ca69c504e990ddc12990d0faf32de8d601605dbb35761e6611ffe81758efa1e165d08b2ae1f74117e879289e8f1601a6ed6efce2aa28178f39817c8b92dd1a26c2e331bf652b6fc9165cf7bcb4c10c59bf75019b5af159dc5727621c9069be04c5b1543f5e45f43cfce3fb5cb1d2351ff03f62c4569237ecfad40b4f9e60a00d643333574352a2b6389cb3a272cb6e3a9280879455ec8b26c2737ea20693a1a45c0326992c202067d4e0c01e4c40e59129342f638ec3a4ff70d29a0dea3c0550d36e7aa123f693f22bcdb171e819eb8d0e522a6a49330f8bfd35aa4cd2e2d855395dcbbe2059044de477680ce737026fbdb869376bb732ed496ca11f896139e7715fd06744327ce617b9fec658f3df03bce10becd0bf9e8aec996b509bfb2bb157874cdb5d9fe208bcff31c524f24b95dd656d0594ff2df593259216394b06bc1426ae4bf3d8328c96222d2178a974eb6150b75bc7a8dfe196886eb8eaec1ba8eb972a0f24a7ef2174c489b6d7ead73de70997b1ff9e7afe3bad73235148266ecba0d40c6308988869569e3c14a70491cf163a9cf2d1e203d58aa8dd24b324f9fd67301ef5f4a14a60e17899c958c74617f1cfc334af0e0a85db30ac8bb8ed21158938f8e912761f66fde9dd9837e92c0140e629e159471615b4544bec1dfc7be35ea948391dab09fe7a385b2ea513858236ae1a837033da15d408c90c3e20a61809f12ba6bc9b32d3bdf7ac04333b58fa4635bd83e2dd369971", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) [ 2393.768565][ T5860] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2393.775265][ T5856] ipt_CLUSTERIP: Please specify destination IP 13:33:04 executing program 0: keyctl$negate(0xd, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', 0x0, &(0x7f0000000080)="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", 0xc00, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x400a828) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000140)="04ea", 0x2, r1) add_key$keyring(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) r3 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x20) 13:33:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x6000, 0xe5, &(0x7f0000000200)=""/229}, {0x100000, 0x36, &(0x7f0000000400)=""/54}, {0xa000, 0x96, &(0x7f0000000440)=""/150}, {0x0, 0x98, &(0x7f0000000500)=""/152}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) 13:33:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0xd0, 0x0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 13:33:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x6000, 0xe5, &(0x7f0000000200)=""/229}, {0x100000, 0x36, &(0x7f0000000400)=""/54}, {0xa000, 0x96, &(0x7f0000000440)=""/150}, {0x0, 0x98, &(0x7f0000000500)=""/152}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) 13:33:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdf3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160800180006ac0f00000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 2394.232721][ T5882] ipt_CLUSTERIP: Please specify destination IP 13:33:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x6000, 0xe5, &(0x7f0000000200)=""/229}, {0x100000, 0x36, &(0x7f0000000400)=""/54}, {0xa000, 0x96, &(0x7f0000000440)=""/150}, {0x0, 0x98, &(0x7f0000000500)=""/152}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) 13:33:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0xd0, 0x0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 13:33:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x22, 0x82d, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 13:33:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x0, &(0x7f0000000140)) getsockopt$inet_int(r1, 0x10d, 0xa6, 0x0, &(0x7f0000000000)) [ 2394.482958][ T5896] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. 13:33:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x6000, 0xe5, &(0x7f0000000200)=""/229}, {0x100000, 0x36, &(0x7f0000000400)=""/54}, {0xa000, 0x96, &(0x7f0000000440)=""/150}, {0x0, 0x98, &(0x7f0000000500)=""/152}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) [ 2394.538536][ T5898] ipt_CLUSTERIP: Please specify destination IP 13:33:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x6000, 0xe5, &(0x7f0000000200)=""/229}, {0x100000, 0x36, &(0x7f0000000400)=""/54}, {0xa000, 0x96, &(0x7f0000000440)=""/150}, {0x0, 0x98, &(0x7f0000000500)=""/152}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) 13:33:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0xd0, 0x0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 13:33:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x22, 0x82d, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 13:33:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x0, &(0x7f0000000140)) getsockopt$inet_int(r1, 0x10d, 0xa6, 0x0, &(0x7f0000000000)) 13:33:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdf3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160800180006ac0f00000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 2394.869942][ T5916] ipt_CLUSTERIP: Please specify destination IP 13:33:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x4, 0x0, [{0x6000, 0xe5, &(0x7f0000000200)=""/229}, {0x100000, 0x36, &(0x7f0000000400)=""/54}, {0xa000, 0x96, &(0x7f0000000440)=""/150}, {0x0, 0x98, &(0x7f0000000500)=""/152}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) 13:33:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0xfc}]}}}]}, 0x3c}}, 0x0) 13:33:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000300)={0x7}, 0x5) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0x400008bca) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x8, 'macvlan0\x00', {'vlan1\x00'}}) r2 = socket(0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x400008bca) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000200)={0x0, 0xc, [0x7ff, 0x1, 0x0]}) [ 2395.144765][ T5925] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. 13:33:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x22, 0x82d, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 13:33:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x0, &(0x7f0000000140)) getsockopt$inet_int(r1, 0x10d, 0xa6, 0x0, &(0x7f0000000000)) 13:33:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x0, &(0x7f0000000140)) getsockopt$inet_int(r1, 0x10d, 0xa6, 0x0, &(0x7f0000000000)) 13:33:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x1000000000a}}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000424000001800"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @broadcast}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmsg$key(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:33:07 executing program 1: unshare(0x4000400) r0 = socket$alg(0x26, 0x5, 0x0) close(r0) accept4$alg(r0, 0x0, 0x0, 0x0) 13:33:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x409}, 0x1c}}, 0x0) 13:33:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x22, 0x82d, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 13:33:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x409}, 0x1c}}, 0x0) 13:33:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x1000000000a}}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000424000001800"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @broadcast}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmsg$key(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:33:07 executing program 1: unshare(0x4000400) r0 = socket$alg(0x26, 0x5, 0x0) close(r0) accept4$alg(r0, 0x0, 0x0, 0x0) 13:33:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x409}, 0x1c}}, 0x0) 13:33:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000300)={0x7}, 0x5) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0x400008bca) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x8, 'macvlan0\x00', {'vlan1\x00'}}) r2 = socket(0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x400008bca) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000200)={0x0, 0xc, [0x7ff, 0x1, 0x0]}) 13:33:08 executing program 1: unshare(0x4000400) r0 = socket$alg(0x26, 0x5, 0x0) close(r0) accept4$alg(r0, 0x0, 0x0, 0x0) 13:33:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x409}, 0x1c}}, 0x0) 13:33:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080), 0x307}]) 13:33:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) 13:33:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x1000000000a}}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000424000001800"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @broadcast}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmsg$key(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 2397.323497][ T5984] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 13:33:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) 13:33:08 executing program 1: unshare(0x4000400) r0 = socket$alg(0x26, 0x5, 0x0) close(r0) accept4$alg(r0, 0x0, 0x0, 0x0) 13:33:08 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400080000f4ffffffbc7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bb501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) [ 2397.774165][ T5996] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 13:33:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000540)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "27ec3af3"}, 0x0, 0x0, @userptr}) 13:33:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) 13:33:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000300)={0x7}, 0x5) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0x400008bca) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x8, 'macvlan0\x00', {'vlan1\x00'}}) r2 = socket(0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x400008bca) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000200)={0x0, 0xc, [0x7ff, 0x1, 0x0]}) 13:33:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080), 0x307}]) 13:33:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x1000000000a}}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000424000001800"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003700)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @broadcast}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmsg$key(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 2398.444965][ T6008] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 13:33:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000540)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "27ec3af3"}, 0x0, 0x0, @userptr}) 13:33:09 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400080000f4ffffffbc7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bb501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) 13:33:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080), 0x307}]) 13:33:10 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400080000f4ffffffbc7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bb501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) 13:33:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000540)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "27ec3af3"}, 0x0, 0x0, @userptr}) 13:33:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) 13:33:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000300)={0x7}, 0x5) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0x400008bca) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x8, 'macvlan0\x00', {'vlan1\x00'}}) r2 = socket(0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x400008bca) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000200)={0x0, 0xc, [0x7ff, 0x1, 0x0]}) 13:33:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) 13:33:10 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400080000f4ffffffbc7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bb501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5"], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) [ 2399.671446][ T6040] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 13:33:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000540)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "27ec3af3"}, 0x0, 0x0, @userptr}) 13:33:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2400.174498][ T33] audit: type=1326 audit(1578490391.238:17429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6033 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45dd8a code=0x7ff00000 13:33:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r2}, 0x8) [ 2400.344515][ T33] audit: type=1326 audit(1578490391.268:17430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6033 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x414a21 code=0x7ff00000 [ 2400.367413][ T33] audit: type=1326 audit(1578490391.268:17431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6033 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x414a21 code=0x7ff00000 [ 2400.390105][ T33] audit: type=1326 audit(1578490391.278:17432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6033 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45af49 code=0x7ff00000 13:33:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x9}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @remote}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) listen(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 13:33:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:33:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080), 0x307}]) 13:33:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) 13:33:11 executing program 4: mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa50fe4e121196bfc, 0xffffffffffffffff, 0x0) 13:33:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2400.997859][ T33] audit: type=1326 audit(1578490392.058:17433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6077 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45dd8a code=0x7ff00000 [ 2401.021170][ T33] audit: type=1326 audit(1578490392.058:17434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6077 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x414a21 code=0x7ff00000 13:33:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) 13:33:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x81) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000040)) [ 2401.043726][ T33] audit: type=1326 audit(1578490392.088:17435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6077 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x414a21 code=0x7ff00000 [ 2401.066230][ T33] audit: type=1326 audit(1578490392.088:17436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6077 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45af49 code=0x7ff00000 13:33:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x4000200c}) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) dup2(r0, r4) 13:33:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x9}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @remote}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) listen(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 13:33:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:33:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) 13:33:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x4000200c}) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) dup2(r0, r4) 13:33:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x81) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000040)) 13:33:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x9}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @remote}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) listen(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 13:33:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) 13:33:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x4000200c}) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) dup2(r0, r4) 13:33:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x81) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000040)) 13:33:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x4000200c}) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) dup2(r0, r4) 13:33:13 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) [ 2402.143501][ T33] audit: type=1326 audit(1578490393.208:17437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6120 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45dd8a code=0x7ff00000 13:33:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x81) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000040)) [ 2402.261383][ T33] audit: type=1326 audit(1578490393.238:17438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6120 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x414a21 code=0x7ff00000 13:33:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x4000200c}) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) dup2(r0, r4) 13:33:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x9}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @remote}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) listen(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 13:33:13 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) 13:33:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x4000200c}) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) dup2(r0, r4) 13:33:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x9}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @remote}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) listen(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 13:33:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x4000200c}) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) dup2(r0, r4) 13:33:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) 13:33:14 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001c00), 0x64}, 0x0) 13:33:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) syz_open_dev$video(0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x80000001, 0x1}) 13:33:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x98, 0x98, 0x0, 0x98, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth1_to_hsr\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0xffff, 0xfc}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 13:33:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x9}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @remote}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) listen(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 13:33:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60150000001406000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) [ 2403.399885][ T6183] SET target dimension over the limit! [ 2403.450076][ T6190] SET target dimension over the limit! [ 2403.532944][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2403.539199][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2403.545660][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2403.551847][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2403.558419][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2403.564641][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:33:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) syz_open_dev$video(0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x80000001, 0x1}) 13:33:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x98, 0x98, 0x0, 0x98, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth1_to_hsr\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0xffff, 0xfc}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 13:33:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x9}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @remote}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) listen(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 13:33:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60150000001406000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) [ 2403.957327][ T6205] SET target dimension over the limit! 13:33:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) syz_open_dev$video(0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x80000001, 0x1}) 13:33:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x98, 0x98, 0x0, 0x98, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth1_to_hsr\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0xffff, 0xfc}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 13:33:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 13:33:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2279, 0x0) 13:33:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60150000001406000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) [ 2404.421473][ T6228] SET target dimension over the limit! 13:33:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) syz_open_dev$video(0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x80000001, 0x1}) 13:33:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffdb5, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0xfe3b}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc8e}, 0x0) 13:33:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2279, 0x0) 13:33:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x98, 0x98, 0x0, 0x98, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth1_to_hsr\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0xffff, 0xfc}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 13:33:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 13:33:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60150000001406000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 13:33:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2279, 0x0) [ 2404.935476][ T6255] SET target dimension over the limit! 13:33:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffdb5, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0xfe3b}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc8e}, 0x0) 13:33:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 13:33:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffdb5, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0xfe3b}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc8e}, 0x0) 13:33:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x20, 0x1a, 0x201, 0x0, 0x0, {0x90181}}, 0x20}}, 0x0) 13:33:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2279, 0x0) 13:33:16 executing program 3: unshare(0x400) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x22a41) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000080)) [ 2405.424606][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2405.460397][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:33:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 13:33:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffdb5, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0xfe3b}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc8e}, 0x0) 13:33:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffdb5, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0xfe3b}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc8e}, 0x0) 13:33:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x20, 0x1a, 0x201, 0x0, 0x0, {0x90181}}, 0x20}}, 0x0) 13:33:16 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) syz_open_dev$vcsa(0x0, 0x5, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x210100, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) 13:33:16 executing program 3: unshare(0x400) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x22a41) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000080)) [ 2405.828826][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:33:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffdb5, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0xfe3b}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc8e}, 0x0) 13:33:16 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = open(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x200000000003, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r6, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x103000000000000) [ 2405.917893][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 13:33:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffdb5, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0xfe3b}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc8e}, 0x0) [ 2406.196424][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2406.295985][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2406.311234][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2406.368554][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state 13:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x20, 0x1a, 0x201, 0x0, 0x0, {0x90181}}, 0x20}}, 0x0) 13:33:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000200)='/dev/md0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c) 13:33:17 executing program 3: unshare(0x400) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x22a41) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000080)) [ 2406.578181][ T6298] device bridge_slave_1 left promiscuous mode [ 2406.588560][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 2406.757425][ T6298] bond0: (slave bond_slave_0): Releasing backup interface 13:33:17 executing program 3: unshare(0x400) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x22a41) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000080)) [ 2406.883615][ T6298] bond0: (slave bond_slave_1): Releasing backup interface 13:33:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x40000) [ 2407.147169][ T6298] team0: Port device team_slave_0 removed [ 2407.335417][ T6298] team0: Port device team_slave_1 removed 13:33:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x40000) [ 2407.418304][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2407.506888][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2407.533388][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2407.549685][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 13:33:18 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x24000000fffd}) [ 2407.557770][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:33:18 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) syz_open_dev$vcsa(0x0, 0x5, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x210100, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) 13:33:18 executing program 1: pselect6(0x1cd, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x800000000000}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 13:33:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x20, 0x1a, 0x201, 0x0, 0x0, {0x90181}}, 0x20}}, 0x0) 13:33:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000200)='/dev/md0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c) 13:33:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x40000) 13:33:18 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x24000000fffd}) [ 2408.052649][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2408.116652][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2408.399617][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2408.512311][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2408.527801][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:33:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x40000) 13:33:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000200)='/dev/md0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c) 13:33:19 executing program 1: pselect6(0x1cd, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x800000000000}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 13:33:19 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x24000000fffd}) 13:33:19 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000000)=0x4e) 13:33:19 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4e96e1", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x2, 0x0, 0x0, 0x0, 0x0, @rand_addr='r\x00'}}}}}}, 0x0) 13:33:20 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) syz_open_dev$vcsa(0x0, 0x5, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x210100, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) 13:33:20 executing program 1: pselect6(0x1cd, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x800000000000}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 13:33:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x24000000fffd}) 13:33:20 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000000)=0x4e) 13:33:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000200)='/dev/md0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c) 13:33:20 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4e96e1", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x2, 0x0, 0x0, 0x0, 0x0, @rand_addr='r\x00'}}}}}}, 0x0) [ 2409.455536][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 13:33:20 executing program 1: pselect6(0x1cd, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x800000000000}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 13:33:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000030c00020008000e0008000000"], 0x3c}}, 0x0) 13:33:20 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4e96e1", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x2, 0x0, 0x0, 0x0, 0x0, @rand_addr='r\x00'}}}}}}, 0x0) [ 2409.671320][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:33:20 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000000)=0x4e) [ 2409.751043][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2409.765096][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:33:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) pipe(0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) pipe(&(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) pipe(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x2, 0xb, 0x4, 0xe000, 0x5, {0x77359400}, {0x0, 0xc, 0x3, 0x0, 0x2, 0x9, "ac4853d5"}, 0x80000000, 0x0, @fd, 0x5}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) pipe(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6}}, 0x0) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 13:33:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x2000000c0ffffff}) [ 2410.068747][ T6401] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 2410.078496][ T6401] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 2410.460930][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state 13:33:21 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4e96e1", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x2, 0x0, 0x0, 0x0, 0x0, @rand_addr='r\x00'}}}}}}, 0x0) 13:33:21 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) syz_open_dev$vcsa(0x0, 0x5, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x210100, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) 13:33:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000030c00020008000e0008000000"], 0x3c}}, 0x0) 13:33:21 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000000)=0x4e) [ 2410.579218][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2410.586541][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state 13:33:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x100000894b, &(0x7f00000001c0)) 13:33:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x80140912, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r3, 0x80140912, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000300)={'\x00', &(0x7f00000005c0)=ANY=[@ANYPTR]}) pipe2(&(0x7f0000000380), 0x84800) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) [ 2411.042576][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.048848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.055401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.061630][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.068333][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.074690][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:33:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7c8ff08b"}, 0x0, 0x0, @planes=0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="58610fb456a34063387c130d0984fd0839c9190cd39035c722aacf7f0d9781c1cbf0d9be8ce40568fb4d22844e2b4d25b7c3b2d53be5e60b94a9b388c41c801bce", 0x41}, {&(0x7f0000000180)="b6232b8d005b899d55a7854ee441bbb3aeb6cd48f1581d35348c46f3eed5d9803e42266dcef8ac00b4b59ea306807c609a03", 0x32}], 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2411.223367][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 2411.391980][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2411.399316][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2411.414843][ T6421] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 2411.423453][ T6421] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 2411.435397][ T6427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 13:33:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x100000894b, &(0x7f00000001c0)) [ 2411.571593][ T6427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2411.586433][ T6427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2411.594500][ T6427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2411.653100][ T6434] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 13:33:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x100000894b, &(0x7f00000001c0)) 13:33:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x2000000c0ffffff}) 13:33:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x80140912, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r3, 0x80140912, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000300)={'\x00', &(0x7f00000005c0)=ANY=[@ANYPTR]}) pipe2(&(0x7f0000000380), 0x84800) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) 13:33:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000030c00020008000e0008000000"], 0x3c}}, 0x0) 13:33:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x80140912, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r3, 0x80140912, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000300)={'\x00', &(0x7f00000005c0)=ANY=[@ANYPTR]}) pipe2(&(0x7f0000000380), 0x84800) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) [ 2412.082813][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.089279][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.095916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.102382][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:33:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x100000894b, &(0x7f00000001c0)) 13:33:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x2000000c0ffffff}) [ 2412.351649][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.475274][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2412.485268][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.492600][T10830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2412.510671][ T6460] netlink: 'syz-executor.5': attribute type 14 has an invalid length. 13:33:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x5, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2412.519603][ T6460] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 2412.531085][ T6465] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 13:33:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000030c00020008000e0008000000"], 0x3c}}, 0x0) 13:33:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x2000000c0ffffff}) 13:33:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x80140912, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r3, 0x80140912, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000300)={'\x00', &(0x7f00000005c0)=ANY=[@ANYPTR]}) pipe2(&(0x7f0000000380), 0x84800) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) [ 2412.961775][ T6477] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 2412.996232][ T6485] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 2413.004950][ T6485] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) 13:33:24 executing program 0: r0 = socket$kcm(0xa, 0x522000000003, 0x11) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0}, 0x0) 13:33:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0xffffff57) 13:33:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x80140912, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r3, 0x80140912, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000300)={'\x00', &(0x7f00000005c0)=ANY=[@ANYPTR]}) pipe2(&(0x7f0000000380), 0x84800) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) 13:33:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x2000000c0ffffff}) [ 2413.524395][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 2413.614836][ T6495] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 13:33:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x80140912, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r3, 0x80140912, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000300)={'\x00', &(0x7f00000005c0)=ANY=[@ANYPTR]}) pipe2(&(0x7f0000000380), 0x84800) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) 13:33:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x2000000c0ffffff}) [ 2413.858921][ T6513] netlink: 'syz-executor.1': attribute type 22 has an invalid length. 13:33:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001a0002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3a073ab87e54d66704d26547290000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc37, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0000020"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6841}}, 0x20}}, 0x0) [ 2413.977103][ T6521] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 13:33:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r2, 0x80140912, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRAGET(r3, 0x80140912, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f0000000300)={'\x00', &(0x7f00000005c0)=ANY=[@ANYPTR]}) pipe2(&(0x7f0000000380), 0x84800) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) [ 2414.069196][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2414.079118][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 2414.086449][T10830] bridge0: port 1(bridge_slave_0) entered forwarding state 13:33:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 13:33:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x2000000c0ffffff}) [ 2414.185662][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:33:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0xffffff57) [ 2414.299833][ T6534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:33:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0xc008aec1, &(0x7f0000000400)=0x6) [ 2414.477215][ T6545] binder: 6540:6545 ioctl 8912 0 returned -22 13:33:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001a0002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3a073ab87e54d66704d26547290000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc37, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0000020"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6841}}, 0x20}}, 0x0) [ 2414.540082][ T6550] binder: 6540:6550 ioctl 8912 0 returned -22 13:33:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 13:33:25 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, &(0x7f0000001680), 0x2) [ 2414.784341][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2414.828838][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2414.858629][ T6568] binder: 6567:6568 ioctl 8912 0 returned -22 13:33:26 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000000)={'macvlan0\x00', @ifru_addrs=@sco}) 13:33:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001a0002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3a073ab87e54d66704d26547290000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc37, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0000020"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6841}}, 0x20}}, 0x0) 13:33:26 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, &(0x7f0000001680), 0x2) 13:33:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 2415.190500][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:33:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f", 0x1}], 0x1) 13:33:26 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000000)={'macvlan0\x00', @ifru_addrs=@sco}) 13:33:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0xffffff57) [ 2415.419100][ T6588] binder: 6587:6588 ioctl 8912 0 returned -22 13:33:26 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, &(0x7f0000001680), 0x2) 13:33:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001a0002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3a073ab87e54d66704d26547290000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc37, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0000020"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6841}}, 0x20}}, 0x0) 13:33:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f", 0x1}], 0x1) 13:33:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 13:33:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0xffffff57) [ 2415.728958][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:33:26 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000000)={'macvlan0\x00', @ifru_addrs=@sco}) 13:33:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f", 0x1}], 0x1) 13:33:27 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, &(0x7f0000001680), 0x2) 13:33:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 13:33:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x800, 0x800}, 0x240) 13:33:27 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000000)={'macvlan0\x00', @ifru_addrs=@sco}) 13:33:27 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) 13:33:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f", 0x1}], 0x1) [ 2416.337017][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:33:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x800, 0x800}, 0x240) 13:33:27 executing program 2: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000b375b73d8ffa829ff33a8e51c3214c2cd7a35dfadebb3ebe39d6d64ec8753e4b6ba483a68ed0e625e42fc0810145f4461afc", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000004c0)={r4, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000000), 0x4) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x9, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r10, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r11, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) unshare(0x60020000) 13:33:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x800, 0x800}, 0x240) 13:33:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0xdba7a35bca832611}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:33:28 executing program 1: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @remote, {[@timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 13:33:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) [ 2417.074868][ T6651] IPVS: ftp: loaded support on port[0] = 21 13:33:28 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x800, 0x800}, 0x240) 13:33:28 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, &(0x7f00007adff0)={0x77359400}, 0x8) open$dir(&(0x7f0000000040)='./file0\x00', 0x841, 0x0) 13:33:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:33:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6}, 0x98) 13:33:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0xdba7a35bca832611}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2417.855282][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:33:29 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, &(0x7f00007adff0)={0x77359400}, 0x8) open$dir(&(0x7f0000000040)='./file0\x00', 0x841, 0x0) [ 2417.904118][T12703] tipc: TX() has been purged, node left! 13:33:29 executing program 2: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000b375b73d8ffa829ff33a8e51c3214c2cd7a35dfadebb3ebe39d6d64ec8753e4b6ba483a68ed0e625e42fc0810145f4461afc", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000004c0)={r4, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000000), 0x4) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x9, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r10, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r11, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) unshare(0x60020000) 13:33:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0xdba7a35bca832611}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:33:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6}, 0x98) 13:33:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:33:29 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, &(0x7f00007adff0)={0x77359400}, 0x8) open$dir(&(0x7f0000000040)='./file0\x00', 0x841, 0x0) [ 2418.455853][ T6699] IPVS: ftp: loaded support on port[0] = 21 13:33:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 13:33:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6}, 0x98) 13:33:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0xdba7a35bca832611}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:33:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:33:30 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, &(0x7f00007adff0)={0x77359400}, 0x8) open$dir(&(0x7f0000000040)='./file0\x00', 0x841, 0x0) 13:33:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6}, 0x98) 13:33:30 executing program 2: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000b375b73d8ffa829ff33a8e51c3214c2cd7a35dfadebb3ebe39d6d64ec8753e4b6ba483a68ed0e625e42fc0810145f4461afc", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000004c0)={r4, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000000), 0x4) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x9, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r10, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r11, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) unshare(0x60020000) [ 2419.514523][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:33:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:33:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100000000000000075d2dd15b6210d53e", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 13:33:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:33:31 executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) [ 2420.105774][ T6747] IPVS: ftp: loaded support on port[0] = 21 13:33:31 executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) 13:33:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 13:33:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:33:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x7}]}}}]}, 0x3c}}, 0x0) 13:33:31 executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) 13:33:31 executing program 2: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000b375b73d8ffa829ff33a8e51c3214c2cd7a35dfadebb3ebe39d6d64ec8753e4b6ba483a68ed0e625e42fc0810145f4461afc", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000004c0)={r4, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000000), 0x4) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x9, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r10, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r11, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) unshare(0x60020000) [ 2420.836666][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:33:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 2420.906778][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:33:32 executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name, 0x10) [ 2421.362863][ T6788] IPVS: ftp: loaded support on port[0] = 21 13:33:32 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={[], [], @loopback}, @rand_addr="0742466c191aa8c3e80a425b0a1456bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c20082}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2000000000000022, 0x2, 0x10000000000002) dup3(r4, r1, 0x0) io_submit(r0, 0x2000000000000299, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040)}]) [ 2421.530943][ T6781] validate_nla: 1 callbacks suppressed [ 2421.530971][ T6781] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 2421.710878][ T6802] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 2421.756007][ T6781] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 2422.692261][T12703] tipc: TX() has been purged, node left! 13:33:33 executing program 5: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x30, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 13:33:33 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000080), 0x146da8a7) 13:33:33 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x0, @empty=0x2}], 0x3c) 13:33:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x7}]}}}]}, 0x3c}}, 0x0) 13:33:33 executing program 2: rt_sigaction(0x40, &(0x7f0000000100)={&(0x7f0000000000)="c483f56d57df0f830700c402bd9c0a2e410f42a9a2000000652640801ae40f63f40f7e6a00c4c39d7a1b00410f71f51a2e0f88a1000000", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/191, 0xbf}], 0x1, 0x0) 13:33:33 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={[], [], @loopback}, @rand_addr="0742466c191aa8c3e80a425b0a1456bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c20082}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2000000000000022, 0x2, 0x10000000000002) dup3(r4, r1, 0x0) io_submit(r0, 0x2000000000000299, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040)}]) [ 2422.892142][T12703] tipc: TX() has been purged, node left! [ 2422.967184][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:33:34 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x0, @empty=0x2}], 0x3c) 13:33:34 executing program 2: rt_sigaction(0x40, &(0x7f0000000100)={&(0x7f0000000000)="c483f56d57df0f830700c402bd9c0a2e410f42a9a2000000652640801ae40f63f40f7e6a00c4c39d7a1b00410f71f51a2e0f88a1000000", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/191, 0xbf}], 0x1, 0x0) 13:33:34 executing program 5: unshare(0x4000400) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 2423.030937][ T6818] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 2423.052277][T12703] tipc: TX() has been purged, node left! 13:33:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000080), 0x146da8a7) 13:33:34 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={[], [], @loopback}, @rand_addr="0742466c191aa8c3e80a425b0a1456bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c20082}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2000000000000022, 0x2, 0x10000000000002) dup3(r4, r1, 0x0) io_submit(r0, 0x2000000000000299, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040)}]) 13:33:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x7}]}}}]}, 0x3c}}, 0x0) 13:33:34 executing program 2: rt_sigaction(0x40, &(0x7f0000000100)={&(0x7f0000000000)="c483f56d57df0f830700c402bd9c0a2e410f42a9a2000000652640801ae40f63f40f7e6a00c4c39d7a1b00410f71f51a2e0f88a1000000", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/191, 0xbf}], 0x1, 0x0) 13:33:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000080), 0x146da8a7) 13:33:34 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x0, @empty=0x2}], 0x3c) [ 2423.609273][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:33:34 executing program 5: unshare(0x4000400) recvmsg(0xffffffffffffffff, 0x0, 0x0) 13:33:34 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={[], [], @loopback}, @rand_addr="0742466c191aa8c3e80a425b0a1456bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c20082}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2000000000000022, 0x2, 0x10000000000002) dup3(r4, r1, 0x0) io_submit(r0, 0x2000000000000299, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040)}]) [ 2423.712550][ T6851] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 13:33:34 executing program 2: rt_sigaction(0x40, &(0x7f0000000100)={&(0x7f0000000000)="c483f56d57df0f830700c402bd9c0a2e410f42a9a2000000652640801ae40f63f40f7e6a00c4c39d7a1b00410f71f51a2e0f88a1000000", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/191, 0xbf}], 0x1, 0x0) 13:33:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000080), 0x146da8a7) 13:33:35 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x0, @empty=0x2}], 0x3c) 13:33:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x7}]}}}]}, 0x3c}}, 0x0) 13:33:35 executing program 5: unshare(0x4000400) recvmsg(0xffffffffffffffff, 0x0, 0x0) 13:33:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x14, 0x5, [@IFLA_BRPORT_STATE={0x8}, @IFLA_BRPORT_PRIORITY={0x8}]}}}]}, 0x4c}}, 0x0) [ 2424.262173][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:33:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x146}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000040600000039dc0724bc799d26fc8a9940b5e18428a09260bbb27cdbe1903eac54ecd10720329349b6305b93dc447e4b908c96ed056d9251a2"], 0x8) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 2424.356875][ T6873] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 13:33:35 executing program 5: unshare(0x4000400) recvmsg(0xffffffffffffffff, 0x0, 0x0) 13:33:35 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x102, 0x0) 13:33:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000201d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) 13:33:35 executing program 1: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000001a40)={0x0, 0x0, {0xef5}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 13:33:35 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x69bf) 13:33:35 executing program 5: clock_nanosleep(0x7fffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 13:33:35 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x102, 0x0) 13:33:36 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000201d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) 13:33:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x69bf) 13:33:36 executing program 5: clock_nanosleep(0x7fffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 13:33:36 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x102, 0x0) 13:33:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x146}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000040600000039dc0724bc799d26fc8a9940b5e18428a09260bbb27cdbe1903eac54ecd10720329349b6305b93dc447e4b908c96ed056d9251a2"], 0x8) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 13:33:38 executing program 5: clock_nanosleep(0x7fffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 13:33:38 executing program 1: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000001a40)={0x0, 0x0, {0xef5}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 13:33:38 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000201d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) 13:33:38 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x69bf) 13:33:38 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x102, 0x0) 13:33:38 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x69bf) 13:33:38 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000300)=""/246) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000201d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) 13:33:38 executing program 4: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000001a40)={0x0, 0x0, {0xef5}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 13:33:38 executing program 5: clock_nanosleep(0x7fffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 13:33:38 executing program 1: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000001a40)={0x0, 0x0, {0xef5}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 13:33:39 executing program 4: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000001a40)={0x0, 0x0, {0xef5}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 13:33:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x146}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000040600000039dc0724bc799d26fc8a9940b5e18428a09260bbb27cdbe1903eac54ecd10720329349b6305b93dc447e4b908c96ed056d9251a2"], 0x8) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 13:33:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 13:33:41 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x14001, 0x0, 0x0) 13:33:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x120, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x20}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 13:33:41 executing program 1: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000001a40)={0x0, 0x0, {0xef5}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 13:33:41 executing program 4: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000001a40)={0x0, 0x0, {0xef5}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 13:33:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x120, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x20}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 13:33:41 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x14001, 0x0, 0x0) 13:33:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000000004, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000040)) 13:33:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 13:33:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:33:42 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x14001, 0x0, 0x0) 13:33:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x120, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x20}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 13:33:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100000000000000075d2dd15b6210d53eed19bc0080000033270c6a98d91c22def1125d7b1e821039a85ad8b91cea336a1b57f45a0788e3aba04551e4a522e15c7ce71553059a5ef83c2ab06a52fcfce7c467c7e6260464a4770e41f0fa8ae7891e20e1780931f3faf450b02b83048c1a9efa4a7c790000cbdd7bcd17db6d80a0b70ce886da58743a43df1059f6ef39a8b6fa457751e4e39d8b5f20df8c3da9e98b6410", 0x146}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000040600000039dc0724bc799d26fc8a9940b5e18428a09260bbb27cdbe1903eac54ecd10720329349b6305b93dc447e4b908c96ed056d9251a2"], 0x8) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 13:33:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8, 0x4, {0xfe}}]}, 0x1c}}, 0x0) 13:33:44 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x14001, 0x0, 0x0) 13:33:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 13:33:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x120, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x20}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 13:33:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:33:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:33:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3c) 13:33:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8, 0x4, {0xfe}}]}, 0x1c}}, 0x0) 13:33:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 13:33:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8, 0x4, {0xfe}}]}, 0x1c}}, 0x0) 13:33:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="1ff0fc2f375106aadef36e36684d65ec", 0x0, 0x0, 0x2, 0x3}, 0x20) 13:33:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:33:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8, 0x4, {0xfe}}]}, 0x1c}}, 0x0) 13:33:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="1ff0fc2f375106aadef36e36684d65ec", 0x0, 0x0, 0x2, 0x3}, 0x20) 13:33:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x145984) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) 13:33:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:33:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="1ff0fc2f375106aadef36e36684d65ec", 0x0, 0x0, 0x2, 0x3}, 0x20) 13:33:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="1ff0fc2f375106aadef36e36684d65ec", 0x0, 0x0, 0x2, 0x3}, 0x20) 13:33:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x4}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x40}}, 0x0) [ 2437.231300][ T7090] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2437.280721][ T7092] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 13:33:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x4}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x40}}, 0x0) [ 2437.484806][ T7096] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 13:33:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x4}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x40}}, 0x0) [ 2437.638854][ T7099] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 13:33:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x4}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x40}}, 0x0) [ 2437.757998][ T7102] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 13:33:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:33:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:33:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a2", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0xffffff92}], 0x2, 0x0, 0x59d}, 0x0) 13:33:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x1d, 0x0, 0x1) 13:33:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)='X', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0xffffffffffffffff, &(0x7f0000000000)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) 13:33:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000080)=0x8, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x9) clone(0x78424100, 0x0, 0x0, 0x0, 0x0) 13:33:56 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @ipv4={[], [], @dev}}, @in={0x2, 0x0, @multicast1}], 0x2c) 13:33:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000), 0x6b) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f000000effc)=0x90) 13:33:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000), 0x6b) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f000000effc)=0x90) 13:33:56 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x3c, 0x0, 0x0) 13:33:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x1d, 0x0, 0x1) 13:33:56 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @ipv4={[], [], @dev}}, @in={0x2, 0x0, @multicast1}], 0x2c) 13:33:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000080)=0x8, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x9) clone(0x78424100, 0x0, 0x0, 0x0, 0x0) 13:33:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)='X', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0xffffffffffffffff, &(0x7f0000000000)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) 13:33:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x1d, 0x0, 0x1) 13:33:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000), 0x6b) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f000000effc)=0x90) 13:33:56 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x3c, 0x0, 0x0) 13:33:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)='X', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0xffffffffffffffff, &(0x7f0000000000)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) 13:33:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000080)=0x8, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x9) clone(0x78424100, 0x0, 0x0, 0x0, 0x0) 13:33:56 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @ipv4={[], [], @dev}}, @in={0x2, 0x0, @multicast1}], 0x2c) 13:33:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x1d, 0x0, 0x1) 13:33:57 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x3c, 0x0, 0x0) 13:33:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000), 0x6b) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f000000effc)=0x90) 13:33:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)='X', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0xffffffffffffffff, &(0x7f0000000000)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) 13:33:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000080)=0x8, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x9) clone(0x78424100, 0x0, 0x0, 0x0, 0x0) 13:33:57 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1, 0xa}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 13:33:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x6}, {0x3, 0xfffd}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) 13:33:57 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @ipv4={[], [], @dev}}, @in={0x2, 0x0, @multicast1}], 0x2c) 13:33:57 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x3c, 0x0, 0x0) 13:33:57 executing program 1: socket(0x1e, 0x2000000000000805, 0x0) r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) socket$inet(0x2, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') socket$inet(0x2, 0x3, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 13:33:57 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000000080)=0x18e) 13:33:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x290, 0x290, 0x290, 0x290, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'veth1_to_bridge\x00', {0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffe00, 0x80000001}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 13:33:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x6}, {0x3, 0xfffd}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) 13:33:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x30}}, 0x0) 13:33:57 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1, 0xa}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) [ 2446.879442][ T7213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2446.956577][ T7220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2446.968642][ T7220] net_ratelimit: 8 callbacks suppressed [ 2446.968677][ T7220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:33:58 executing program 1: socket(0x1e, 0x2000000000000805, 0x0) r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) socket$inet(0x2, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') socket$inet(0x2, 0x3, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 13:33:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x6}, {0x3, 0xfffd}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) 13:33:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000000080)=0x18e) 13:33:58 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1b5d509b00000000003f00000000000000000000380000006358edd4e86c07736b5feb3b"], 0x24) [ 2447.147719][ T7220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2447.159254][ T7220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:33:58 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1, 0xa}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 13:33:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x30}}, 0x0) 13:33:58 executing program 1: socket(0x1e, 0x2000000000000805, 0x0) r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) socket$inet(0x2, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') socket$inet(0x2, 0x3, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 13:33:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x6}, {0x3, 0xfffd}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1) 13:33:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000000080)=0x18e) 13:33:58 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1, 0xa}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 13:33:58 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 2447.658485][ T7245] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2447.670236][ T7245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:33:58 executing program 1: socket(0x1e, 0x2000000000000805, 0x0) r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) socket$inet(0x2, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') socket$inet(0x2, 0x3, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 13:33:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 13:33:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc744240600000000b9800000c00f3235002000000f305ef2f1ed2959ed2959360f06c4c18d72d68366baa100ed", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f00000000c0)={0x0, {0x80}}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000100)={{0x0, 0xffff}, 0x22}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:33:59 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000000080)=0x18e) 13:33:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x30}}, 0x0) 13:33:59 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 2448.168232][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2448.179397][ T7273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:33:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7fff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 13:33:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x30}}, 0x0) 13:33:59 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="66696054f00460ccca55037391512b64a66c74657200000000000000000000000000000000000000000000000000000e0000000400000038040000f0000000f00000000000000078020000000000006803000068030000680300006803000068030000040000006ef72b0672aad66f1eca1ed281abd609cd5f41fdd2", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000fe8000000000000000000000000000bb7f000000ffffff0000ffffff00000000ffffffffc4fde65b00000000000000006e657464657673696d3000000000000069726c616e3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000005c000003c50000000000000000000000000000004001880100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000008100000002000000ffffffff0003000048006473740000000000000000000000000000000000000000000000000000000600000097010600070002000200ff07c70a00010600060004000001270e00040900050001000a00480049444c4554494d45520000000000000000000000000000000000000000000300000073797a30000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c800f00000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002ff7f0800070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x498) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000740)={0x5ef, 0xaf1, 0x1f, 0xa00, 0x1, 0xffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffffffffffd, @rand_addr="e4f016a1b762874dc1c1e1a1e1bd465f"}, r3}}, 0x30) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8002, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:33:59 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 13:33:59 executing program 3: syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x60, &(0x7f00000000c0)={0x0, @multicast2, 0x0, 0x0, 'lblc\x00', 0x0, 0x0, 0x2b}, 0x35e) [ 2448.877295][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2448.889530][ T7288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:34:00 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(0x0) 13:34:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7fff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 13:34:00 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="66696054f00460ccca55037391512b64a66c74657200000000000000000000000000000000000000000000000000000e0000000400000038040000f0000000f00000000000000078020000000000006803000068030000680300006803000068030000040000006ef72b0672aad66f1eca1ed281abd609cd5f41fdd2", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000fe8000000000000000000000000000bb7f000000ffffff0000ffffff00000000ffffffffc4fde65b00000000000000006e657464657673696d3000000000000069726c616e3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000005c000003c50000000000000000000000000000004001880100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000008100000002000000ffffffff0003000048006473740000000000000000000000000000000000000000000000000000000600000097010600070002000200ff07c70a00010600060004000001270e00040900050001000a00480049444c4554494d45520000000000000000000000000000000000000000000300000073797a30000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c800f00000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002ff7f0800070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x498) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000740)={0x5ef, 0xaf1, 0x1f, 0xa00, 0x1, 0xffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffffffffffd, @rand_addr="e4f016a1b762874dc1c1e1a1e1bd465f"}, r3}}, 0x30) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8002, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:34:00 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 13:34:00 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(0x0) 13:34:00 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(0x0) 13:34:00 executing program 3: syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x60, &(0x7f00000000c0)={0x0, @multicast2, 0x0, 0x0, 'lblc\x00', 0x0, 0x0, 0x2b}, 0x35e) 13:34:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7fff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 13:34:00 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="66696054f00460ccca55037391512b64a66c74657200000000000000000000000000000000000000000000000000000e0000000400000038040000f0000000f00000000000000078020000000000006803000068030000680300006803000068030000040000006ef72b0672aad66f1eca1ed281abd609cd5f41fdd2", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000fe8000000000000000000000000000bb7f000000ffffff0000ffffff00000000ffffffffc4fde65b00000000000000006e657464657673696d3000000000000069726c616e3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000005c000003c50000000000000000000000000000004001880100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000008100000002000000ffffffff0003000048006473740000000000000000000000000000000000000000000000000000000600000097010600070002000200ff07c70a00010600060004000001270e00040900050001000a00480049444c4554494d45520000000000000000000000000000000000000000000300000073797a30000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c800f00000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002ff7f0800070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x498) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000740)={0x5ef, 0xaf1, 0x1f, 0xa00, 0x1, 0xffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffffffffffd, @rand_addr="e4f016a1b762874dc1c1e1a1e1bd465f"}, r3}}, 0x30) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8002, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:34:00 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(0x0) 13:34:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7fff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 13:34:01 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(0x0) 13:34:01 executing program 3: syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x60, &(0x7f00000000c0)={0x0, @multicast2, 0x0, 0x0, 'lblc\x00', 0x0, 0x0, 0x2b}, 0x35e) 13:34:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7fff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 13:34:01 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="66696054f00460ccca55037391512b64a66c74657200000000000000000000000000000000000000000000000000000e0000000400000038040000f0000000f00000000000000078020000000000006803000068030000680300006803000068030000040000006ef72b0672aad66f1eca1ed281abd609cd5f41fdd2", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000fe8000000000000000000000000000bb7f000000ffffff0000ffffff00000000ffffffffc4fde65b00000000000000006e657464657673696d3000000000000069726c616e3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000005c000003c50000000000000000000000000000004001880100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000008100000002000000ffffffff0003000048006473740000000000000000000000000000000000000000000000000000000600000097010600070002000200ff07c70a00010600060004000001270e00040900050001000a00480049444c4554494d45520000000000000000000000000000000000000000000300000073797a30000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c800f00000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002ff7f0800070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x498) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000740)={0x5ef, 0xaf1, 0x1f, 0xa00, 0x1, 0xffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffffffffffd, @rand_addr="e4f016a1b762874dc1c1e1a1e1bd465f"}, r3}}, 0x30) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8002, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:34:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7fff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 13:34:01 executing program 3: syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x60, &(0x7f00000000c0)={0x0, @multicast2, 0x0, 0x0, 'lblc\x00', 0x0, 0x0, 0x2b}, 0x35e) 13:34:01 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(0x0) 13:34:01 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(0x0) 13:34:01 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="66696054f00460ccca55037391512b64a66c74657200000000000000000000000000000000000000000000000000000e0000000400000038040000f0000000f00000000000000078020000000000006803000068030000680300006803000068030000040000006ef72b0672aad66f1eca1ed281abd609cd5f41fdd2", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000fe8000000000000000000000000000bb7f000000ffffff0000ffffff00000000ffffffffc4fde65b00000000000000006e657464657673696d3000000000000069726c616e3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000005c000003c50000000000000000000000000000004001880100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000008100000002000000ffffffff0003000048006473740000000000000000000000000000000000000000000000000000000600000097010600070002000200ff07c70a00010600060004000001270e00040900050001000a00480049444c4554494d45520000000000000000000000000000000000000000000300000073797a30000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c800f00000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002ff7f0800070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x498) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000740)={0x5ef, 0xaf1, 0x1f, 0xa00, 0x1, 0xffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffffffffffd, @rand_addr="e4f016a1b762874dc1c1e1a1e1bd465f"}, r3}}, 0x30) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8002, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:34:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd8f, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a28093020603e1e8a20001000000003900090035000802060000001900070004000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492596, 0x0) 13:34:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) 13:34:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180)=0x7fff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 13:34:01 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="66696054f00460ccca55037391512b64a66c74657200000000000000000000000000000000000000000000000000000e0000000400000038040000f0000000f00000000000000078020000000000006803000068030000680300006803000068030000040000006ef72b0672aad66f1eca1ed281abd609cd5f41fdd2", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000fe8000000000000000000000000000bb7f000000ffffff0000ffffff00000000ffffffffc4fde65b00000000000000006e657464657673696d3000000000000069726c616e3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000005c000003c50000000000000000000000000000004001880100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000008100000002000000ffffffff0003000048006473740000000000000000000000000000000000000000000000000000000600000097010600070002000200ff07c70a00010600060004000001270e00040900050001000a00480049444c4554494d45520000000000000000000000000000000000000000000300000073797a30000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c800f00000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002ff7f0800070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x498) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000740)={0x5ef, 0xaf1, 0x1f, 0xa00, 0x1, 0xffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffffffffffd, @rand_addr="e4f016a1b762874dc1c1e1a1e1bd465f"}, r3}}, 0x30) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8002, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 2451.166260][ T7387] IPVS: ftp: loaded support on port[0] = 21 13:34:02 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) 13:34:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd8f, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a28093020603e1e8a20001000000003900090035000802060000001900070004000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492596, 0x0) 13:34:02 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) 13:34:02 executing program 0: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) 13:34:03 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'syzkaller0\x00'}, 0x18) [ 2452.007348][ T7409] IPVS: ftp: loaded support on port[0] = 21 13:34:03 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="66696054f00460ccca55037391512b64a66c74657200000000000000000000000000000000000000000000000000000e0000000400000038040000f0000000f00000000000000078020000000000006803000068030000680300006803000068030000040000006ef72b0672aad66f1eca1ed281abd609cd5f41fdd2", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000fe8000000000000000000000000000bb7f000000ffffff0000ffffff00000000ffffffffc4fde65b00000000000000006e657464657673696d3000000000000069726c616e3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000005c000003c50000000000000000000000000000004001880100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000008100000002000000ffffffff0003000048006473740000000000000000000000000000000000000000000000000000000600000097010600070002000200ff07c70a00010600060004000001270e00040900050001000a00480049444c4554494d45520000000000000000000000000000000000000000000300000073797a30000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c800f00000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002ff7f0800070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x498) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000740)={0x5ef, 0xaf1, 0x1f, 0xa00, 0x1, 0xffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffffffffffd, @rand_addr="e4f016a1b762874dc1c1e1a1e1bd465f"}, r3}}, 0x30) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8002, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:34:03 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) 13:34:03 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'syzkaller0\x00'}, 0x18) 13:34:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd8f, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a28093020603e1e8a20001000000003900090035000802060000001900070004000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492596, 0x0) [ 2452.542334][T29711] tipc: TX() has been purged, node left! 13:34:03 executing program 5: keyctl$KEYCTL_CAPABILITIES(0x1f, 0xffffffffffffffff, 0x6ad3fc34f17701b4) 13:34:03 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'syzkaller0\x00'}, 0x18) 13:34:03 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) 13:34:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd8f, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a28093020603e1e8a20001000000003900090035000802060000001900070004000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492596, 0x0) 13:34:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) [ 2452.948442][ T7442] IPVS: ftp: loaded support on port[0] = 21 13:34:04 executing program 0: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) 13:34:04 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'syzkaller0\x00'}, 0x18) 13:34:04 executing program 5: keyctl$KEYCTL_CAPABILITIES(0x1f, 0xffffffffffffffff, 0x6ad3fc34f17701b4) 13:34:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) 13:34:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) [ 2453.567151][ T7453] IPVS: ftp: loaded support on port[0] = 21 [ 2453.666363][ T7454] IPVS: ftp: loaded support on port[0] = 21 13:34:04 executing program 5: keyctl$KEYCTL_CAPABILITIES(0x1f, 0xffffffffffffffff, 0x6ad3fc34f17701b4) 13:34:04 executing program 4: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$FICLONE(r0, 0x40049409, r1) 13:34:05 executing program 4: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$FICLONE(r0, 0x40049409, r1) 13:34:05 executing program 0: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) 13:34:05 executing program 5: keyctl$KEYCTL_CAPABILITIES(0x1f, 0xffffffffffffffff, 0x6ad3fc34f17701b4) 13:34:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) 13:34:05 executing program 4: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$FICLONE(r0, 0x40049409, r1) 13:34:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) 13:34:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}]}, 0x2c}}, 0x0) [ 2454.728987][ T7485] tipc: Started in network mode [ 2454.734781][ T7485] tipc: Own node identity aaaaaaaaaa33, cluster identity 4711 [ 2454.742894][ T7485] tipc: Enabled bearer , priority 10 [ 2454.831643][ T7487] tipc: Enabling of bearer rejected, already enabled [ 2454.868602][ T7483] IPVS: ftp: loaded support on port[0] = 21 [ 2454.938900][ T7480] IPVS: ftp: loaded support on port[0] = 21 13:34:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}]}, 0x2c}}, 0x0) 13:34:06 executing program 4: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$FICLONE(r0, 0x40049409, r1) [ 2455.677435][ T7493] tipc: Enabling of bearer rejected, already enabled [ 2455.865119][ T3612] tipc: 32-bit node address hash set to aaaa9900 13:34:07 executing program 0: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) 13:34:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) 13:34:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x3e7) 13:34:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) 13:34:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}]}, 0x2c}}, 0x0) 13:34:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) [ 2456.739308][ T7510] tipc: Enabling of bearer rejected, already enabled [ 2456.847261][ T7507] IPVS: ftp: loaded support on port[0] = 21 [ 2456.911843][ T7504] IPVS: ftp: loaded support on port[0] = 21 [ 2457.167260][ T7512] IPVS: ftp: loaded support on port[0] = 21 13:34:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x3e7) 13:34:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}]}, 0x2c}}, 0x0) [ 2457.325036][T29711] tipc: TX() has been purged, node left! [ 2457.444153][ T7517] tipc: Enabling of bearer rejected, already enabled 13:34:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x3e7) 13:34:08 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [], 0x3}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 13:34:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x3e7) [ 2458.037560][ T7523] ipt_CLUSTERIP: unknown mode 3 13:34:09 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x3, 0x2, 0x3fc}) [ 2458.112844][T29711] tipc: TX() has been purged, node left! [ 2458.276302][T29711] tipc: TX() has been purged, node left! 13:34:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4008a1d232a804c, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) rt_sigaction(0x2c, &(0x7f0000000100)={0x0, {}, 0x88000000, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400904, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e20, @local}}}, 0xfffffffffffffe02) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x8, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x4a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="dd9a5cabdfce"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) io_setup(0x1, &(0x7f0000000380)=0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x3) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, &(0x7f0000000080), 0x101b2}]) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r8, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000200)=0x43b6) unshare(0x40000000) 13:34:09 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [], 0x3}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) [ 2458.412371][T29711] tipc: TX() has been purged, node left! [ 2458.525706][ T7537] ipt_CLUSTERIP: unknown mode 3 13:34:09 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x3, 0x2, 0x3fc}) [ 2458.583404][T29711] tipc: TX() has been purged, node left! [ 2458.792365][ T7540] IPVS: ftp: loaded support on port[0] = 21 13:34:09 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [], 0x3}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 13:34:09 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x3, 0x2, 0x3fc}) [ 2458.934701][ T7546] ipt_CLUSTERIP: unknown mode 3 13:34:10 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [], 0x3}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 13:34:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0xc435b7eff7776fdc}, 0x4) close(r0) 13:34:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006d00a7d5edc603216c4642002c1fa9001000000000005571f2ca080005006836b0bcb81c1ec8171c0d0f7f00000088d052af996b902a5b846eba7b459e6fe05f2092a505bb634bea4ab9a9f31253b49f6fee2622f2eb541ff3e16de9efde85d673522d98dc297c834d54e6c0b7276e6d077e6776cf0de2969582cf54c50f685987f577b6968001a8c8885810708ab6aa76cdb7532e5f0000945fc42c764e992d7c40676096759feb6467051185eb8f400b28ea10f60a4e00"/197, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:34:10 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x40047452, &(0x7f0000000000)) 13:34:10 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x3, 0x2, 0x3fc}) [ 2459.447172][ T7567] ipt_CLUSTERIP: unknown mode 3 13:34:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006d00a7d5edc603216c4642002c1fa9001000000000005571f2ca080005006836b0bcb81c1ec8171c0d0f7f00000088d052af996b902a5b846eba7b459e6fe05f2092a505bb634bea4ab9a9f31253b49f6fee2622f2eb541ff3e16de9efde85d673522d98dc297c834d54e6c0b7276e6d077e6776cf0de2969582cf54c50f685987f577b6968001a8c8885810708ab6aa76cdb7532e5f0000945fc42c764e992d7c40676096759feb6467051185eb8f400b28ea10f60a4e00"/197, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:34:10 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x40047452, &(0x7f0000000000)) 13:34:12 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006d00a7d5edc603216c4642002c1fa9001000000000005571f2ca080005006836b0bcb81c1ec8171c0d0f7f00000088d052af996b902a5b846eba7b459e6fe05f2092a505bb634bea4ab9a9f31253b49f6fee2622f2eb541ff3e16de9efde85d673522d98dc297c834d54e6c0b7276e6d077e6776cf0de2969582cf54c50f685987f577b6968001a8c8885810708ab6aa76cdb7532e5f0000945fc42c764e992d7c40676096759feb6467051185eb8f400b28ea10f60a4e00"/197, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:34:12 executing program 5: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 13:34:12 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) 13:34:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0xc435b7eff7776fdc}, 0x4) close(r0) 13:34:12 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x40047452, &(0x7f0000000000)) 13:34:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0xc435b7eff7776fdc}, 0x4) close(r0) 13:34:12 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006d00a7d5edc603216c4642002c1fa9001000000000005571f2ca080005006836b0bcb81c1ec8171c0d0f7f00000088d052af996b902a5b846eba7b459e6fe05f2092a505bb634bea4ab9a9f31253b49f6fee2622f2eb541ff3e16de9efde85d673522d98dc297c834d54e6c0b7276e6d077e6776cf0de2969582cf54c50f685987f577b6968001a8c8885810708ab6aa76cdb7532e5f0000945fc42c764e992d7c40676096759feb6467051185eb8f400b28ea10f60a4e00"/197, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:34:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0xc435b7eff7776fdc}, 0x4) close(r0) 13:34:12 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) 13:34:12 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x40047452, &(0x7f0000000000)) 13:34:12 executing program 5: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 13:34:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0xc435b7eff7776fdc}, 0x4) close(r0) 13:34:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0xc435b7eff7776fdc}, 0x4) close(r0) 13:34:12 executing program 5: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 13:34:12 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='./file/../file0\x00', 0x0) renameat(r0, &(0x7f0000000080)='./file/../file0\x00', r0, &(0x7f0000000140)='./file\x00') 13:34:12 executing program 2: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) [ 2461.749101][T29711] tipc: TX() has been purged, node left! 13:34:12 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) 13:34:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0xc435b7eff7776fdc}, 0x4) close(r0) [ 2461.928725][T29711] tipc: TX() has been purged, node left! 13:34:13 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='./file/../file0\x00', 0x0) renameat(r0, &(0x7f0000000080)='./file/../file0\x00', r0, &(0x7f0000000140)='./file\x00') 13:34:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"f1ad"}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 2462.062120][T29711] tipc: TX() has been purged, node left! 13:34:13 executing program 2: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) 13:34:13 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) 13:34:13 executing program 5: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 2462.275992][ T7646] No such timeout policy "syz1" 13:34:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0xc1000) 13:34:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"f1ad"}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 13:34:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5f454c44065b0500731185e41bac90560fa5135f0e44114bd0b440ece993ca125ab2b70aae489fef7add157f2083f6e954ab73b6f776f7c9e872977cb02119b16a66d58b8cd2dd49507f3dc5a10e1d13180dac3cb99cbd8b5e81bab293a301d80e68480eae0c0a8a43b6c68d4f65d471b1659829ddadc42dc6adcafdaadb7074812779d850660defa3277a99"], 0xa) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff40) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) 13:34:13 executing program 2: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) 13:34:13 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='./file/../file0\x00', 0x0) renameat(r0, &(0x7f0000000080)='./file/../file0\x00', r0, &(0x7f0000000140)='./file\x00') [ 2462.640240][ T7662] No such timeout policy "syz1" 13:34:13 executing program 5: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x6) 13:34:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/449], &(0x7f0000000140)='GPL\x00'}, 0x48) 13:34:13 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"f1ad"}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 13:34:14 executing program 2: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) 13:34:14 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='./file/../file0\x00', 0x0) renameat(r0, &(0x7f0000000080)='./file/../file0\x00', r0, &(0x7f0000000140)='./file\x00') 13:34:14 executing program 5: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x6) [ 2463.047071][ T7677] No such timeout policy "syz1" 13:34:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5f454c44065b0500731185e41bac90560fa5135f0e44114bd0b440ece993ca125ab2b70aae489fef7add157f2083f6e954ab73b6f776f7c9e872977cb02119b16a66d58b8cd2dd49507f3dc5a10e1d13180dac3cb99cbd8b5e81bab293a301d80e68480eae0c0a8a43b6c68d4f65d471b1659829ddadc42dc6adcafdaadb7074812779d850660defa3277a99"], 0xa) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff40) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) 13:34:14 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"f1ad"}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 13:34:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="d1ac9730faeaf8141947dec929f615e7", 0x10) 13:34:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) fgetxattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) [ 2463.423006][ T7694] No such timeout policy "syz1" 13:34:14 executing program 5: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x6) 13:34:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/449], &(0x7f0000000140)='GPL\x00'}, 0x48) 13:34:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5f454c44065b0500731185e41bac90560fa5135f0e44114bd0b440ece993ca125ab2b70aae489fef7add157f2083f6e954ab73b6f776f7c9e872977cb02119b16a66d58b8cd2dd49507f3dc5a10e1d13180dac3cb99cbd8b5e81bab293a301d80e68480eae0c0a8a43b6c68d4f65d471b1659829ddadc42dc6adcafdaadb7074812779d850660defa3277a99"], 0xa) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff40) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) 13:34:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 13:34:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="d1ac9730faeaf8141947dec929f615e7", 0x10) 13:34:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) fgetxattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 13:34:15 executing program 5: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x6) 13:34:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/449], &(0x7f0000000140)='GPL\x00'}, 0x48) 13:34:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) fgetxattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) [ 2464.082651][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.089018][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.095835][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.102241][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.108821][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.115240][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:34:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="d1ac9730faeaf8141947dec929f615e7", 0x10) 13:34:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5f454c44065b0500731185e41bac90560fa5135f0e44114bd0b440ece993ca125ab2b70aae489fef7add157f2083f6e954ab73b6f776f7c9e872977cb02119b16a66d58b8cd2dd49507f3dc5a10e1d13180dac3cb99cbd8b5e81bab293a301d80e68480eae0c0a8a43b6c68d4f65d471b1659829ddadc42dc6adcafdaadb7074812779d850660defa3277a99"], 0xa) close(r4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff40) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) 13:34:15 executing program 5: ioprio_set$pid(0x0, 0x0, 0xffffffff) 13:34:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/449], &(0x7f0000000140)='GPL\x00'}, 0x48) 13:34:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) fgetxattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 13:34:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 13:34:15 executing program 5: ioprio_set$pid(0x0, 0x0, 0xffffffff) 13:34:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="d1ac9730faeaf8141947dec929f615e7", 0x10) 13:34:15 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$getflags(r0, 0x40a) 13:34:16 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045006, 0x71ff00) 13:34:16 executing program 5: ioprio_set$pid(0x0, 0x0, 0xffffffff) 13:34:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0, 0x12]}) 13:34:16 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200081, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 13:34:16 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$getflags(r0, 0x40a) 13:34:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 13:34:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="080db505e30bcfe8696071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x2, 0x4, 0x800, 0x4}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) 13:34:16 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200081, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 13:34:16 executing program 5: ioprio_set$pid(0x0, 0x0, 0xffffffff) 13:34:16 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x1ce, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830025200a8009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 13:34:16 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$getflags(r0, 0x40a) [ 2465.751437][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:34:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="080db505e30bcfe8696071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x2, 0x4, 0x800, 0x4}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) 13:34:16 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 13:34:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200081, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 13:34:17 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$getflags(r0, 0x40a) 13:34:17 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x1ce, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830025200a8009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 2466.109587][ T7803] sctp: [Deprecated]: syz-executor.5 (pid 7803) Use of int in max_burst socket option. [ 2466.109587][ T7803] Use struct sctp_assoc_value instead 13:34:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 2466.150065][ T7806] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:34:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200081, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 13:34:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0x2]}]}, 0x40}}, 0x0) 13:34:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="080db505e30bcfe8696071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x2, 0x4, 0x800, 0x4}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) [ 2466.285908][ T7803] sctp: [Deprecated]: syz-executor.5 (pid 7803) Use of int in max_burst socket option. [ 2466.285908][ T7803] Use struct sctp_assoc_value instead 13:34:17 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x1ce, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830025200a8009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 13:34:17 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 13:34:17 executing program 2: getrusage(0xffffffffffffffff, &(0x7f0000000080)) [ 2466.589757][ T7822] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:34:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0x2]}]}, 0x40}}, 0x0) 13:34:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="080db505e30bcfe8696071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x2, 0x4, 0x800, 0x4}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x3c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r2, 0x0) [ 2466.831766][ T7830] sctp: [Deprecated]: syz-executor.5 (pid 7830) Use of int in max_burst socket option. [ 2466.831766][ T7830] Use struct sctp_assoc_value instead 13:34:18 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x1ce, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830025200a8009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 13:34:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x4b67, &(0x7f00000002c0)) 13:34:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0x2]}]}, 0x40}}, 0x0) 13:34:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x3724, 0x4) 13:34:18 executing program 2: getrusage(0xffffffffffffffff, &(0x7f0000000080)) [ 2467.113342][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:34:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 13:34:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x4b67, &(0x7f00000002c0)) 13:34:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x3724, 0x4) 13:34:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0x2]}]}, 0x40}}, 0x0) [ 2467.343438][ T7852] sctp: [Deprecated]: syz-executor.5 (pid 7852) Use of int in max_burst socket option. [ 2467.343438][ T7852] Use struct sctp_assoc_value instead 13:34:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 13:34:18 executing program 2: getrusage(0xffffffffffffffff, &(0x7f0000000080)) 13:34:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 13:34:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x4b67, &(0x7f00000002c0)) 13:34:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000011401001a00000000000000"], 0x10}}, 0x0) 13:34:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x3724, 0x4) 13:34:18 executing program 2: getrusage(0xffffffffffffffff, &(0x7f0000000080)) [ 2467.884559][ T7877] sctp: [Deprecated]: syz-executor.5 (pid 7877) Use of int in max_burst socket option. [ 2467.884559][ T7877] Use struct sctp_assoc_value instead 13:34:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 13:34:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000011401001a00000000000000"], 0x10}}, 0x0) 13:34:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x4b67, &(0x7f00000002c0)) 13:34:19 executing program 5: syslog(0xa, 0x0, 0x0) 13:34:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000003700)='net/wireless\x00') r1 = socket$inet6(0xa, 0x3, 0x5c) sendfile(r1, r0, &(0x7f0000000080)=0xa2, 0x100001) 13:34:19 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x3724, 0x4) 13:34:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000640)="070a052208c559771f", 0x9) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 13:34:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000011401001a00000000000000"], 0x10}}, 0x0) 13:34:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000003700)='net/wireless\x00') r1 = socket$inet6(0xa, 0x3, 0x5c) sendfile(r1, r0, &(0x7f0000000080)=0xa2, 0x100001) 13:34:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x240000, 0x0) fchmod(r0, 0x0) 13:34:19 executing program 5: syslog(0xa, 0x0, 0x0) 13:34:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000011401001a00000000000000"], 0x10}}, 0x0) 13:34:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 13:34:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000640)="070a052208c559771f", 0x9) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 13:34:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000003700)='net/wireless\x00') r1 = socket$inet6(0xa, 0x3, 0x5c) sendfile(r1, r0, &(0x7f0000000080)=0xa2, 0x100001) 13:34:20 executing program 5: syslog(0xa, 0x0, 0x0) 13:34:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4]}) 13:34:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x240000, 0x0) fchmod(r0, 0x0) 13:34:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000640)="070a052208c559771f", 0x9) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 13:34:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000003700)='net/wireless\x00') r1 = socket$inet6(0xa, 0x3, 0x5c) sendfile(r1, r0, &(0x7f0000000080)=0xa2, 0x100001) 13:34:20 executing program 5: syslog(0xa, 0x0, 0x0) 13:34:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x240000, 0x0) fchmod(r0, 0x0) 13:34:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000640)="070a052208c559771f", 0x9) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 13:34:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4]}) 13:34:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 13:34:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0xffffff92, 0x0, 0xffffffd0, 0x0, @tick, {}, {}, @addr}], 0x1c) [ 2469.632625][ T7959] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 13:34:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x240000, 0x0) fchmod(r0, 0x0) 13:34:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, 0x1, 0x2, 0x1, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x8}}]}]}, 0x50}}, 0x0) 13:34:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4]}) 13:34:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000005e8f7fbea0c001a00080002c0ffffff58"], 0x2c}}, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000015003918000000000000000002000000", @ANYRES32=r3, @ANYBLOB="14000300726f73653000100000000000f0000000"], 0x289}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 13:34:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0xffffff92, 0x0, 0xffffffd0, 0x0, @tick, {}, {}, @addr}], 0x1c) [ 2469.864779][ T7968] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2469.959649][ T7976] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 13:34:21 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000007c0)={@host}) 13:34:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, 0x1, 0x2, 0x1, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x8}}]}]}, 0x50}}, 0x0) 13:34:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4]}) 13:34:21 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0xffffff92, 0x0, 0xffffffd0, 0x0, @tick, {}, {}, @addr}], 0x1c) [ 2470.305738][ T7987] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 13:34:21 executing program 3: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x9, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000004c0)={r5, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) syz_open_dev$mice(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x9, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r11, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r12, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) [ 2470.354586][ T7989] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 13:34:21 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000007c0)={@host}) 13:34:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 13:34:21 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0xffffff92, 0x0, 0xffffffd0, 0x0, @tick, {}, {}, @addr}], 0x1c) 13:34:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, 0x1, 0x2, 0x1, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x8}}]}]}, 0x50}}, 0x0) [ 2470.661643][ T8005] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 13:34:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) [ 2470.738240][ T7993] IPVS: ftp: loaded support on port[0] = 21 13:34:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000005e8f7fbea0c001a00080002c0ffffff58"], 0x2c}}, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000015003918000000000000000002000000", @ANYRES32=r3, @ANYBLOB="14000300726f73653000100000000000f0000000"], 0x289}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 13:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket(0x1e, 0x805, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80080000}, 0x1c) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r1, 0xc46dfc707e1df77d}, 0x14}}, 0x0) 13:34:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000007c0)={@host}) 13:34:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, 0x1, 0x2, 0x1, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x8}}]}]}, 0x50}}, 0x0) 13:34:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 13:34:22 executing program 3: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x9, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000004c0)={r5, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) syz_open_dev$mice(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x9, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r11, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r12, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) [ 2471.581567][ T8029] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2471.594043][T29711] tipc: TX() has been purged, node left! [ 2471.759061][ T8020] IPVS: ftp: loaded support on port[0] = 21 13:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket(0x1e, 0x805, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80080000}, 0x1c) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r1, 0xc46dfc707e1df77d}, 0x14}}, 0x0) 13:34:22 executing program 5: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x9, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000004c0)={r5, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) syz_open_dev$mice(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x9, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r11, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r12, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) 13:34:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000007c0)={@host}) 13:34:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) [ 2472.313555][ T8041] IPVS: ftp: loaded support on port[0] = 21 13:34:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x4000) sendto$inet6(r0, &(0x7f0000000180)='Y', 0x1, 0x4000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x4000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 13:34:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x7b9, 0x20707004) 13:34:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000500)={0x2, 0xd, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast2}}, @sadb_key={0xd, 0x8, 0x2d8, 0x0, "2c9a2beea7b38ac35d6f40f007329eb603931942f1f99f7fda11de3042ed676a3e7fe5dc0b55900d5e912d0fb0e67dfd373433a272d92d78b2a45935266e0d04eecac673a048bbab388bd02ce3cffe3440f844623c2a55d7d37b37"}, @sadb_address={0x2, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 13:34:24 executing program 3: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x9, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000004c0)={r5, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) syz_open_dev$mice(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x9, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r11, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r12, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) 13:34:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket(0x1e, 0x805, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80080000}, 0x1c) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r1, 0xc46dfc707e1df77d}, 0x14}}, 0x0) 13:34:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000005e8f7fbea0c001a00080002c0ffffff58"], 0x2c}}, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000015003918000000000000000002000000", @ANYRES32=r3, @ANYBLOB="14000300726f73653000100000000000f0000000"], 0x289}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 13:34:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x40d, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 13:34:24 executing program 5: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x9, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000004c0)={r5, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) syz_open_dev$mice(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x9, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r11, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r12, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) [ 2473.485674][ T8070] IPVS: ftp: loaded support on port[0] = 21 [ 2473.509002][ T8065] IPVS: ftp: loaded support on port[0] = 21 13:34:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x40d, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 13:34:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket(0x1e, 0x805, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80080000}, 0x1c) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r1, 0xc46dfc707e1df77d}, 0x14}}, 0x0) 13:34:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000500)={0x2, 0xd, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast2}}, @sadb_key={0xd, 0x8, 0x2d8, 0x0, "2c9a2beea7b38ac35d6f40f007329eb603931942f1f99f7fda11de3042ed676a3e7fe5dc0b55900d5e912d0fb0e67dfd373433a272d92d78b2a45935266e0d04eecac673a048bbab388bd02ce3cffe3440f844623c2a55d7d37b37"}, @sadb_address={0x2, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 13:34:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x40d, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 13:34:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_eee={0x1}}) 13:34:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000500)={0x2, 0xd, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast2}}, @sadb_key={0xd, 0x8, 0x2d8, 0x0, "2c9a2beea7b38ac35d6f40f007329eb603931942f1f99f7fda11de3042ed676a3e7fe5dc0b55900d5e912d0fb0e67dfd373433a272d92d78b2a45935266e0d04eecac673a048bbab388bd02ce3cffe3440f844623c2a55d7d37b37"}, @sadb_address={0x2, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 13:34:25 executing program 3: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x9, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000004c0)={r5, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) syz_open_dev$mice(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x9, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r11, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r12, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) [ 2474.815096][ T8096] IPVS: ftp: loaded support on port[0] = 21 13:34:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000005e8f7fbea0c001a00080002c0ffffff58"], 0x2c}}, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000015003918000000000000000002000000", @ANYRES32=r3, @ANYBLOB="14000300726f73653000100000000000f0000000"], 0x289}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 13:34:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x40d, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 13:34:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000500)={0x2, 0xd, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast2}}, @sadb_key={0xd, 0x8, 0x2d8, 0x0, "2c9a2beea7b38ac35d6f40f007329eb603931942f1f99f7fda11de3042ed676a3e7fe5dc0b55900d5e912d0fb0e67dfd373433a272d92d78b2a45935266e0d04eecac673a048bbab388bd02ce3cffe3440f844623c2a55d7d37b37"}, @sadb_address={0x2, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 13:34:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_eee={0x1}}) 13:34:26 executing program 5: getegid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x5000) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x9, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000004c0)={r5, 0x8}, 0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000280), 0x4) clock_gettime(0x4, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) syz_open_dev$mice(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) timerfd_create(0x7, 0x100000) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x9, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r11, @in6={{0xa, 0x4e20, 0x7fffffff, @rand_addr="eeb0f4f598b2197eae64bde4b3dccd3a", 0x9}}, 0x9, 0xfb}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r12, 0x800, 0x7f, 0xc7, 0x36, 0x1}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='bond_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) unshare(0x60020000) 13:34:26 executing program 1: clone3(&(0x7f0000000380)={0x480c000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/116, 0x0, 0x0, 0x0}, 0x50) 13:34:26 executing program 1: clone3(&(0x7f0000000380)={0x480c000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/116, 0x0, 0x0, 0x0}, 0x50) [ 2475.777355][ T8104] IPVS: ftp: loaded support on port[0] = 21 13:34:26 executing program 0: syz_emit_ethernet(0x3f, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4e96e1", 0x9, 0x3a, 0x0, @local, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "9f"}}}}}}, 0x0) 13:34:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_eee={0x1}}) 13:34:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0xfff, 0x59555956, 0x0, 0x0, 0x0, @stepwise}) 13:34:27 executing program 1: clone3(&(0x7f0000000380)={0x480c000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/116, 0x0, 0x0, 0x0}, 0x50) 13:34:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_eee={0x1}}) 13:34:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x10004000000002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000103042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 13:34:27 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4018920a, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x141000, 0x5113fc7883d38c7) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)={{0x107, 0x9, 0x1000, 0x324, 0x355, 0x800, 0x80, 0xc3d0}, "788cd5608aa2617ae73a8464f5099ee6c8173b468212cf43a0839fdb29487a2768fe715ffa6eea284d587f0e043e8f03108fa85a46acf39be9ee4f779f57331e9698cba31dc6de991e930fa7f07d59f48dfa62ac41208565f598a92d1c78e1dc13", [[], [], [], [], [], []]}, 0x681) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x52000003) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005780)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}]}, 0x3c}}, 0x0) 13:34:27 executing program 1: clone3(&(0x7f0000000380)={0x480c000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/116, 0x0, 0x0, 0x0}, 0x50) 13:34:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0xfff, 0x59555956, 0x0, 0x0, 0x0, @stepwise}) 13:34:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001380)="6653070000053c07bc3376003639405cb4aed12f0000000000ae", 0x1a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 13:34:27 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x41, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x800c5012, &(0x7f0000000140)) [ 2476.702719][T29711] tipc: TX() has been purged, node left! 13:34:28 executing program 1: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000240), 0x762) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@unspec={0x0, 0x0, 0x3000000, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)="235db863768606681d012f629c75adfa4208d51e67688d024aface6a6ac7d846ed2fa163e15ffb509de80565b82752e0fffeffc0d4f83047fda99590d719ccb4f47bcd84c8f41a85a8446446bb4178740a8bd45ff8a106da98c21372", 0x5c}], 0x1}, 0x0) [ 2476.899353][ T8151] batman_adv: Cannot find parent device [ 2476.911176][T29711] tipc: TX() has been purged, node left! 13:34:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0xfff, 0x59555956, 0x0, 0x0, 0x0, @stepwise}) 13:34:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x10004000000002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000103042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 2477.075556][T29711] tipc: TX() has been purged, node left! 13:34:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000200003) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket(0x2, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @empty={[0x500, 0x0, 0x54, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x4, 0x500000000000000]}}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 13:34:28 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4018920a, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x141000, 0x5113fc7883d38c7) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)={{0x107, 0x9, 0x1000, 0x324, 0x355, 0x800, 0x80, 0xc3d0}, "788cd5608aa2617ae73a8464f5099ee6c8173b468212cf43a0839fdb29487a2768fe715ffa6eea284d587f0e043e8f03108fa85a46acf39be9ee4f779f57331e9698cba31dc6de991e930fa7f07d59f48dfa62ac41208565f598a92d1c78e1dc13", [[], [], [], [], [], []]}, 0x681) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x52000003) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005780)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}]}, 0x3c}}, 0x0) [ 2477.186449][T29711] tipc: TX() has been purged, node left! 13:34:28 executing program 1: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000240), 0x762) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@unspec={0x0, 0x0, 0x3000000, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)="235db863768606681d012f629c75adfa4208d51e67688d024aface6a6ac7d846ed2fa163e15ffb509de80565b82752e0fffeffc0d4f83047fda99590d719ccb4f47bcd84c8f41a85a8446446bb4178740a8bd45ff8a106da98c21372", 0x5c}], 0x1}, 0x0) [ 2477.362146][T29711] tipc: TX() has been purged, node left! 13:34:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x10004000000002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000103042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 13:34:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0xfff, 0x59555956, 0x0, 0x0, 0x0, @stepwise}) [ 2477.411589][ T8172] batman_adv: Cannot find parent device [ 2477.560156][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2477.576809][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2477.587301][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:34:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4018920a, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x141000, 0x5113fc7883d38c7) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)={{0x107, 0x9, 0x1000, 0x324, 0x355, 0x800, 0x80, 0xc3d0}, "788cd5608aa2617ae73a8464f5099ee6c8173b468212cf43a0839fdb29487a2768fe715ffa6eea284d587f0e043e8f03108fa85a46acf39be9ee4f779f57331e9698cba31dc6de991e930fa7f07d59f48dfa62ac41208565f598a92d1c78e1dc13", [[], [], [], [], [], []]}, 0x681) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x52000003) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005780)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}]}, 0x3c}}, 0x0) 13:34:28 executing program 1: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000240), 0x762) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@unspec={0x0, 0x0, 0x3000000, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)="235db863768606681d012f629c75adfa4208d51e67688d024aface6a6ac7d846ed2fa163e15ffb509de80565b82752e0fffeffc0d4f83047fda99590d719ccb4f47bcd84c8f41a85a8446446bb4178740a8bd45ff8a106da98c21372", 0x5c}], 0x1}, 0x0) [ 2477.947080][ T8190] batman_adv: Cannot find parent device [ 2477.958303][ T8194] ===================================================== [ 2477.965390][ T8194] BUG: KMSAN: uninit-value in __crc32c_le_base+0x4fa/0xd30 [ 2477.972604][ T8194] CPU: 0 PID: 8194 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 2477.981274][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2477.991325][ T8194] Call Trace: [ 2477.994639][ T8194] dump_stack+0x1c9/0x220 [ 2477.998981][ T8194] kmsan_report+0xf8/0x1e0 [ 2478.003404][ T8194] __msan_warning+0x58/0xa0 [ 2478.007922][ T8194] __crc32c_le_base+0x4fa/0xd30 [ 2478.012785][ T8194] chksum_update+0xb2/0x110 [ 2478.017296][ T8194] ? chksum_init+0xd0/0xd0 [ 2478.021705][ T8194] crypto_shash_update+0x4ed/0x550 [ 2478.026898][ T8194] ? sctp_chunk_free+0xb0/0xc0 [ 2478.031682][ T8194] ? sctp_packet_transmit+0x1ef6/0x4380 [ 2478.037225][ T8194] ? sctp_apply_peer_addr_params+0x212/0x1d40 [ 2478.043287][ T8194] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2478.048910][ T8194] ? __msan_poison_alloca+0xf0/0x120 [ 2478.054185][ T8194] ? kmsan_get_metadata+0x4f/0x190 [ 2478.059287][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.065085][ T8194] crc32c+0x150/0x220 [ 2478.069149][ T8194] ? kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 2478.074953][ T8194] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2478.081115][ T8194] ? cache_from_obj+0x3ac/0x690 [ 2478.085957][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.091148][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.096960][ T8194] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2478.103017][ T8194] ? kmem_cache_free+0xbba/0x2d30 [ 2478.108043][ T8194] ? sctp_chunk_put+0x29e/0x420 [ 2478.112890][ T8194] sctp_csum_update+0x89/0xa0 [ 2478.117565][ T8194] __skb_checksum+0x12f7/0x1300 [ 2478.122496][ T8194] ? sctp_chunk_put+0x29e/0x420 [ 2478.127348][ T8194] ? __sctp_packet_append_chunk+0x1750/0x1750 [ 2478.133406][ T8194] sctp_packet_transmit+0x422d/0x4380 [ 2478.138811][ T8194] sctp_outq_flush+0x1823/0x5d80 [ 2478.143739][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.149536][ T8194] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 2478.155680][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.160881][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.166676][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.171969][ T8194] sctp_outq_uncork+0xd0/0xf0 [ 2478.176640][ T8194] sctp_do_sm+0x9105/0x9760 [ 2478.181142][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.186331][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.191530][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.197067][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.202879][ T8194] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2478.208950][ T8194] ? __update_load_avg_cfs_rq+0x106/0x1270 [ 2478.214748][ T8194] ? __update_load_avg_se+0x108/0x1220 [ 2478.220214][ T8194] sctp_primitive_REQUESTHEARTBEAT+0x175/0x1a0 [ 2478.226378][ T8194] sctp_apply_peer_addr_params+0x212/0x1d40 [ 2478.232284][ T8194] sctp_setsockopt+0x18518/0x18c00 [ 2478.237407][ T8194] ? sctp_shutdown+0x270/0x270 [ 2478.242160][ T8194] sock_common_setsockopt+0x13b/0x170 [ 2478.247537][ T8194] __sys_setsockopt+0x7c3/0xa30 [ 2478.252393][ T8194] ? sock_common_recvmsg+0x290/0x290 [ 2478.257680][ T8194] __se_sys_setsockopt+0xdd/0x100 [ 2478.262714][ T8194] __x64_sys_setsockopt+0x62/0x80 [ 2478.267750][ T8194] do_syscall_64+0xb6/0x160 [ 2478.272359][ T8194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.278237][ T8194] RIP: 0033:0x45af49 [ 2478.282127][ T8194] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2478.301725][ T8194] RSP: 002b:00007fdfe6a03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2478.310138][ T8194] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045af49 [ 2478.318102][ T8194] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000007 [ 2478.326070][ T8194] RBP: 000000000075c070 R08: 0000000000000098 R09: 0000000000000000 [ 2478.334036][ T8194] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007fdfe6a046d4 [ 2478.342005][ T8194] R13: 00000000004d4118 R14: 00000000004e5160 R15: 00000000ffffffff [ 2478.349983][ T8194] [ 2478.352304][ T8194] Uninit was stored to memory at: [ 2478.357332][ T8194] kmsan_internal_chain_origin+0xc5/0x140 [ 2478.363040][ T8194] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 2478.369016][ T8194] kmsan_memcpy_metadata+0xb/0x10 [ 2478.374034][ T8194] __msan_memcpy+0x44/0x50 [ 2478.378550][ T8194] sctp_packet_transmit+0x1dd1/0x4380 [ 2478.383918][ T8194] sctp_outq_flush+0x1823/0x5d80 [ 2478.388856][ T8194] sctp_outq_uncork+0xd0/0xf0 [ 2478.393536][ T8194] sctp_do_sm+0x9105/0x9760 [ 2478.398040][ T8194] sctp_primitive_REQUESTHEARTBEAT+0x175/0x1a0 [ 2478.404184][ T8194] sctp_apply_peer_addr_params+0x212/0x1d40 [ 2478.410076][ T8194] sctp_setsockopt+0x18518/0x18c00 [ 2478.415187][ T8194] sock_common_setsockopt+0x13b/0x170 [ 2478.420551][ T8194] __sys_setsockopt+0x7c3/0xa30 [ 2478.425392][ T8194] __se_sys_setsockopt+0xdd/0x100 [ 2478.430406][ T8194] __x64_sys_setsockopt+0x62/0x80 [ 2478.435420][ T8194] do_syscall_64+0xb6/0x160 [ 2478.439999][ T8194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.445872][ T8194] [ 2478.448190][ T8194] Uninit was stored to memory at: [ 2478.453207][ T8194] kmsan_internal_chain_origin+0xc5/0x140 [ 2478.458918][ T8194] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 2478.464887][ T8194] kmsan_memcpy_metadata+0xb/0x10 [ 2478.469897][ T8194] __msan_memcpy+0x44/0x50 [ 2478.474303][ T8194] sctp_addto_chunk+0x21c/0x430 [ 2478.479148][ T8194] sctp_make_heartbeat+0x4eb/0x700 [ 2478.484246][ T8194] sctp_sf_do_prm_requestheartbeat+0x8f/0x4b0 [ 2478.490311][ T8194] sctp_do_sm+0x2b4/0x9760 [ 2478.494713][ T8194] sctp_primitive_REQUESTHEARTBEAT+0x175/0x1a0 [ 2478.500853][ T8194] sctp_apply_peer_addr_params+0x212/0x1d40 [ 2478.506731][ T8194] sctp_setsockopt+0x18518/0x18c00 [ 2478.511840][ T8194] sock_common_setsockopt+0x13b/0x170 [ 2478.517213][ T8194] __sys_setsockopt+0x7c3/0xa30 [ 2478.522067][ T8194] __se_sys_setsockopt+0xdd/0x100 [ 2478.527080][ T8194] __x64_sys_setsockopt+0x62/0x80 [ 2478.532094][ T8194] do_syscall_64+0xb6/0x160 [ 2478.536588][ T8194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.542459][ T8194] [ 2478.544772][ T8194] Uninit was stored to memory at: [ 2478.549782][ T8194] kmsan_internal_chain_origin+0xc5/0x140 [ 2478.555504][ T8194] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 2478.561471][ T8194] kmsan_memcpy_metadata+0xb/0x10 [ 2478.566482][ T8194] __msan_memcpy+0x44/0x50 [ 2478.570887][ T8194] sctp_make_heartbeat+0x3f7/0x700 [ 2478.575988][ T8194] sctp_sf_do_prm_requestheartbeat+0x8f/0x4b0 [ 2478.582044][ T8194] sctp_do_sm+0x2b4/0x9760 [ 2478.586532][ T8194] sctp_primitive_REQUESTHEARTBEAT+0x175/0x1a0 [ 2478.592670][ T8194] sctp_apply_peer_addr_params+0x212/0x1d40 [ 2478.598549][ T8194] sctp_setsockopt+0x18518/0x18c00 [ 2478.603648][ T8194] sock_common_setsockopt+0x13b/0x170 [ 2478.609004][ T8194] __sys_setsockopt+0x7c3/0xa30 [ 2478.613849][ T8194] __se_sys_setsockopt+0xdd/0x100 [ 2478.618863][ T8194] __x64_sys_setsockopt+0x62/0x80 [ 2478.623877][ T8194] do_syscall_64+0xb6/0x160 [ 2478.628370][ T8194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.634240][ T8194] [ 2478.636551][ T8194] Uninit was stored to memory at: [ 2478.641559][ T8194] kmsan_internal_chain_origin+0xc5/0x140 [ 2478.647266][ T8194] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 2478.653242][ T8194] kmsan_memcpy_metadata+0xb/0x10 [ 2478.658252][ T8194] __msan_memcpy+0x44/0x50 [ 2478.662659][ T8194] sctp_transport_new+0x248/0xa20 [ 2478.667668][ T8194] sctp_assoc_add_peer+0x5ba/0x2120 [ 2478.672851][ T8194] sctp_process_init+0x162b/0x3e30 [ 2478.677953][ T8194] sctp_sf_do_5_1D_ce+0xe0f/0x30d0 [ 2478.683051][ T8194] sctp_do_sm+0x2b4/0x9760 [ 2478.687454][ T8194] sctp_endpoint_bh_rcv+0xd99/0x1040 [ 2478.692725][ T8194] sctp_inq_push+0x300/0x420 [ 2478.697473][ T8194] sctp_rcv+0x4ba4/0x54b0 [ 2478.701795][ T8194] sctp6_rcv+0x41/0x70 [ 2478.708348][ T8194] ip6_protocol_deliver_rcu+0x181c/0x22a0 [ 2478.714057][ T8194] ip6_input+0x2af/0x340 [ 2478.718285][ T8194] ipv6_rcv+0x683/0x710 [ 2478.722490][ T8194] process_backlog+0x711/0x13c0 [ 2478.727328][ T8194] net_rx_action+0x7a6/0x1aa0 [ 2478.731989][ T8194] __do_softirq+0x4a1/0x83a [ 2478.736469][ T8194] [ 2478.738783][ T8194] Local variable ----addr.i@sctp_process_init created at: [ 2478.745893][ T8194] sctp_process_init+0x603/0x3e30 [ 2478.750904][ T8194] sctp_process_init+0x603/0x3e30 [ 2478.755908][ T8194] ===================================================== [ 2478.762821][ T8194] Disabling lock debugging due to kernel taint [ 2478.768963][ T8194] Kernel panic - not syncing: panic_on_warn set ... [ 2478.775540][ T8194] CPU: 0 PID: 8194 Comm: syz-executor.5 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 2478.785506][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.795545][ T8194] Call Trace: [ 2478.798827][ T8194] dump_stack+0x1c9/0x220 [ 2478.803154][ T8194] panic+0x3c9/0xc1e [ 2478.807060][ T8194] kmsan_report+0x1e0/0x1e0 [ 2478.811551][ T8194] __msan_warning+0x58/0xa0 [ 2478.816052][ T8194] __crc32c_le_base+0x4fa/0xd30 [ 2478.820908][ T8194] chksum_update+0xb2/0x110 [ 2478.825411][ T8194] ? chksum_init+0xd0/0xd0 [ 2478.829839][ T8194] crypto_shash_update+0x4ed/0x550 [ 2478.834941][ T8194] ? sctp_chunk_free+0xb0/0xc0 [ 2478.839711][ T8194] ? sctp_packet_transmit+0x1ef6/0x4380 [ 2478.845247][ T8194] ? sctp_apply_peer_addr_params+0x212/0x1d40 [ 2478.851481][ T8194] ? kmsan_internal_set_origin+0x6a/0xb0 [ 2478.857105][ T8194] ? __msan_poison_alloca+0xf0/0x120 [ 2478.862382][ T8194] ? kmsan_get_metadata+0x4f/0x190 [ 2478.867572][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.873373][ T8194] crc32c+0x150/0x220 [ 2478.877349][ T8194] ? kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 2478.883145][ T8194] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2478.889201][ T8194] ? cache_from_obj+0x3ac/0x690 [ 2478.894045][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.899414][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.905209][ T8194] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2478.911261][ T8194] ? kmem_cache_free+0xbba/0x2d30 [ 2478.916277][ T8194] ? sctp_chunk_put+0x29e/0x420 [ 2478.921125][ T8194] sctp_csum_update+0x89/0xa0 [ 2478.925797][ T8194] __skb_checksum+0x12f7/0x1300 [ 2478.930650][ T8194] ? sctp_chunk_put+0x29e/0x420 [ 2478.935501][ T8194] ? __sctp_packet_append_chunk+0x1750/0x1750 [ 2478.941558][ T8194] sctp_packet_transmit+0x422d/0x4380 [ 2478.946965][ T8194] sctp_outq_flush+0x1823/0x5d80 [ 2478.951900][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.957703][ T8194] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 2478.963875][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.969094][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2478.974894][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.980090][ T8194] sctp_outq_uncork+0xd0/0xf0 [ 2478.984763][ T8194] sctp_do_sm+0x9105/0x9760 [ 2478.989267][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.994470][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2478.999665][ T8194] ? kmsan_get_metadata+0x11e/0x190 [ 2479.004853][ T8194] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2479.010653][ T8194] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2479.016714][ T8194] ? __update_load_avg_cfs_rq+0x106/0x1270 [ 2479.022514][ T8194] ? __update_load_avg_se+0x108/0x1220 [ 2479.027987][ T8194] sctp_primitive_REQUESTHEARTBEAT+0x175/0x1a0 [ 2479.034141][ T8194] sctp_apply_peer_addr_params+0x212/0x1d40 [ 2479.040036][ T8194] sctp_setsockopt+0x18518/0x18c00 [ 2479.045157][ T8194] ? sctp_shutdown+0x270/0x270 [ 2479.049910][ T8194] sock_common_setsockopt+0x13b/0x170 [ 2479.055296][ T8194] __sys_setsockopt+0x7c3/0xa30 [ 2479.060140][ T8194] ? sock_common_recvmsg+0x290/0x290 [ 2479.065422][ T8194] __se_sys_setsockopt+0xdd/0x100 [ 2479.070442][ T8194] __x64_sys_setsockopt+0x62/0x80 [ 2479.075455][ T8194] do_syscall_64+0xb6/0x160 [ 2479.079951][ T8194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2479.085829][ T8194] RIP: 0033:0x45af49 [ 2479.089711][ T8194] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2479.109309][ T8194] RSP: 002b:00007fdfe6a03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2479.117709][ T8194] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045af49 [ 2479.125675][ T8194] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000007 [ 2479.133635][ T8194] RBP: 000000000075c070 R08: 0000000000000098 R09: 0000000000000000 [ 2479.141591][ T8194] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007fdfe6a046d4 [ 2479.149556][ T8194] R13: 00000000004d4118 R14: 00000000004e5160 R15: 00000000ffffffff [ 2479.158913][ T8194] Kernel Offset: 0x22a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 2479.170551][ T8194] Rebooting in 86400 seconds..