0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6800}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6c00}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:13 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7219}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:14 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x306)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1770.886831][T13722] __nla_validate_parse: 57 callbacks suppressed
[ 1770.886840][T13722] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:14 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1770.980884][T13722] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7400}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7a00}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1771.213257][T13744] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1771.237503][T13744] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1771.310493][T13750] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1771.320906][T13750] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8100}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

[ 1771.468308][T13754] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1771.532687][T13754] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:14 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x307)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:14 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1771.747380][T13779] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1771.819546][T13779] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x34000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:15 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)

12:51:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x400300}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:15 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x308)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf0ffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, 0x0, 0x0, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:15 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:16 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x309)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:16 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)

12:51:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x5000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, 0x0, 0x0, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:16 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:16 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x30a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x9000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:17 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)

12:51:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, 0x0, 0x0, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:17 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:17 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x30b)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:17 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

12:51:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x11000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x12000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x13000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x14000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:18 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x30c)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:18 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x20000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:18 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

12:51:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x40000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x48000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4c000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

[ 1775.970021][T14060] __nla_validate_parse: 54 callbacks suppressed
[ 1775.970030][T14060] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1775.987568][T14060] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:19 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x30d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x60000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1776.210819][T14078] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1776.230147][T14078] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:19 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x65580000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1776.551416][T14095] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1776.568393][T14095] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:19 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

12:51:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x68000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1776.758643][T14109] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1776.797035][T14109] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:20 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x30e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6c000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

[ 1776.990564][T14125] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1777.037888][T14125] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x72190000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

12:51:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x74000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:20 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7a000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

12:51:20 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)

12:51:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x81000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:20 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x30f)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x88a8ffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x9effffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {0x0}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:21 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

12:51:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf0ffffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:21 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

12:51:21 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfcffffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:21 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

12:51:21 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)

12:51:21 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x310)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffffa888}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:21 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

12:51:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfffff000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {0x0}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:21 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

12:51:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffffff7f}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:22 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

12:51:22 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2040000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffffff9e}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:22 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)

12:51:22 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x311)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfffffff0}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfffffffc}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {0x0}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x40030000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf0ffffffffffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:23 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:23 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

12:51:23 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x312)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:23 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

12:51:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x100000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:23 executing program 5:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0)

12:51:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="4ef27f454c460000002f006c0000000000000000442305030000000000380b00e00000000009000400"/55], 0x50)

12:51:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x200000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:23 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

12:51:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="4ef27f454c4600000001006c0000000000000000442305030000000000380b00e00000000009000400"/55], 0x50)

12:51:23 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x313)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:24 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x300000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:24 executing program 5:
r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x499f, 0x0, 0x7}]})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000022008151c01980ecdb4c453a010065160b00010010000000020000140e0002000a00cd6ddc2976d153b4", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x28)

12:51:24 executing program 5:
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_setup(0x10000, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x89b, &(0x7f0000000300)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)="4f369f35eb9026118899a9103cb2a2e2326f2af6952053fbc3ac3b4dbd6c99c729633e06e378998ae972c6d25f64477151c60afd9f3068b83a934569590d3514e11d41343b3a0720212d6251d52e7ba15fe9aa89fcea71a788090dbbb4b258fed099a76c13df21819aeb6fd55c62384871d76dfadd1aa8237178e21222c90c18d7bd400bf5ef26f57f806d9ca803b14d8206f73710e5da0d62d6", 0x9a, 0x0, 0x0, 0x2}])

12:51:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x400000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1781.010097][T14396] __nla_validate_parse: 38 callbacks suppressed
[ 1781.010121][T14396] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:24 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x314)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1781.153494][T14396] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:24 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
execve(0x0, 0x0, 0x0)
execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
r2 = dup2(r0, r1)
open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

12:51:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x500000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1781.546310][T14424] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1781.599290][T14424] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:25 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:25 executing program 5:
clone(0x2040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x2)

12:51:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x600000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x315)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1781.883346][T14453] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1781.923852][T14453] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x700000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1782.162668][T14475] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1782.196013][T14475] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x800000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:25 executing program 5:
clone(0x84007bf8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
mknod(&(0x7f0000000100)='./file0\x00', 0x1142, 0x0)
execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
ptrace(0x10, r0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
ptrace(0x11, r0)

[ 1782.455248][T14483] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x316)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1782.543884][T14483] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:25 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x900000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa00000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb00000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc00000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe00000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:26 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
prctl$PR_GET_TID_ADDRESS(0x28, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x356)
socket$inet6(0xa, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
open(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f00000085c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)="c1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000900)='q', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

12:51:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {0x0}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:26 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x317)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf00000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1000000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:26 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:26 executing program 5:

12:51:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1100000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:26 executing program 5:

12:51:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1200000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:27 executing program 5:

12:51:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {0x0}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:27 executing program 5:

12:51:27 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x318)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1300000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:27 executing program 5:

12:51:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1400000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:27 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:27 executing program 5:

12:51:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2000000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071")
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc0000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006e6574656d0000004c0002000000000000000000000000000001006c68746200000002000000050104000000000000000000000000000200030010000000000000000000010000000000000000000500000000000000020003000000000000000000000000000000000000000000020003000000000000000000000000000dbb619f1116be7642ac03a9508d33170000000000000000050000000000000002000300"/196], 0xcc}}, 0x0)

12:51:28 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x319)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {0x0}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4000000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4800000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4c00000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:28 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6000000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:28 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x31a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6558000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1786.075526][T14740] __nla_validate_parse: 34 callbacks suppressed
[ 1786.075550][T14740] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1786.101002][T14740] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:29 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x31b)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6800000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1786.333976][T14762] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1786.379548][T14762] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:29 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6c00000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7219000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1786.620964][T14781] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1786.642763][T14781] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1786.722084][T14792] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1786.779449][T14792] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:30 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x31c)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7400000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1786.987947][T14811] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1787.045653][T14811] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7a00000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:30 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8100000000000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:30 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x31d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x88a8ffff00000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:31 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x9effffff00000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:31 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:31 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x31e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf0ffffff00000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:31 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:31 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {0x0}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfcffffff00000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffffff7f00000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:32 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x31f)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffffffff00000000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:32 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf204000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {0x0}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfffffffffffff000}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:32 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x320)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x2, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x3, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:33 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:33 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x3f, "61e54b9b2b5f8c7599225ee03581b3347128ef11386b1656199e8bc5c5221dad50afddef8547cc4e8a721fbf2091edab2fe03d3232931aebb8157232ac0b6d"}, &(0x7f0000000100)=0x63)

12:51:33 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {0x0}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x4, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:33 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x321)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:51:33 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r1, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

12:51:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x5, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x6, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

12:51:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

12:51:34 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r2, 0x0, 0x0)
fsetxattr(r2, &(0x7f0000000040)=@random={'os2.', 'trusted\x02\x00'}, &(0x7f0000000080)='{!\x00', 0x3, 0x1)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x7, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1791.309128][T15088] __nla_validate_parse: 22 callbacks suppressed
[ 1791.309138][T15088] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

12:51:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

12:51:34 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x322)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x8, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1791.436941][T15102] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

12:51:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

[ 1791.664384][T15124] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1791.716986][T15124] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

12:51:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)

12:51:35 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r4 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x20000, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000480)={0x8, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}]})
ftruncate(r4, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r3, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=<r6=>0x0)
ptrace$pokeuser(0x6, r6, 0x1, 0x9)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xb, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1792.244575][T15145] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)

12:51:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000400)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0xffffffc5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
connect(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

12:51:35 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x323)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xc, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1792.341916][T15155] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)

12:51:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xd, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2], 0x2}}, 0x0)

[ 1792.635433][T15181] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x4, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x49249249249255b, 0x0)

12:51:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2], 0x2}}, 0x0)

[ 1792.831380][T15189] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1792.876420][T15189] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
12:51:36 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x30)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
write(r0, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r2=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000b9bb4a05ebe4080824fa2e1f3f7b9cfc6261bfe14428d4740ddf9f25849bb353dbab9c7c01ed061248eacae6e2c617af13"], &(0x7f00000003c0)=0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={<r5=>0xffffffffffffffff})
gettid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={<r6=>0x0}, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000002840)='/dev/vfio/vfio\x00', 0x84080, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003340), 0x4)
fcntl$getown(r4, 0x9)
lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000400))
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(&(0x7f00000000c0)='..', &(0x7f0000000040)='./file0\x00')
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='devpts\x00E\xe6\xcb\xf6~\x11mS,!\xd7\xc5_\x96j\xc3\xcb\xe8@\x8a\xd7\x0f\xbc\\\xbe\x9b2\xc4\x8cp\xe8\xe2\xdf\xdf\xb6\xc6}\xde\x0e9\xd9\x8b\xf6e\x04g7T:-*w\x88\x9b\xc3\x16(\xfe\xc2=T\xab\xaa\xfe\xca\xf7I>#htW\xeac_\xf5\x0e\xd7\xa2\xe5\x86l\xa8\x00\xd6\xbf\x01B\xbe\xe3h\xab\x15\b\x02 \xcdu\xbf\xfaho>/\xe4\x02+)3\xb6\x8a\xc8\xde\x9f\xb2\x19t\x16\x8b\xd7U\xfc\x97L\xe0\'\xf4\x8e\xd0\x00\x00\x00\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)
getresgid(&(0x7f0000000b80), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003040)=[{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001380)="7a792912114d96af14231053829d0bced7a7", 0x12}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00'], 0x6b, 0x8010}], 0x1, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000, 0x0)

12:51:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xe, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1793.161856][T15205] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2], 0x2}}, 0x0)

12:51:36 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e750844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27)

12:51:36 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x324)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x10, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0)

12:51:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x11, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:36 executing program 2:

12:51:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0)

12:51:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x12, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0)

12:51:37 executing program 2:

12:51:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x68, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:37 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x325)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:37 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
r6 = dup3(r5, r0, 0x80000)
epoll_wait(r6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x80)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r8 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r9 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r9, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r8, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r8, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r10 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r11 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r11, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r10, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r10, r11, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000340)={0x5, 0x70, 0x783e, 0x5, 0xf0, 0x80000001, 0x0, 0x400, 0x10480, 0xf, 0x800, 0x9, 0x70f, 0x16f, 0x0, 0x100000000, 0x9, 0x932, 0x8, 0xf1e, 0x5, 0x5, 0xffb, 0x9, 0xffff, 0x2, 0x20, 0x0, 0x80000001, 0xfbb, 0x9, 0x6, 0x9, 0x800, 0x8, 0x1, 0x8001, 0xfffffffffffffffa, 0x0, 0x10b3, 0x0, @perf_bp={&(0x7f0000000300), 0x9}, 0x800, 0x0, 0x1000, 0xea1cccaf1b3ce172, 0xbdb5, 0x9, 0x4})
ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000240)=""/179)

12:51:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000"], 0x3}}, 0x0)

12:51:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$setsig(r3, 0xa, 0x11)
fcntl$setlease(r3, 0x400, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r3, 0x400, 0x2)

12:51:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000"], 0x3}}, 0x0)

12:51:37 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x3ec}}, @qdisc_kind_options=@q_htb={{0x34d, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa8, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000"], 0x3}}, 0x0)

12:51:37 executing program 2:

12:51:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x2, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:38 executing program 2:

12:51:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0"], 0x3}}, 0x0)

12:51:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x8, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:38 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x326)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:38 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
setrlimit(0xf, &(0x7f0000000040)={0x80, 0x6})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa0564e84d0e118581c1b0f5d9eab1d3a5ffb0ca7a929a8f3e681106000000000000001000245d83fa522076ccb5c7b4199e8c52dfb44467931fcc3a21cf839741624aa9d9c24992b4d21256458fe301802c6e8bc1874debb6b32f00d00b99839d1e39d2635044e1a65753c6f3f56d8a7f446db885baa3948e27257f6a15f6428692adf5f5b77aaeefbf47c8964181205df23ed3d3cab8f810d23624c2e0a6eb59286da2de5f2dc48e2c77ff7783fe746f23bf350000000000000095a5c796fcb8f621ddcb3c5adc66f50e7751b8d05da23b4e018d3b6770c1855597", 0xffb9}], 0x1, 0x0)

12:51:38 executing program 2:

12:51:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0xe, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0"], 0x3}}, 0x0)

12:51:38 executing program 2:

12:51:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0"], 0x3}}, 0x0)

12:51:38 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)
openat$ion(0xffffffffffffff9c, 0x0, 0x100, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000280)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0)

[ 1795.243514][T15349] validate_nla: 32 callbacks suppressed
[ 1795.243523][T15349] netlink: 'syz-executor.4': attribute type 14 has an invalid length.
12:51:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:51:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x25, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffff"], 0x3}}, 0x0)

12:51:39 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)
openat$ion(0xffffffffffffff9c, 0x0, 0x100, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000280)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0)

12:51:39 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x327)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:39 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0))
pselect6(0x56, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000000000, 0x9}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8}, &(0x7f0000000200), 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffff"], 0x3}}, 0x0)

12:51:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x68, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffff"], 0x3}}, 0x0)

12:51:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x300, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:39 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000000c0)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)=@isdn, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
shutdown(r0, 0x0)

12:51:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYBLOB="0382000000000000000000e0ffffff"], 0x2}}, 0x0)

12:51:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4}}], 0x1, 0x0, &(0x7f0000004840))

12:51:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x7ffffff2, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYBLOB="0382000000000000000000e0ffffff"], 0x2}}, 0x0)

12:51:39 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000280)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {0x0}, {&(0x7f0000000940)=""/71, 0x47}], 0x8, 0x0)

12:51:39 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x328)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:39 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x47b2806a, 0x159301)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x240000, 0x0)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000080))
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1796.787882][T15431] __nla_validate_parse: 17 callbacks suppressed
[ 1796.787892][T15431] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYBLOB="0382000000000000000000e0ffffff"], 0x2}}, 0x0)

12:51:40 executing program 2:
r0 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10)

[ 1796.864071][T15431] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x7ffffff8, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:40 executing program 2:
r0 = open(&(0x7f0000000100)='./file0\x00', 0x143042, 0x0)
timer_create(0x0, 0x0, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
write$P9_RFLUSH(r0, 0x0, 0xd158e7cf)

[ 1797.112506][T15458] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1797.200088][T15458] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:51:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4}}], 0x1, 0x0, &(0x7f0000004840))

12:51:40 executing program 2:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x15984a, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000000080)=[{}], 0x18)
sendfile(r1, r0, &(0x7f0000000000), 0x100000001)

12:51:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x7ffffff9, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:40 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x329)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1797.667272][T15483] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1797.697975][T15483] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:40 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)={0x100000, 0x4000})
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
socket$inet(0x2, 0xa, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r5, 0x0, 0x0)
fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getuid()
r8 = getpgid(0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc))
r11 = syz_open_pts(r10, 0x0)
fstat(r10, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
ioctl$sock_SIOCGPGRP(r9, 0x8904, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000005c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r9, 0x80045300, &(0x7f00000047c0))
fstat(r11, 0x0)
ioctl$PPPIOCSPASS(r9, 0x40107447, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000046c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r11]}}], 0x78}, {0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000780)="7d5da3a48a113adefb9ab6f86bac10178a1f42e92213966d02c55d25771aa9228df68539fe680b72c1bdc3bdaba36559bdf29438269b8149cab2f4717898368f6da161dd900212de1a02944ad7c90bf2419ea9f413f68716", 0x58}, {0x0}, {0x0}, {&(0x7f0000001a80)="f5851c09e99c62f568c2372169270b24f78b4f5e72ad282184dd49688484dba058e496a3f90bf5d534cdc1a4f2b0d1d1cd7ca2483e", 0x35}], 0x4, &(0x7f0000001c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r10, r10]}}], 0x20}, {&(0x7f0000001ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004280)=[{0x0}, {0x0}, {0x0}], 0x3}], 0x3, 0x0)
r13 = getegid()
r14 = gettid()
ptrace(0x4206, r14)
tkill(r14, 0x9)
fstat(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r17, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r17, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r17, 0x0, 0x0)
r18 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r18, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r18, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r19 = accept$alg(r18, 0x0, 0x0)
sendmsg$alg(r19, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r19, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r19, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
r20 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r20, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r20, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r20, 0x0, 0x0)
r21 = gettid()
ptrace(0x4206, r21)
tkill(r21, 0x9)
lstat(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, <r22=>0x0})
r23 = getgid()
r24 = gettid()
ptrace(0x4206, r24)
tkill(r24, 0x9)
lstat(&(0x7f0000002340)='./file0\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, <r25=>0x0})
getgroups(0x2, &(0x7f0000002400)=[<r26=>0x0, 0x0])
r27 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r27, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r27, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r27, 0x0, 0x0)
r28 = gettid()
ptrace(0x4206, r28)
tkill(r28, 0x9)
r29 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r29, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r29, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r29, 0x0, 0x0)
r30 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r30, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r30, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r31 = accept$alg(r30, 0x0, 0x0)
sendmsg$alg(r31, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r31, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r31, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
r32 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r32, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r32, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r32, 0x0, 0x0)
r33 = gettid()
ptrace(0x4206, r33)
tkill(r33, 0x9)
r34 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
r35 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r35, 0x40045431, &(0x7f00003b9fdc))
r36 = syz_open_pts(r35, 0x0)
fstat(r35, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, <r37=>0x0})
ioctl$sock_SIOCGPGRP(r34, 0x8904, 0x0)
getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f00000005c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r34, 0x80045300, &(0x7f00000047c0))
fstat(r36, 0x0)
ioctl$PPPIOCSPASS(r34, 0x40107447, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000046c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, r37}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r34]}}, @rights={{0x1c, 0x1, 0x1, [r34, 0xffffffffffffffff, r36]}}], 0x78}, {0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000780)="7d5da3a48a113adefb9ab6f86bac10178a1f42e92213966d02c55d25771aa9228df68539fe680b72c1bdc3bdaba36559bdf29438269b8149cab2f4717898368f6da161dd900212de1a02944ad7c90bf2419ea9f413f68716", 0x58}, {0x0}, {0x0}, {&(0x7f0000001a80)="f5851c09e99c62f568c2372169270b24f78b4f5e72ad282184dd49688484dba058e496a3f90bf5d534cdc1a4f2b0d1d1cd7ca2483e", 0x35}], 0x4, &(0x7f0000001c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r35, r35]}}], 0x20}, {&(0x7f0000001ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004280)=[{0x0}, {0x0}, {0x0}], 0x3}], 0x3, 0x0)
r38 = socket$inet6(0xa, 0x6, 0x0)
stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r39=>0x0})
lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r40=>0x0})
fchown(r38, r39, r40)
sendmsg$netlink(r1, &(0x7f0000002580)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x843}, 0xc, &(0x7f0000002100)=[{&(0x7f0000000480)={0x3b8, 0x15, 0x200, 0x70bd27, 0x25dfdbfd, "", [@nested={0x148, 0x4a, [@generic="8559bad0f760ba8849b022d4f6eb2602ed6e928e57a1c6972a1d4078619745da0e4a9a23cbfdd56197bfde1f7c996859cc2f1abdf84c91e5ac3361b1dc99db5d72c759615099de7006d0d320ae95c68fc9a7ade7f673a822a22ed023de0edf31bd5daed5c6b6441833b7a35beb9cca06d9cb30c5a14a3eca6782", @generic="e8fb441e9b92cd83ee74e42709e77dac81cc0393a8348291476c2e2756ecd082a9bfb9267c061fd87c93dfbd3bf0f11e579fd326a90b3268b4afb36edcb4bc7d8a0c1a54fd0bed3c742879b14423e107bca5c1babca41a3a5ad2cee63ed8b90c47ac26c9b8b58ee865896d9bf0d110dcbd31b81352237b95595901de201e304649a6dfef41a380dd66f8e14be5effb8c30d516fa7b0d8716f8758e65c0f00a30972fe4780e77348b1af5c6914d595d3f8186cb27a2f1957789794dae1efea176eda4821535efcf6867"]}, @generic="404c5427af3a8344a695f34bbe81374d30c15a5e6474239dd63d9eb7b4b4148f7590b69f3e8b8e3ba2c09aaf", @generic="8df361b8c10f501f5ad19cfde0ba40a977fec0ad6247a77e36eccc5e71d224c2200656329962872b1ec5cc95d46f5ab7df83078d24f2dfcf7b458f8e631fa5", @nested={0x1bc, 0x51, [@typed={0x4, 0x58}, @typed={0x8, 0xd, @uid=r6}, @generic="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", @typed={0x8, 0x4, @u32=0x100000001}, @generic="ff17ddbdb20ce6fb1d0b8efab2d8a4413c9adabc3b5d8377b673ecde24b8cbee3d9fc13d64c4b9d46aae60d2bff1e2dbe4e00cf2e98ce3dcf0946f1f51294b19f17d64dd930b1532597479b7283e8cb8da17f9d7888321ffae36392241c0bddc969aabf529be36610cf6de1d76f2e61571e365457c969f6168a3d7a31aa47e3ecd0732adebc8cffac658a453aae2b00314e20e0393bace6e0b09e2238453d3141e03882e2974"]}, @generic="2bb046723fa9da6c67a4bb990f1b7fe64460f2028941ea9b85b20a8ef1c45b1a6748580531c87bef29c0978b40bcfe3e7d87a6eef931bf55c1"]}, 0x3b8}, {&(0x7f0000000300)={0xb0, 0x3b, 0x300, 0x70bd28, 0x25dfdbfd, "", [@nested={0xa0, 0x87, [@generic="649df8480d2b3714c97a00fb2f2cede4532167411cada3c5d3873d5dcdbb96e408c710f90ece6438d16d14ce29940560cd1246b262a5283c3d129fa7591db67129a4d3d1949dd488ccb698841948990ff3b3936449f72fe2cd3867f40e43dc348c15d0038f829d6a907244ef3bfbab799e5c014b5a2765ef880e7e219c9c05ae7ca5f3b98e822a5c7014af23b37004e540419b6aa183708faee6e6"]}]}, 0xb0}, {&(0x7f0000000840)={0x108, 0x3d, 0x3a4, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x74, @u32=0x40}, @nested={0xf0, 0xa, [@typed={0xc, 0x3e, @u64=0x3ff}, @typed={0x8, 0x78, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x10, 0x2e, @binary="c0c968eece5acc6dc5"}, @typed={0x18, 0x6c, @str='morus1280-generic\x00'}, @typed={0x8, 0x5, @u32=0x7}, @generic="f75096bbde553339fb753847a61c792452c1a91691115d7141829083a183d0a6d7459237f2edda4b8d8d509fa67ba79941244618c60fca712cd70d67543b72d43fd216af2cdd875e7e68f335e60b42e01d7d9d73c6e81fa0f909d04c99985cb5e58e674cf2fcbcbf573b73f224a4703de41f0912b90f95adc9fb0c0884fba34c419156344b0a5bc15a123fea86e5b1d70e80f2c6a155961d5ab9bc6d35c7aafff6dc65c88f"]}]}, 0x108}, {&(0x7f0000000980)={0x139c, 0x21, 0x2, 0x70bd2b, 0x25dfdbff, "", [@nested={0x1330, 0x17, [@generic="7887647954799f201173c99c8bf96793887a09d13cb892af65e60d29c40c97d71fb856d529e873191a4db4eb6bb551f37f058fe0a577146c5286bfa3f8de6b3bb048b04ac484e980a2bee19256e58287db9d242d75fa6a8990bbbbb54d4aa6d274bf25d640fcb3cfa9fd436b4f2fd69ef102aeaa17928225e5dbcc8d0ddfe90dfcaab58dab9aa530cb985d2249547fc4d7ba293812c373cb9e6d212264134d6aa8afe501f07053bc846b220772a8a4d82d4defed9baa7dcd8b8fa6ef8b169031cc51e0c5a8b7c2a66d6750766dbf55301d8ecb", @generic="1113473e979137bfaf1a8fd5cc744252a9eb513b27ee4b39014923e50323212514f7f77265df6deb84f8239b0e7973b294ed1c407594e2f0980ed04f", @generic="db88218d08230239c30b8541d9880170dd6cb55334ca1c980c7b5d913e7834ead3676d44c151c7f986e5a6ded02fbef82db69f82af4e22c06b64f015e8b28e64328bcf597aeec092a215f75fe55eed9564c9c556fd8188cf9dc3712f1829b789bf10df477bd9c5065b505276daced9a52b15264bb95e6a32042f80c9da00e8c7a60fdd7872b5d7469c1628da68cc86a95345044f3ff1f1c83b59e0a19a9dc04d7efda35c2be6caa0b3ccebf1f45cb95fc8828b34e0cb19c4cae9a7e1f92f68242720b5db537392568a3df2a3", @typed={0x8, 0x39, @u32=0x7ff}, @generic="d28934998e1cdd75e0972b30580b5cdcf498d0eb2120007c6d082baf7cdb2d6fa56a3bcdc4d4d7a225276bf1718bd572a577d22694448ec3d0ce01309f704ed1db990ff18d246bb3d11c380f370fa89e314d3103051490e4e3891333505c6f09cb35597759b1c4a827966d233fdd787962070704539c43221779bafa359d7268b7", @generic="142eab642745946675e22985ee53a0fcd82a2cfc66447b574fcf5706bb7351ba9767ac0a5c5648", @generic="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", @generic="27341af1215e6a88a7114d8276bfecdf9b737097883c150fe2774bff589b9061651cab3090451dfafc53e66c48db7510266e7473904f02eda7dddf8c5c469643ec", @generic="bd45e9cc9b83235467eed6a2517fdbbc61094124e0120aea563ba375a415087c1529cb55423bff1aa4d3e14b4b0fe85946c833f1a467376896cff0cbf2a2f7a26b0efd2929484638ca60a74c4e15319e", @typed={0x10, 0x78, @str='/dev/video2\x00'}]}, @nested={0x5c, 0x35, [@generic="7465583a14ec10ce3ed02531969ea7e3c80d29f36e72156205b006f6f00155aeadcde325f23cd00686371a840c43207ee519ee5d8cfcafb2536be9400f9fced4c6268c0e10d14be4077339c87e9bf6be24583f3f35e1cc"]}]}, 0x139c}, {&(0x7f0000001d40)={0x1a0, 0x3b, 0x10, 0x70bd29, 0x25dfdbfc, "", [@typed={0xf0, 0x1b, @binary="f23cd4ac7352d0b2bf08f8b6720eeb742fa0c13631e3acbde7a3c66d0aa72097d7de12ab112a22f12347b532e983674b54f8223b7070d3f70b6c9b69bb485c0ffca05a70bc5f46581137382f8f1406c3acd65b81a363edffa2647961385a6a5d30bb8ec427554e6fbeea79e9cb5904e388629e74db7c89ee513053733c94b15896a63efc9e0230d1f4c236cd8efcabf5ebc05388f22b760acda60ae96cf60797c820c9b95cec98503ee17e1b96441d31daa6af0ec895f9f0e111c737445fa7c9fe5eadb23b175e5486299caf4dc78277abb1114a4368a3146f27bac741d66b853950e68dcf7d9345fc09"}, @typed={0x8, 0x0, @uid=0xee00}, @typed={0x98, 0x17, @binary="504b704057fdfae7e00e02f06f68329ba92ee3acc38f4813444254a9ef51b262400b818a350561dcdaf07eb541dc7654d24545131282b23ed9fbd1eac113e501d6e3e16a7f4881ab4c33935b679731bbd6d80a76e85755332ce3fa720c884b6ca712d86190f2666708153af7ba7751d1b05c749f2c04d446844f7d584a773941c55a58464f5b7277544e9e9caed149b4a0b40aac"}]}, 0x1a0}, {&(0x7f00000003c0)={0x18, 0x17, 0xf4368f9f6cd20239, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x38, @uid=r7}]}, 0x18}, {&(0x7f0000001f00)={0x1d4, 0x2a, 0x300, 0x70bd28, 0x25dfdbfd, "", [@generic="eb5ddf7e4e4e4779dafb4192f54aac104f043e89a62f3971c804a7428cfac3d78c442289351f07b6c7214dfa2293c3e73af67fdcd6b796f441ab7a79c7b436c91092df3813ce4890f29722d8e9", @typed={0x7c, 0x2e, @binary="a2ca2f8f21c185252e5eefddf7f89c4dec4536ac847ea08460de1e86973b43a40ea68bc97fe00dc74217572913cebf7c5054cfc004575f700f28ad12d5cc2262fbd34d98e6e236bdc9ec9ad1516db2aab2995164b2ebc42ebfb05e9b3d09420514e60d1be41e4e1da0158da79cf5404503c201b634cbf7"}, @generic="305e2bbb5c38eafb6ea2253636aa0149c214b99baf2979e6cc18c84d48caa86555c0d48fba4079006aba0b8d46b3abc11bb69a3f99fc77d53946185d2ab9e16477476f1801d6c69492d1d7c8c8a794226f644cdf47395efd98249dc2fb1bebebeb8894cdb9f2de80a1814c3072340278f78788c8e037a94f8ee9ef6efd0ae6fd657263b4d55f6f2b67d4f24d88a5b070de4b2f4b8504ea283ebb4b29f9648de598dda4618dec995c858daa7e65819262cf8eeecad7edd3f2534e59c7f4510996c0477bc530ff87d2de05c566343a618ddeeeee4b21f5a841e65f1a98200fb99bd65ce4366e898d9303d1ac33961161530bc6326ec518de1f"]}, 0x1d4}], 0x7, &(0x7f0000002440)=[@cred={{0x1c, 0x1, 0x2, {r8, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x28, 0x1, 0x1, [r17, r19, r3, r4, r20, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}, @rights={{0x14, 0x1, 0x1, [r27]}}, @cred={{0x1c, 0x1, 0x2, {r28, 0xffffffffffffffff, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r3, r29, r31, r32, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r33, r37, r40}}}], 0x128, 0x4010}, 0x80)
ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x0, 0xfffffffffffffff7, 0x4, 0x8}})
accept$alg(r3, 0x0, 0x0)
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r41=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r41+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x2}}, 0x0)

12:51:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0xffffff1f, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:41 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4)
clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r3, 0x15, 0x0, 0x0, {0x12}}, 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00')
ptrace(0x4206, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000))
ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000140)="19495ff17d")
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000000)={0x0})

12:51:41 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x2}}, 0x0)

[ 1797.883498][T15506] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1797.912805][T15506] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, '\netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1798.076321][T15523] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4}}], 0x1, 0x0, &(0x7f0000004840))

12:51:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x2}}, 0x0)

12:51:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, '%etem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:41 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x32a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:41 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000040)={@remote, @empty}, &(0x7f0000000080)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

[ 1798.529062][T15533] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'n\ntem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$setstatus(r0, 0x4, 0x80000000002c00)

12:51:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'n%tem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c0000", @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, 0x0)

12:51:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'nhtem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c0000", @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:42 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x32b)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:42 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x80000000, 0x80000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c0000", @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'ne\nem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:42 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="e1affde3", 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10)
close(r0)

12:51:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00000000000000", @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'ne%em\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00000000000000", @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:42 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r1, 0x0, 0x10000000002, &(0x7f0000000000)="e1affde3", 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000080), 0x10)
bind$can_raw(r1, &(0x7f0000000480)={0x1d, r2}, 0x10)

12:51:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, 0x0)

12:51:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'net\nm\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00000000000000", @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:43 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x32c)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:43 executing program 2:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x4, 0x0, 0xfffffffffffffffc}, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x30005, 0x0)

12:51:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/18, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:43 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x10000)
openat$cgroup_type(r2, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x0, 0x5)
write(r3, &(0x7f0000000240)="bb7843ca65d240510932a03f554e745c374ce3884356458c57146ac9f126282aa970cdd48733d2a24e25d59971d282c62dec98781cc1f8639b186994e3e0a97bbe2a17d16d2df33871c3635ef4670cf6537c3669f44d2cf89ea10e56dcc02316738f6e9795e7afb0684c1c3b11e80498465aa1b4b7f315c3abc35cffa552ca2cb9340c60bf3ecb360db54938ac458c583f2874cc421992e95ccfe5d2ac52cf9ddd8f037a29b49f41e6721f016beab199", 0xb0)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r5, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612)

12:51:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'net%m\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/18, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/18, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'nethm\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:43 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x32d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, 0x0)

12:51:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/19, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x02'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:44 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x32e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1801.093706][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1801.099640][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1801.105558][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1801.111301][    C1] protocol 88fb is buggy, dev hsr_slave_1
12:51:44 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/217, 0xd9}, {0x0}], 0x2, 0x0)

12:51:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x03'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:44 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r4 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r4, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r3, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000240)={0x9, 0x0, 'client0\x00', 0xffffffff80000003, "9c0b97b2867a3f25", "a90bba227ee96f91cce44419458579af0f9d5b724a9c87d2741a7ccbfad918e8", 0x6, 0x80000000})
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x600180)
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/19, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:44 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x32f)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x04'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/19, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0x3}}, 0x0)

12:51:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x05'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:45 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x330)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:45 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:51:45 executing program 5:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:51:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x06'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:45 executing program 3:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1802.019689][T15786] __nla_validate_parse: 16 callbacks suppressed
[ 1802.019697][T15786] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1802.063943][T15786] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\a'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1802.316504][T15806] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1802.341397][T15806] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\b'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:45 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x331)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1802.561973][T15815] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1802.641494][T15815] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\t'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:45 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000b80)='cpuset\x1c\x15\xbe&\xba\xc6\xf9\xd8\xa4.effective_mems\x00', 0x26e1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r8 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r8, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r7, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000080)={0x3})
r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000e0a172a883499b797d7381e100000000000000008400", @ANYRES32=<r10=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={r10}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r10}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r10, 0x2}, 0x8)
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1802.838678][T15831] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1802.905835][T15831] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:46 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:51:46 executing program 3:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:51:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x5, 0x9}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x1000}, {}, {0x10}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {0x9, 0x1}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x6}, {}]}, @enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0x8}, {0xe, 0x6}, {0x1, 0x100}, {0x0, 0x606}]}, @func={0x0, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x0, 0x0, 0x5f, 0x0]}}, 0x0, 0xe7, 0x0, 0x1}, 0x20)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12:51:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\n'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1803.137396][T15852] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1803.193791][T15852] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1803.230608][T15850] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
12:51:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\v'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:46 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x332)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\f'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x0e'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x0f'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:47 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000100))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r4, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x2, 0xffffffff})
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r6=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:51:47 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:51:47 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0)

12:51:47 executing program 5:
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_dest={0x18}], 0x18}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f0000000680)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbc, 0xffffffa0}}, &(0x7f0000000200)='GPLz', 0x5, 0xff7b, &(0x7f00000006c0)=""/195}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

12:51:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x10'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:47 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast1, 0x0, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0)

12:51:47 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x62042, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0xffffff81, 0x10006, 0x0, 0x0, @time, {}, {}, @result}], 0x30)

12:51:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x11'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:47 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x333)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:47 executing program 5:
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0)

12:51:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x12'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
setreuid(0x0, 0xee00)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

12:51:48 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
r3 = syz_open_dev$vbi(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
r5 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x42000)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00'}, 0x10)
poll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x5a8c}, {r5, 0x4}, {r6, 0x614}], 0x3, 0x9)
ftruncate(r4, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r3, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r3, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)

12:51:48 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:51:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x13'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:48 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xde1192a447bdea05}, 0x4)

12:51:48 executing program 3:
setreuid(0x0, 0xee00)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001200192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

12:51:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x14'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:48 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x62042, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0xffffff81, 0x10002, 0x0, 0x0, @time, {}, {}, @result}], 0x30)

12:51:48 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x9, 0x4, 0x6}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000600)=""/252, 0x3b, 0xfc, 0x1}, 0x20)

12:51:48 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x334)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:48 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x16, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @broadcast, {[@generic={0x0, 0xe, "b790f93a73921fce3d9cc320"}, @generic={0x0, 0x2}, @lsrr={0x83, 0x1b, 0x0, [@empty, @local, @loopback, @multicast1, @remote, @loopback]}, @cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @ra={0x94, 0x6}, @rr={0x7, 0x7, 0x0, [@loopback]}, @noop]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0)

12:51:48 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast1, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0)

12:51:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netemH'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:48 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r1, 0x0, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x0, 0x1000000000, 0x0, 0x79, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x908}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x989680}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="c482c9240702f27c6b9c48cc69b2e6f1fd76adc445a40537a7239cf8e2f13be7c92085fe198a984b7a8b7e8dfc79b2c88742de3637fa55c9479da06fef4428ca88ff5aed84385e48a8c4ccf5acc7555954cb2d23bdcf440538b77626101deabeb32a40382848a5c2656201ebf8560ffe95a74377685ce1bc15", 0x79}, {&(0x7f0000000040)}, {&(0x7f00000002c0)="bdedd5caa9b9a3faf0a964123c0282d679b9a37402e9c0f110ca382ce4037bd6baef2e8649576a9389a086463e8c71cec0a6232224a8b2e7047d68e06d3874ea1acd184ab84efa819942e5f9c3f4c6a0927bd5b5e41c4657177794d4fb9bbdee2c4ca0100734988a69989a0ae7eb8c89dbfe1e96e0", 0x75}, {&(0x7f0000000340)="76f9d3348bfb95f7c7e3641e0203f0e060c30b4393d4b005e2982f89263a7272c7f1c80e09075cf8cab379baaa719156c787e57dee222312846728c2be718c10ed783760405aea0d19f25a8ebb37f0d613e0f08a31ac83d442082813f3a23bad79ca2637bcddc4be6542f6c0aab291f89297528b474980846d8d98941b69c231b58d8aed0a8fc80b662c94bb0c4ead10bf3be7e0d8aa621ab7055b55d6e38ff350ed8e46b1c3948205d59e548096fb554f39c14f0456a16bd649b6ae3b0a6fea49f07bd9f930f8e90871b1dd9b0dd3d4900cfe171c18c38b2af7956fce9993c7f91796e986b6254ad5be970d299dd7b3417758216e", 0xf5}], 0x10000000000001d0, 0x1d)
signalfd(r0, &(0x7f0000000080)={0x5}, 0x8)

12:51:48 executing program 3:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r0 = gettid()
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2, @perf_config_ext, 0x1024}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400)
openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000140)=0x2)
r6 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = open(0x0, 0x892fed69a7825a7b, 0x0)
flock(r7, 0x0)
ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000480)=ANY=[@ANYBLOB="9cadeb4ea5cd8000000000000000590ad944e72a195f9a3f15a2de24d8febefe45dadd4ccd5cc59ab1841ada82539e1d6829ffa0be7559b00567341be11c818c3cea62562de05d93e5244b008b4e9d064fbfd01bbb08f9ac9f458410df21efd2eb25"])
sendmsg(r6, 0x0, 0x0)
r8 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x0, 'cpu'}, {0x2f, 'io'}]}, 0x9)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r4, 0x7, 0x1, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r5, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=""/31, 0x1f}}, 0x10)
write$cgroup_int(r8, 0x0, 0x0)

12:51:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netemL'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:48 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0)
readv(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2)

12:51:48 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x335)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:48 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:51:49 executing program 5:

12:51:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem`'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:49 executing program 5:

12:51:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netemh'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1806.105728][T16018] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1806.164022][T16018] CPU: 0 PID: 16018 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1806.172045][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1806.182109][T16018] Call Trace:
[ 1806.185556][T16018]  dump_stack+0x172/0x1f0
[ 1806.189904][T16018]  dump_header+0x10b/0x82d
[ 1806.194333][T16018]  oom_kill_process.cold+0x10/0x15
[ 1806.199452][T16018]  out_of_memory+0x79a/0x12c0
[ 1806.204221][T16018]  ? kernfs_notify+0x131/0x1f0
[ 1806.208991][T16018]  ? __kasan_check_read+0x11/0x20
[ 1806.214021][T16018]  ? oom_killer_disable+0x280/0x280
[ 1806.219493][T16018]  ? lock_downgrade+0x920/0x920
[ 1806.224472][T16018]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1806.230025][T16018]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1806.235755][T16018]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1806.241565][T16018]  ? cgroup_file_notify+0x140/0x1b0
[ 1806.247039][T16018]  memory_max_write+0x262/0x3a0
[ 1806.247060][T16018]  ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0
[ 1806.247076][T16018]  ? lock_acquire+0x190/0x410
[ 1806.247088][T16018]  ? kernfs_fop_write+0x227/0x480
[ 1806.247108][T16018]  cgroup_file_write+0x241/0x790
[ 1806.273468][T16018]  ? mem_cgroup_count_precharge_pte_range+0x5a0/0x5a0
[ 1806.280242][T16018]  ? cgroup_migrate_add_task+0x890/0x890
[ 1806.285876][T16018]  ? __might_fault+0x1a3/0x1e0
[ 1806.290742][T16018]  ? cgroup_migrate_add_task+0x890/0x890
[ 1806.296389][T16018]  kernfs_fop_write+0x2b8/0x480
[ 1806.301246][T16018]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1806.307504][T16018]  __vfs_write+0x8a/0x110
[ 1806.311835][T16018]  ? kernfs_fop_open+0xd80/0xd80
[ 1806.316785][T16018]  vfs_write+0x268/0x5d0
[ 1806.321031][T16018]  ksys_write+0x14f/0x290
[ 1806.325478][T16018]  ? __ia32_sys_read+0xb0/0xb0
[ 1806.330252][T16018]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1806.336676][T16018]  __x64_sys_write+0x73/0xb0
[ 1806.341274][T16018]  do_syscall_64+0xfd/0x6a0
[ 1806.345792][T16018]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1806.351716][T16018] RIP: 0033:0x4598e9
[ 1806.355615][T16018] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1806.375308][T16018] RSP: 002b:00007f74bc599c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1806.383719][T16018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9
[ 1806.391689][T16018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[ 1806.399667][T16018] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
12:51:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'neteml'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:49 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x336)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1806.407729][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f74bc59a6d4
[ 1806.415707][T16018] R13: 00000000004c9a52 R14: 00000000004e1148 R15: 00000000ffffffff
[ 1806.468056][T16018] memory: usage 120604kB, limit 0kB, failcnt 0
[ 1806.493427][T16018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1806.515083][T16018] Memory cgroup stats for /syz3:
[ 1806.515194][T16018] anon 107413504
[ 1806.515194][T16018] file 1093632
[ 1806.515194][T16018] kernel_stack 1376256
[ 1806.515194][T16018] slab 7172096
[ 1806.515194][T16018] sock 0
[ 1806.515194][T16018] shmem 1024000
[ 1806.515194][T16018] file_mapped 0
[ 1806.515194][T16018] file_dirty 0
[ 1806.515194][T16018] file_writeback 0
[ 1806.515194][T16018] anon_thp 100663296
[ 1806.515194][T16018] inactive_anon 1081344
[ 1806.515194][T16018] active_anon 107319296
[ 1806.515194][T16018] inactive_file 167936
[ 1806.515194][T16018] active_file 135168
[ 1806.515194][T16018] unevictable 0
[ 1806.515194][T16018] slab_reclaimable 1486848
[ 1806.515194][T16018] slab_unreclaimable 5685248
[ 1806.515194][T16018] pgfault 344256
[ 1806.515194][T16018] pgmajfault 0
[ 1806.515194][T16018] workingset_refault 0
[ 1806.515194][T16018] workingset_activate 0
[ 1806.515194][T16018] workingset_nodereclaim 0
[ 1806.515194][T16018] pgrefill 0
[ 1806.515194][T16018] pgscan 0
[ 1806.515194][T16018] pgsteal 0
[ 1806.640265][T16018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17879,uid=0
12:51:49 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RLERROR(r1, &(0x7f0000000040)={0x12, 0x7, 0x1, {0x9, 'security&'}}, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1806.690823][T16018] Memory cgroup out of memory: Killed process 17879 (syz-executor.3) total-vm:72840kB, anon-rss:16544kB, file-rss:34816kB, shmem-rss:0kB
12:51:50 executing program 3:

12:51:50 executing program 5:

12:51:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netemt'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:50 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1806.844391][ T1058] oom_reaper: reaped process 17879 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
12:51:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netemz'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:51:50 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x337)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:51:50 executing program 5:

[ 1807.009705][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1807.072087][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1807.079949][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1807.091482][ T9861] Call Trace:
[ 1807.094781][ T9861]  dump_stack+0x172/0x1f0
[ 1807.099220][ T9861]  dump_header+0x10b/0x82d
[ 1807.103644][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1807.108682][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1807.113804][ T9861]  out_of_memory+0x79a/0x12c0
[ 1807.118489][ T9861]  ? lock_downgrade+0x920/0x920
[ 1807.123353][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1807.129780][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1807.135000][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1807.140554][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1807.146199][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1807.151322][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1807.156195][ T9861]  try_charge+0xf4b/0x1440
[ 1807.160770][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1807.166627][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1807.172185][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1807.177824][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1807.182872][ T9861]  ? lock_downgrade+0x920/0x920
[ 1807.187729][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1807.193367][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1807.198857][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1807.204099][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1807.209657][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1807.214780][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1807.220160][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1807.225882][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1807.231180][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1807.236207][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1807.241597][ T9861]  copy_process+0x3f8/0x6b00
[ 1807.246202][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1807.251077][ T9861]  ? perf_pending_event+0x190/0x190
[ 1807.256295][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1807.261249][ T9861]  _do_fork+0x146/0xfa0
[ 1807.265408][ T9861]  ? copy_init_mm+0x20/0x20
[ 1807.269920][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1807.274952][ T9861]  ? _copy_to_user+0x118/0x160
[ 1807.279898][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1807.286227][ T9861]  ? put_timespec64+0xda/0x140
[ 1807.291011][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1807.295882][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1807.301968][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1807.307701][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1807.312732][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1807.317244][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
12:51:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xf0'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1807.323137][ T9861] RIP: 0033:0x457eba
[ 1807.327033][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1807.346643][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1807.355064][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1807.363040][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
12:51:50 executing program 5:

[ 1807.371030][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1807.379193][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1807.387972][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1807.400001][T16094] __nla_validate_parse: 32 callbacks suppressed
[ 1807.400009][T16094] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1807.459519][T16094] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:51:50 executing program 5:

12:51:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1807.553888][ T9861] memory: usage 101580kB, limit 0kB, failcnt 8
[ 1807.561977][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
12:51:50 executing program 5:

[ 1807.662939][T16112] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1807.693929][T16112] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1807.799619][ T9861] Memory cgroup stats for /syz3:
[ 1807.799724][ T9861] anon 88391680
[ 1807.799724][ T9861] file 1093632
[ 1807.799724][ T9861] kernel_stack 1310720
[ 1807.799724][ T9861] slab 7172096
[ 1807.799724][ T9861] sock 0
[ 1807.799724][ T9861] shmem 1024000
[ 1807.799724][ T9861] file_mapped 0
[ 1807.799724][ T9861] file_dirty 0
[ 1807.799724][ T9861] file_writeback 0
[ 1807.799724][ T9861] anon_thp 81788928
[ 1807.799724][ T9861] inactive_anon 1081344
[ 1807.799724][ T9861] active_anon 88379392
[ 1807.799724][ T9861] inactive_file 167936
[ 1807.799724][ T9861] active_file 135168
[ 1807.799724][ T9861] unevictable 0
[ 1807.799724][ T9861] slab_reclaimable 1486848
[ 1807.799724][ T9861] slab_unreclaimable 5685248
[ 1807.799724][ T9861] pgfault 344289
[ 1807.799724][ T9861] pgmajfault 0
[ 1807.799724][ T9861] workingset_refault 0
[ 1807.799724][ T9861] workingset_activate 0
[ 1807.799724][ T9861] workingset_nodereclaim 0
[ 1807.799724][ T9861] pgrefill 0
[ 1807.799724][ T9861] pgscan 0
[ 1807.799724][ T9861] pgsteal 0
[ 1807.925526][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19436,uid=0
[ 1807.956724][ T9861] Memory cgroup out of memory: Killed process 19436 (syz-executor.3) total-vm:72708kB, anon-rss:6296kB, file-rss:35880kB, shmem-rss:0kB
[ 1807.976975][ T1058] oom_reaper: reaped process 19436 (syz-executor.3), now anon-rss:0kB, file-rss:34920kB, shmem-rss:0kB
[ 1807.990772][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1808.003047][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1808.010856][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1808.020997][ T9861] Call Trace:
[ 1808.024373][ T9861]  dump_stack+0x172/0x1f0
[ 1808.028697][ T9861]  dump_header+0x10b/0x82d
[ 1808.033089][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1808.038017][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1808.043111][ T9861]  out_of_memory+0x79a/0x12c0
[ 1808.047776][ T9861]  ? lock_downgrade+0x920/0x920
[ 1808.052613][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1808.058843][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1808.064046][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1808.069580][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1808.075194][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1808.080290][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1808.085219][ T9861]  try_charge+0xf4b/0x1440
[ 1808.089634][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1808.095159][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1808.100692][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1808.106326][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1808.111346][ T9861]  ? lock_downgrade+0x920/0x920
[ 1808.116177][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1808.121706][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1808.127156][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1808.132343][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1808.137867][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1808.143021][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1808.148381][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1808.154174][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1808.159368][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1808.164376][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1808.169399][ T9861]  copy_process+0x3f8/0x6b00
[ 1808.173981][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1808.178820][ T9861]  ? perf_pending_event+0x190/0x190
[ 1808.184015][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1808.188965][ T9861]  _do_fork+0x146/0xfa0
[ 1808.193142][ T9861]  ? copy_init_mm+0x20/0x20
[ 1808.197632][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1808.202632][ T9861]  ? _copy_to_user+0x118/0x160
[ 1808.207736][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1808.214009][ T9861]  ? put_timespec64+0xda/0x140
[ 1808.218941][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1808.223709][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1808.228555][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1808.234261][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1808.239397][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1808.243901][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1808.249981][ T9861] RIP: 0033:0x457eba
[ 1808.253859][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1808.273459][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1808.281862][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1808.289818][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1808.297871][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1808.305836][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1808.313806][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1808.323072][ T9861] memory: usage 95164kB, limit 0kB, failcnt 14
[ 1808.329340][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1808.336232][ T9861] Memory cgroup stats for /syz3:
[ 1808.336397][ T9861] anon 82001920
[ 1808.336397][ T9861] file 1093632
[ 1808.336397][ T9861] kernel_stack 1310720
[ 1808.336397][ T9861] slab 7172096
[ 1808.336397][ T9861] sock 0
[ 1808.336397][ T9861] shmem 1024000
[ 1808.336397][ T9861] file_mapped 0
[ 1808.336397][ T9861] file_dirty 0
[ 1808.336397][ T9861] file_writeback 0
[ 1808.336397][ T9861] anon_thp 75497472
[ 1808.336397][ T9861] inactive_anon 1081344
[ 1808.336397][ T9861] active_anon 81989632
[ 1808.336397][ T9861] inactive_file 167936
[ 1808.336397][ T9861] active_file 135168
[ 1808.336397][ T9861] unevictable 0
[ 1808.336397][ T9861] slab_reclaimable 1486848
[ 1808.336397][ T9861] slab_unreclaimable 5685248
[ 1808.336397][ T9861] pgfault 344289
[ 1808.336397][ T9861] pgmajfault 0
[ 1808.336397][ T9861] workingset_refault 0
[ 1808.336397][ T9861] workingset_activate 0
[ 1808.336397][ T9861] workingset_nodereclaim 0
[ 1808.336397][ T9861] pgrefill 0
[ 1808.336397][ T9861] pgscan 0
[ 1808.336397][ T9861] pgsteal 0
[ 1808.431132][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19175,uid=0
[ 1808.446627][ T9861] Memory cgroup out of memory: Killed process 19175 (syz-executor.3) total-vm:72840kB, anon-rss:6304kB, file-rss:35848kB, shmem-rss:0kB
[ 1808.462847][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1808.468846][ T1058] oom_reaper: reaped process 19175 (syz-executor.3), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB
[ 1808.474923][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1808.493646][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1808.503702][ T9861] Call Trace:
[ 1808.506999][ T9861]  dump_stack+0x172/0x1f0
[ 1808.511322][ T9861]  dump_header+0x10b/0x82d
[ 1808.515729][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1808.520661][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1808.525765][ T9861]  out_of_memory+0x79a/0x12c0
[ 1808.530470][ T9861]  ? lock_downgrade+0x920/0x920
[ 1808.535307][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1808.541525][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1808.546718][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1808.552257][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1808.557872][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1808.562987][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1808.567830][ T9861]  try_charge+0xf4b/0x1440
[ 1808.572242][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1808.577785][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1808.583420][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1808.588950][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1808.593971][ T9861]  ? lock_downgrade+0x920/0x920
[ 1808.598817][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1808.604354][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1808.609801][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1808.614987][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1808.620509][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1808.625620][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1808.630983][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1808.636680][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1808.641858][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1808.646869][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1808.651971][ T9861]  copy_process+0x3f8/0x6b00
[ 1808.656578][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1808.661405][ T9861]  ? perf_pending_event+0x190/0x190
[ 1808.666626][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1808.671557][ T9861]  _do_fork+0x146/0xfa0
[ 1808.675705][ T9861]  ? copy_init_mm+0x20/0x20
[ 1808.680186][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1808.685216][ T9861]  ? _copy_to_user+0x118/0x160
[ 1808.689974][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1808.696192][ T9861]  ? put_timespec64+0xda/0x140
[ 1808.700935][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1808.707524][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1808.712365][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1808.718765][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1808.723799][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1808.728317][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1808.734418][ T9861] RIP: 0033:0x457eba
[ 1808.738405][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1808.758082][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1808.766484][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1808.774455][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1808.782593][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1808.790671][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1808.798621][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1808.807155][ T9861] memory: usage 88684kB, limit 0kB, failcnt 20
[ 1808.813472][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1808.820507][ T9861] Memory cgroup stats for /syz3:
[ 1808.820616][ T9861] anon 75583488
[ 1808.820616][ T9861] file 1093632
[ 1808.820616][ T9861] kernel_stack 1245184
[ 1808.820616][ T9861] slab 7172096
[ 1808.820616][ T9861] sock 0
[ 1808.820616][ T9861] shmem 1024000
[ 1808.820616][ T9861] file_mapped 0
[ 1808.820616][ T9861] file_dirty 0
[ 1808.820616][ T9861] file_writeback 0
[ 1808.820616][ T9861] anon_thp 69206016
[ 1808.820616][ T9861] inactive_anon 1081344
[ 1808.820616][ T9861] active_anon 75571200
[ 1808.820616][ T9861] inactive_file 167936
[ 1808.820616][ T9861] active_file 135168
[ 1808.820616][ T9861] unevictable 0
[ 1808.820616][ T9861] slab_reclaimable 1486848
[ 1808.820616][ T9861] slab_unreclaimable 5685248
[ 1808.820616][ T9861] pgfault 344289
[ 1808.820616][ T9861] pgmajfault 0
[ 1808.820616][ T9861] workingset_refault 0
[ 1808.820616][ T9861] workingset_activate 0
[ 1808.820616][ T9861] workingset_nodereclaim 0
[ 1808.820616][ T9861] pgrefill 0
[ 1808.820616][ T9861] pgscan 0
[ 1808.820616][ T9861] pgsteal 0
[ 1808.914906][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19308,uid=0
[ 1808.930426][ T9861] Memory cgroup out of memory: Killed process 19308 (syz-executor.3) total-vm:72708kB, anon-rss:4248kB, file-rss:35860kB, shmem-rss:0kB
[ 1808.946561][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1808.947696][ T1058] oom_reaper: reaped process 19308 (syz-executor.3), now anon-rss:0kB, file-rss:34900kB, shmem-rss:0kB
[ 1808.958524][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1808.958538][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1808.987361][ T9861] Call Trace:
[ 1808.990682][ T9861]  dump_stack+0x172/0x1f0
[ 1808.995027][ T9861]  dump_header+0x10b/0x82d
[ 1808.999562][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1809.004634][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1809.009804][ T9861]  out_of_memory+0x79a/0x12c0
[ 1809.014594][ T9861]  ? lock_downgrade+0x920/0x920
[ 1809.019456][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1809.025700][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1809.031086][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1809.036633][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1809.042258][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1809.047366][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1809.052195][ T9861]  try_charge+0xf4b/0x1440
[ 1809.056998][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1809.062536][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1809.068076][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1809.073704][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1809.078725][ T9861]  ? lock_downgrade+0x920/0x920
[ 1809.083554][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1809.089084][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1809.094537][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1809.099726][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1809.105289][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1809.110400][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1809.115760][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1809.121492][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1809.126672][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1809.131675][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1809.136685][ T9861]  copy_process+0x3f8/0x6b00
[ 1809.141257][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1809.146103][ T9861]  ? perf_pending_event+0x190/0x190
[ 1809.151287][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1809.156234][ T9861]  _do_fork+0x146/0xfa0
[ 1809.160562][ T9861]  ? copy_init_mm+0x20/0x20
[ 1809.165066][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1809.170092][ T9861]  ? _copy_to_user+0x118/0x160
[ 1809.174852][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1809.181109][ T9861]  ? put_timespec64+0xda/0x140
[ 1809.185956][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1809.190706][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1809.195555][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1809.201595][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1809.206606][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1809.211111][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1809.216988][ T9861] RIP: 0033:0x457eba
[ 1809.220870][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1809.240550][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1809.248948][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1809.257169][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1809.265135][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1809.273108][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1809.281072][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1809.289216][ T9861] memory: usage 84288kB, limit 0kB, failcnt 26
[ 1809.295509][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1809.302946][ T9861] Memory cgroup stats for /syz3:
[ 1809.303016][ T9861] anon 71254016
[ 1809.303016][ T9861] file 1093632
[ 1809.303016][ T9861] kernel_stack 1245184
[ 1809.303016][ T9861] slab 7172096
[ 1809.303016][ T9861] sock 0
[ 1809.303016][ T9861] shmem 1024000
[ 1809.303016][ T9861] file_mapped 0
[ 1809.303016][ T9861] file_dirty 0
[ 1809.303016][ T9861] file_writeback 0
[ 1809.303016][ T9861] anon_thp 65011712
[ 1809.303016][ T9861] inactive_anon 1081344
[ 1809.303016][ T9861] active_anon 71241728
[ 1809.303016][ T9861] inactive_file 167936
[ 1809.303016][ T9861] active_file 135168
[ 1809.303016][ T9861] unevictable 0
[ 1809.303016][ T9861] slab_reclaimable 1486848
[ 1809.303016][ T9861] slab_unreclaimable 5685248
[ 1809.303016][ T9861] pgfault 344289
[ 1809.303016][ T9861] pgmajfault 0
[ 1809.303016][ T9861] workingset_refault 0
[ 1809.303016][ T9861] workingset_activate 0
[ 1809.303016][ T9861] workingset_nodereclaim 0
[ 1809.303016][ T9861] pgrefill 0
[ 1809.303016][ T9861] pgscan 0
[ 1809.303016][ T9861] pgsteal 0
[ 1809.397530][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11360,uid=0
[ 1809.413414][ T9861] Memory cgroup out of memory: Killed process 11360 (syz-executor.3) total-vm:72708kB, anon-rss:4248kB, file-rss:35820kB, shmem-rss:0kB
[ 1809.430736][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1809.430997][ T1058] oom_reaper: reaped process 11360 (syz-executor.3), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB
[ 1809.442630][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1809.442638][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1809.442644][ T9861] Call Trace:
[ 1809.442666][ T9861]  dump_stack+0x172/0x1f0
[ 1809.480763][ T9861]  dump_header+0x10b/0x82d
[ 1809.485218][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1809.490155][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1809.495263][ T9861]  out_of_memory+0x79a/0x12c0
[ 1809.499944][ T9861]  ? lock_downgrade+0x920/0x920
[ 1809.504829][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1809.511099][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1809.516303][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1809.521852][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1809.527493][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1809.532605][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1809.538264][ T9861]  try_charge+0xf4b/0x1440
[ 1809.542689][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1809.548228][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1809.553773][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1809.559312][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1809.564426][ T9861]  ? lock_downgrade+0x920/0x920
[ 1809.569270][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1809.574935][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1809.580391][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1809.585590][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1809.591156][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1809.596272][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1809.601923][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1809.607931][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1809.613142][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1809.618169][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1809.623284][ T9861]  copy_process+0x3f8/0x6b00
[ 1809.629097][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1809.633959][ T9861]  ? perf_pending_event+0x190/0x190
[ 1809.639292][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1809.644224][ T9861]  _do_fork+0x146/0xfa0
[ 1809.648480][ T9861]  ? copy_init_mm+0x20/0x20
[ 1809.653239][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1809.658341][ T9861]  ? _copy_to_user+0x118/0x160
[ 1809.663102][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1809.669432][ T9861]  ? put_timespec64+0xda/0x140
[ 1809.674194][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1809.678946][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1809.683779][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1809.689477][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1809.694511][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1809.699129][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1809.707629][ T9861] RIP: 0033:0x457eba
[ 1809.711504][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1809.731273][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1809.739668][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1809.747641][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1809.755605][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1809.763678][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1809.771628][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1809.780809][ T9861] memory: usage 79888kB, limit 0kB, failcnt 32
[ 1809.787025][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1809.787035][ T9861] Memory cgroup stats for /syz3:
[ 1809.787130][ T9861] anon 66932736
[ 1809.787130][ T9861] file 1093632
[ 1809.787130][ T9861] kernel_stack 1179648
[ 1809.787130][ T9861] slab 7172096
[ 1809.787130][ T9861] sock 0
[ 1809.787130][ T9861] shmem 1024000
[ 1809.787130][ T9861] file_mapped 0
[ 1809.787130][ T9861] file_dirty 0
[ 1809.787130][ T9861] file_writeback 0
[ 1809.787130][ T9861] anon_thp 60817408
[ 1809.787130][ T9861] inactive_anon 1081344
[ 1809.787130][ T9861] active_anon 66920448
[ 1809.787130][ T9861] inactive_file 167936
[ 1809.787130][ T9861] active_file 135168
[ 1809.787130][ T9861] unevictable 0
[ 1809.787130][ T9861] slab_reclaimable 1486848
[ 1809.787130][ T9861] slab_unreclaimable 5685248
[ 1809.787130][ T9861] pgfault 344289
[ 1809.787130][ T9861] pgmajfault 0
[ 1809.787130][ T9861] workingset_refault 0
[ 1809.787130][ T9861] workingset_activate 0
[ 1809.787130][ T9861] workingset_nodereclaim 0
[ 1809.787130][ T9861] pgrefill 0
[ 1809.787130][ T9861] pgscan 0
[ 1809.787130][ T9861] pgsteal 0
[ 1809.799001][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7923,uid=0
[ 1809.903880][ T9861] Memory cgroup out of memory: Killed process 7923 (syz-executor.3) total-vm:72708kB, anon-rss:4268kB, file-rss:34816kB, shmem-rss:0kB
[ 1809.920093][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1809.920878][ T1058] oom_reaper: reaped process 7923 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 1809.932201][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1809.951131][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1809.961271][ T9861] Call Trace:
[ 1809.964551][ T9861]  dump_stack+0x172/0x1f0
[ 1809.964568][ T9861]  dump_header+0x10b/0x82d
[ 1809.964580][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1809.964593][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1809.964606][ T9861]  out_of_memory+0x79a/0x12c0
[ 1809.964621][ T9861]  ? lock_downgrade+0x920/0x920
[ 1809.964640][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1809.964653][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1809.964676][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1809.964693][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1810.015744][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1810.020869][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1810.025721][ T9861]  try_charge+0xf4b/0x1440
[ 1810.030142][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1810.035681][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1810.041561][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1810.047109][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1810.052147][ T9861]  ? lock_downgrade+0x920/0x920
[ 1810.057014][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1810.062638][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1810.068231][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1810.073424][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1810.078968][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1810.084169][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1810.089533][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1810.095233][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1810.100413][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1810.105437][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1810.110470][ T9861]  copy_process+0x3f8/0x6b00
[ 1810.115056][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1810.120029][ T9861]  ? perf_pending_event+0x190/0x190
[ 1810.125232][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1810.130186][ T9861]  _do_fork+0x146/0xfa0
[ 1810.134338][ T9861]  ? copy_init_mm+0x20/0x20
[ 1810.138819][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1810.143840][ T9861]  ? _copy_to_user+0x118/0x160
[ 1810.148721][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1810.155043][ T9861]  ? put_timespec64+0xda/0x140
[ 1810.159806][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1810.164577][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1810.169424][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1810.175151][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1810.180158][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1810.184661][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1810.190538][ T9861] RIP: 0033:0x457eba
[ 1810.194419][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1810.214342][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1810.222734][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1810.230696][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1810.238647][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1810.246608][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1810.254567][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1810.262698][ T9861] memory: usage 75340kB, limit 0kB, failcnt 38
[ 1810.268882][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1810.276005][ T9861] Memory cgroup stats for /syz3:
[ 1810.276109][ T9861] anon 62636032
[ 1810.276109][ T9861] file 1093632
[ 1810.276109][ T9861] kernel_stack 1179648
[ 1810.276109][ T9861] slab 7172096
[ 1810.276109][ T9861] sock 0
[ 1810.276109][ T9861] shmem 1024000
[ 1810.276109][ T9861] file_mapped 0
[ 1810.276109][ T9861] file_dirty 0
[ 1810.276109][ T9861] file_writeback 0
[ 1810.276109][ T9861] anon_thp 58720256
[ 1810.276109][ T9861] inactive_anon 1081344
[ 1810.276109][ T9861] active_anon 62693376
[ 1810.276109][ T9861] inactive_file 167936
[ 1810.276109][ T9861] active_file 135168
[ 1810.276109][ T9861] unevictable 0
[ 1810.276109][ T9861] slab_reclaimable 1486848
[ 1810.276109][ T9861] slab_unreclaimable 5685248
[ 1810.276109][ T9861] pgfault 344289
[ 1810.276109][ T9861] pgmajfault 0
[ 1810.276109][ T9861] workingset_refault 0
[ 1810.276109][ T9861] workingset_activate 0
[ 1810.276109][ T9861] workingset_nodereclaim 0
[ 1810.276109][ T9861] pgrefill 0
[ 1810.276109][ T9861] pgscan 0
[ 1810.276109][ T9861] pgsteal 0
[ 1810.281063][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10539,uid=0
[ 1810.385459][ T9861] Memory cgroup out of memory: Killed process 10539 (syz-executor.3) total-vm:72576kB, anon-rss:4264kB, file-rss:34816kB, shmem-rss:0kB
[ 1810.401435][ T1058] oom_reaper: reaped process 10539 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 1810.401960][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1810.424853][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1810.432749][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1810.442810][ T9861] Call Trace:
[ 1810.446087][ T9861]  dump_stack+0x172/0x1f0
[ 1810.446103][ T9861]  dump_header+0x10b/0x82d
[ 1810.446115][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1810.446129][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1810.446142][ T9861]  out_of_memory+0x79a/0x12c0
[ 1810.446158][ T9861]  ? lock_downgrade+0x920/0x920
[ 1810.446176][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1810.446194][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1810.446216][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1810.455017][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1810.465342][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1810.465358][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1810.465372][ T9861]  try_charge+0xf4b/0x1440
[ 1810.465390][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1810.465405][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1810.465421][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1810.465434][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1810.465453][ T9861]  ? lock_downgrade+0x920/0x920
[ 1810.474930][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1810.486449][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1810.486462][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1810.486478][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1810.486492][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1810.486510][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1810.486526][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1810.486537][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1810.486555][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1810.497692][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1810.507624][ T9861]  copy_process+0x3f8/0x6b00
[ 1810.517528][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1810.517544][ T9861]  ? perf_pending_event+0x190/0x190
[ 1810.517565][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1810.517595][ T9861]  _do_fork+0x146/0xfa0
[ 1810.517608][ T9861]  ? copy_init_mm+0x20/0x20
[ 1810.517626][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1810.528705][ T9861]  ? _copy_to_user+0x118/0x160
[ 1810.538541][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1810.549521][ T9861]  ? put_timespec64+0xda/0x140
[ 1810.560213][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1810.645410][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1810.650375][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1810.656094][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1810.661114][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1810.665615][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1810.671507][ T9861] RIP: 0033:0x457eba
[ 1810.675385][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1810.695162][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1810.703564][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1810.711525][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1810.719489][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1810.727451][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1810.735412][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1810.743676][ T9861] memory: usage 70936kB, limit 0kB, failcnt 44
[ 1810.749823][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1810.756686][ T9861] Memory cgroup stats for /syz3:
[ 1810.756773][ T9861] anon 58306560
[ 1810.756773][ T9861] file 1093632
[ 1810.756773][ T9861] kernel_stack 1114112
[ 1810.756773][ T9861] slab 7172096
[ 1810.756773][ T9861] sock 0
[ 1810.756773][ T9861] shmem 1024000
[ 1810.756773][ T9861] file_mapped 0
[ 1810.756773][ T9861] file_dirty 0
[ 1810.756773][ T9861] file_writeback 0
[ 1810.756773][ T9861] anon_thp 54525952
[ 1810.756773][ T9861] inactive_anon 1081344
[ 1810.756773][ T9861] active_anon 58294272
[ 1810.756773][ T9861] inactive_file 167936
[ 1810.756773][ T9861] active_file 135168
[ 1810.756773][ T9861] unevictable 0
[ 1810.756773][ T9861] slab_reclaimable 1486848
[ 1810.756773][ T9861] slab_unreclaimable 5685248
[ 1810.756773][ T9861] pgfault 344289
[ 1810.756773][ T9861] pgmajfault 0
[ 1810.756773][ T9861] workingset_refault 0
[ 1810.756773][ T9861] workingset_activate 0
[ 1810.756773][ T9861] workingset_nodereclaim 0
[ 1810.756773][ T9861] pgrefill 0
[ 1810.756773][ T9861] pgscan 0
[ 1810.756773][ T9861] pgsteal 0
[ 1810.850644][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7910,uid=0
[ 1810.866815][ T9861] Memory cgroup out of memory: Killed process 7910 (syz-executor.3) total-vm:72576kB, anon-rss:4260kB, file-rss:34816kB, shmem-rss:0kB
[ 1810.882268][ T1058] oom_reaper: reaped process 7910 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 1810.882795][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1810.905167][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1810.912976][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1810.923032][ T9861] Call Trace:
[ 1810.926314][ T9861]  dump_stack+0x172/0x1f0
[ 1810.926332][ T9861]  dump_header+0x10b/0x82d
[ 1810.926343][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1810.926358][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1810.926375][ T9861]  out_of_memory+0x79a/0x12c0
[ 1810.945483][ T9861]  ? lock_downgrade+0x920/0x920
[ 1810.945502][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1810.945519][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1810.945540][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1810.945560][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1810.955171][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1810.955188][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1810.955203][ T9861]  try_charge+0xf4b/0x1440
[ 1810.955221][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1810.955233][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1810.955251][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1810.955265][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1810.955284][ T9861]  ? lock_downgrade+0x920/0x920
[ 1810.955302][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1811.024460][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1811.029909][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1811.035102][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1811.040634][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1811.045741][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1811.051119][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1811.056828][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1811.062123][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1811.067128][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1811.072135][ T9861]  copy_process+0x3f8/0x6b00
[ 1811.076727][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1811.081568][ T9861]  ? perf_pending_event+0x190/0x190
[ 1811.086751][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1811.091694][ T9861]  _do_fork+0x146/0xfa0
[ 1811.095887][ T9861]  ? copy_init_mm+0x20/0x20
[ 1811.100375][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1811.105392][ T9861]  ? _copy_to_user+0x118/0x160
[ 1811.110149][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1811.116375][ T9861]  ? put_timespec64+0xda/0x140
[ 1811.121128][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1811.125880][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1811.130717][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1811.136414][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1811.141423][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1811.146442][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1811.152322][ T9861] RIP: 0033:0x457eba
[ 1811.156256][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1811.175846][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1811.184246][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1811.192286][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1811.200325][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1811.208285][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1811.216235][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1811.231089][ T9861] memory: usage 66424kB, limit 0kB, failcnt 50
[ 1811.237343][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1811.246581][ T9861] Memory cgroup stats for /syz3:
[ 1811.246655][ T9861] anon 53997568
[ 1811.246655][ T9861] file 1093632
[ 1811.246655][ T9861] kernel_stack 1114112
[ 1811.246655][ T9861] slab 7172096
[ 1811.246655][ T9861] sock 0
[ 1811.246655][ T9861] shmem 1024000
[ 1811.246655][ T9861] file_mapped 0
[ 1811.246655][ T9861] file_dirty 0
[ 1811.246655][ T9861] file_writeback 0
[ 1811.246655][ T9861] anon_thp 50331648
[ 1811.246655][ T9861] inactive_anon 1081344
[ 1811.246655][ T9861] active_anon 53985280
[ 1811.246655][ T9861] inactive_file 167936
[ 1811.246655][ T9861] active_file 135168
[ 1811.246655][ T9861] unevictable 0
[ 1811.246655][ T9861] slab_reclaimable 1486848
[ 1811.246655][ T9861] slab_unreclaimable 5685248
[ 1811.246655][ T9861] pgfault 344289
[ 1811.246655][ T9861] pgmajfault 0
[ 1811.246655][ T9861] workingset_refault 0
[ 1811.246655][ T9861] workingset_activate 0
[ 1811.246655][ T9861] workingset_nodereclaim 0
[ 1811.246655][ T9861] pgrefill 0
[ 1811.246655][ T9861] pgscan 0
[ 1811.246655][ T9861] pgsteal 0
[ 1811.343430][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20308,uid=0
[ 1811.362051][ T9861] Memory cgroup out of memory: Killed process 20308 (syz-executor.3) total-vm:72708kB, anon-rss:2200kB, file-rss:35840kB, shmem-rss:0kB
[ 1811.378238][ T1058] oom_reaper: reaped process 20308 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
[ 1811.378484][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1811.401443][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1811.409258][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1811.419300][ T9861] Call Trace:
[ 1811.422576][ T9861]  dump_stack+0x172/0x1f0
[ 1811.426912][ T9861]  dump_header+0x10b/0x82d
[ 1811.431317][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1811.436260][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1811.441359][ T9861]  out_of_memory+0x79a/0x12c0
[ 1811.446137][ T9861]  ? lock_downgrade+0x920/0x920
[ 1811.451098][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1811.457354][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1811.462654][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1811.468271][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1811.473911][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1811.479104][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1811.484045][ T9861]  try_charge+0xf4b/0x1440
[ 1811.488459][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1811.494004][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1811.499748][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1811.505285][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1811.510390][ T9861]  ? lock_downgrade+0x920/0x920
[ 1811.516195][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1811.521737][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1811.527185][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1811.532658][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1811.538192][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1811.543400][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1811.548768][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1811.554471][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1811.559649][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1811.564870][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1811.569928][ T9861]  copy_process+0x3f8/0x6b00
[ 1811.574588][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1811.579415][ T9861]  ? perf_pending_event+0x190/0x190
[ 1811.584608][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1811.589547][ T9861]  _do_fork+0x146/0xfa0
[ 1811.593698][ T9861]  ? copy_init_mm+0x20/0x20
[ 1811.598186][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1811.603191][ T9861]  ? _copy_to_user+0x118/0x160
[ 1811.607954][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1811.614217][ T9861]  ? put_timespec64+0xda/0x140
[ 1811.618972][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1811.623724][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1811.628564][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1811.634258][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1811.639257][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1811.643754][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1811.649629][ T9861] RIP: 0033:0x457eba
[ 1811.653503][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1811.673305][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1811.681795][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1811.689758][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1811.697714][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1811.705679][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1811.713647][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1811.723147][ T9861] memory: usage 64044kB, limit 0kB, failcnt 56
[ 1811.729379][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1811.736259][ T9861] Memory cgroup stats for /syz3:
[ 1811.736363][ T9861] anon 51789824
[ 1811.736363][ T9861] file 765952
[ 1811.736363][ T9861] kernel_stack 1048576
[ 1811.736363][ T9861] slab 7172096
[ 1811.736363][ T9861] sock 0
[ 1811.736363][ T9861] shmem 696320
[ 1811.736363][ T9861] file_mapped 0
[ 1811.736363][ T9861] file_dirty 0
[ 1811.736363][ T9861] file_writeback 0
[ 1811.736363][ T9861] anon_thp 48234496
[ 1811.736363][ T9861] inactive_anon 811008
[ 1811.736363][ T9861] active_anon 51777536
[ 1811.736363][ T9861] inactive_file 167936
[ 1811.736363][ T9861] active_file 135168
[ 1811.736363][ T9861] unevictable 0
[ 1811.736363][ T9861] slab_reclaimable 1486848
[ 1811.736363][ T9861] slab_unreclaimable 5685248
[ 1811.736363][ T9861] pgfault 344289
[ 1811.736363][ T9861] pgmajfault 0
[ 1811.736363][ T9861] workingset_refault 0
[ 1811.736363][ T9861] workingset_activate 0
[ 1811.736363][ T9861] workingset_nodereclaim 0
[ 1811.736363][ T9861] pgrefill 0
[ 1811.736363][ T9861] pgscan 0
[ 1811.736363][ T9861] pgsteal 0
[ 1811.830391][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3910,uid=0
[ 1811.845793][ T9861] Memory cgroup out of memory: Killed process 3910 (syz-executor.3) total-vm:72972kB, anon-rss:2224kB, file-rss:35808kB, shmem-rss:0kB
[ 1811.861583][ T1058] oom_reaper: reaped process 3910 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB
[ 1811.861784][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1811.884529][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1811.892338][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1811.902566][ T9861] Call Trace:
[ 1811.905879][ T9861]  dump_stack+0x172/0x1f0
[ 1811.910216][ T9861]  dump_header+0x10b/0x82d
[ 1811.914628][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1811.919577][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1811.924687][ T9861]  out_of_memory+0x79a/0x12c0
[ 1811.929350][ T9861]  ? lock_downgrade+0x920/0x920
[ 1811.934371][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1811.940608][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1811.945890][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1811.951421][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1811.957075][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1811.962175][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1811.967020][ T9861]  try_charge+0xf4b/0x1440
[ 1811.971450][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1811.977090][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1811.982750][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1811.988289][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1811.993711][ T9861]  ? lock_downgrade+0x920/0x920
[ 1811.998733][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1812.004275][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1812.009725][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1812.014922][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1812.020462][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1812.025584][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1812.030937][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1812.036732][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1812.041941][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1812.046954][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1812.051965][ T9861]  copy_process+0x3f8/0x6b00
[ 1812.056727][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1812.061568][ T9861]  ? perf_pending_event+0x190/0x190
[ 1812.066752][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1812.071674][ T9861]  _do_fork+0x146/0xfa0
[ 1812.075907][ T9861]  ? copy_init_mm+0x20/0x20
[ 1812.080494][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1812.085729][ T9861]  ? _copy_to_user+0x118/0x160
[ 1812.091043][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1812.097288][ T9861]  ? put_timespec64+0xda/0x140
[ 1812.102158][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1812.106908][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1812.111835][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1812.117642][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1812.122897][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1812.127401][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1812.133273][ T9861] RIP: 0033:0x457eba
[ 1812.137204][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1812.157016][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1812.165425][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1812.173382][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1812.181454][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1812.189668][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1812.197883][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1812.206057][ T9861] memory: usage 61384kB, limit 0kB, failcnt 62
[ 1812.212384][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1812.219346][ T9861] Memory cgroup stats for /syz3:
[ 1812.219445][ T9861] anon 49557504
[ 1812.219445][ T9861] file 765952
[ 1812.219445][ T9861] kernel_stack 1048576
[ 1812.219445][ T9861] slab 7172096
[ 1812.219445][ T9861] sock 0
[ 1812.219445][ T9861] shmem 696320
[ 1812.219445][ T9861] file_mapped 0
[ 1812.219445][ T9861] file_dirty 0
[ 1812.219445][ T9861] file_writeback 0
[ 1812.219445][ T9861] anon_thp 46137344
[ 1812.219445][ T9861] inactive_anon 811008
[ 1812.219445][ T9861] active_anon 49541120
[ 1812.219445][ T9861] inactive_file 167936
[ 1812.219445][ T9861] active_file 135168
[ 1812.219445][ T9861] unevictable 0
[ 1812.219445][ T9861] slab_reclaimable 1486848
[ 1812.219445][ T9861] slab_unreclaimable 5685248
[ 1812.219445][ T9861] pgfault 344289
[ 1812.219445][ T9861] pgmajfault 0
[ 1812.219445][ T9861] workingset_refault 0
[ 1812.219445][ T9861] workingset_activate 0
[ 1812.219445][ T9861] workingset_nodereclaim 0
[ 1812.219445][ T9861] pgrefill 0
[ 1812.219445][ T9861] pgscan 0
[ 1812.219445][ T9861] pgsteal 0
[ 1812.313178][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4992,uid=0
[ 1812.328664][ T9861] Memory cgroup out of memory: Killed process 4992 (syz-executor.3) total-vm:72840kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB
[ 1812.344104][ T1058] oom_reaper: reaped process 4992 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
[ 1812.344846][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1812.366970][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1812.374775][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1812.384835][ T9861] Call Trace:
[ 1812.388125][ T9861]  dump_stack+0x172/0x1f0
[ 1812.392435][ T9861]  dump_header+0x10b/0x82d
[ 1812.396865][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1812.401795][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1812.406972][ T9861]  out_of_memory+0x79a/0x12c0
[ 1812.411657][ T9861]  ? lock_downgrade+0x920/0x920
[ 1812.416603][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1812.423186][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1812.428382][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1812.433925][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1812.439591][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1812.444749][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1812.449608][ T9861]  try_charge+0xf4b/0x1440
[ 1812.454033][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1812.459573][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1812.465102][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1812.470627][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1812.475652][ T9861]  ? lock_downgrade+0x920/0x920
[ 1812.480599][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1812.486160][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1812.491608][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1812.496812][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1812.502348][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1812.507528][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1812.513402][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1812.519109][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1812.524293][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1812.529307][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1812.534326][ T9861]  copy_process+0x3f8/0x6b00
[ 1812.538910][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1812.543746][ T9861]  ? perf_pending_event+0x190/0x190
[ 1812.548934][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1812.553972][ T9861]  _do_fork+0x146/0xfa0
[ 1812.558119][ T9861]  ? copy_init_mm+0x20/0x20
[ 1812.562619][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1812.567624][ T9861]  ? _copy_to_user+0x118/0x160
[ 1812.572376][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1812.578593][ T9861]  ? put_timespec64+0xda/0x140
[ 1812.583351][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1812.588218][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1812.593140][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1812.598847][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1812.603898][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1812.608427][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1812.614413][ T9861] RIP: 0033:0x457eba
[ 1812.618305][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1812.638081][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1812.646474][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1812.654828][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1812.662796][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1812.670753][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1812.678720][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1812.686976][ T9861] memory: usage 59012kB, limit 0kB, failcnt 68
[ 1812.693130][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1812.700165][ T9861] Memory cgroup stats for /syz3:
[ 1812.700259][ T9861] anon 47312896
[ 1812.700259][ T9861] file 765952
[ 1812.700259][ T9861] kernel_stack 1048576
[ 1812.700259][ T9861] slab 7172096
[ 1812.700259][ T9861] sock 0
[ 1812.700259][ T9861] shmem 696320
[ 1812.700259][ T9861] file_mapped 0
[ 1812.700259][ T9861] file_dirty 0
[ 1812.700259][ T9861] file_writeback 0
[ 1812.700259][ T9861] anon_thp 44040192
[ 1812.700259][ T9861] inactive_anon 811008
[ 1812.700259][ T9861] active_anon 47296512
[ 1812.700259][ T9861] inactive_file 167936
[ 1812.700259][ T9861] active_file 135168
[ 1812.700259][ T9861] unevictable 0
[ 1812.700259][ T9861] slab_reclaimable 1486848
[ 1812.700259][ T9861] slab_unreclaimable 5685248
[ 1812.700259][ T9861] pgfault 344289
[ 1812.700259][ T9861] pgmajfault 0
[ 1812.700259][ T9861] workingset_refault 0
[ 1812.700259][ T9861] workingset_activate 0
[ 1812.700259][ T9861] workingset_nodereclaim 0
[ 1812.700259][ T9861] pgrefill 0
[ 1812.700259][ T9861] pgscan 0
[ 1812.700259][ T9861] pgsteal 0
[ 1812.795025][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10787,uid=0
[ 1812.812746][ T9861] Memory cgroup out of memory: Killed process 10787 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35812kB, shmem-rss:0kB
[ 1812.828491][ T1058] oom_reaper: reaped process 10787 (syz-executor.3), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB
[ 1812.829145][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1812.852000][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1812.859799][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1812.869939][ T9861] Call Trace:
[ 1812.873255][ T9861]  dump_stack+0x172/0x1f0
[ 1812.877574][ T9861]  dump_header+0x10b/0x82d
[ 1812.881998][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1812.886978][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1812.892168][ T9861]  out_of_memory+0x79a/0x12c0
[ 1812.896935][ T9861]  ? lock_downgrade+0x920/0x920
[ 1812.901769][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1812.908005][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1812.913203][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1812.918832][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1812.924635][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1812.929754][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1812.934614][ T9861]  try_charge+0xf4b/0x1440
[ 1812.939297][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1812.945018][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1812.950675][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1812.956220][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1812.961246][ T9861]  ? lock_downgrade+0x920/0x920
[ 1812.966084][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1812.971716][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1812.977187][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1812.982400][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1812.988057][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1812.993251][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1812.998879][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1813.004935][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1813.010231][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1813.015265][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1813.020912][ T9861]  copy_process+0x3f8/0x6b00
[ 1813.025598][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1813.030523][ T9861]  ? perf_pending_event+0x190/0x190
[ 1813.035994][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1813.041152][ T9861]  _do_fork+0x146/0xfa0
[ 1813.045295][ T9861]  ? copy_init_mm+0x20/0x20
[ 1813.049818][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1813.054918][ T9861]  ? _copy_to_user+0x118/0x160
[ 1813.059703][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1813.065934][ T9861]  ? put_timespec64+0xda/0x140
[ 1813.070693][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1813.075893][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1813.080970][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1813.086685][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1813.091698][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1813.096202][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1813.102788][ T9861] RIP: 0033:0x457eba
[ 1813.106678][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1813.126489][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1813.135015][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1813.142985][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1813.150952][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1813.158918][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1813.166889][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1813.175141][ T9861] memory: usage 56600kB, limit 0kB, failcnt 74
[ 1813.181309][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1813.188198][ T9861] Memory cgroup stats for /syz3:
[ 1813.188294][ T9861] anon 45084672
[ 1813.188294][ T9861] file 765952
[ 1813.188294][ T9861] kernel_stack 983040
[ 1813.188294][ T9861] slab 7172096
[ 1813.188294][ T9861] sock 0
[ 1813.188294][ T9861] shmem 696320
[ 1813.188294][ T9861] file_mapped 0
[ 1813.188294][ T9861] file_dirty 0
[ 1813.188294][ T9861] file_writeback 0
[ 1813.188294][ T9861] anon_thp 41943040
[ 1813.188294][ T9861] inactive_anon 811008
[ 1813.188294][ T9861] active_anon 45068288
[ 1813.188294][ T9861] inactive_file 167936
[ 1813.188294][ T9861] active_file 135168
[ 1813.188294][ T9861] unevictable 0
[ 1813.188294][ T9861] slab_reclaimable 1486848
[ 1813.188294][ T9861] slab_unreclaimable 5685248
[ 1813.188294][ T9861] pgfault 344289
[ 1813.188294][ T9861] pgmajfault 0
[ 1813.188294][ T9861] workingset_refault 0
[ 1813.188294][ T9861] workingset_activate 0
[ 1813.188294][ T9861] workingset_nodereclaim 0
[ 1813.188294][ T9861] pgrefill 0
[ 1813.188294][ T9861] pgscan 0
[ 1813.188294][ T9861] pgsteal 0
[ 1813.284138][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22787,uid=0
[ 1813.300198][ T9861] Memory cgroup out of memory: Killed process 22787 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35808kB, shmem-rss:0kB
[ 1813.316061][ T1058] oom_reaper: reaped process 22787 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB
[ 1813.316472][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1813.340709][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1813.349142][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1813.359192][ T9861] Call Trace:
[ 1813.362484][ T9861]  dump_stack+0x172/0x1f0
[ 1813.367020][ T9861]  dump_header+0x10b/0x82d
[ 1813.371433][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1813.376364][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1813.381458][ T9861]  out_of_memory+0x79a/0x12c0
[ 1813.386131][ T9861]  ? lock_downgrade+0x920/0x920
[ 1813.391016][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1813.397253][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1813.402537][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1813.408161][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1813.413927][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1813.419052][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1813.423924][ T9861]  try_charge+0xf4b/0x1440
[ 1813.428342][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1813.433888][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1813.439424][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1813.444976][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1813.449998][ T9861]  ? lock_downgrade+0x920/0x920
[ 1813.455787][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1813.461859][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1813.467490][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1813.472901][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1813.478787][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1813.483898][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1813.489421][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1813.495139][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1813.500518][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1813.505541][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1813.510577][ T9861]  copy_process+0x3f8/0x6b00
[ 1813.515160][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1813.520109][ T9861]  ? perf_pending_event+0x190/0x190
[ 1813.525921][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1813.531602][ T9861]  _do_fork+0x146/0xfa0
[ 1813.535747][ T9861]  ? copy_init_mm+0x20/0x20
[ 1813.540251][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1813.545451][ T9861]  ? _copy_to_user+0x118/0x160
[ 1813.550440][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1813.560161][ T9861]  ? put_timespec64+0xda/0x140
[ 1813.564936][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1813.569855][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1813.574843][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1813.580646][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1813.585681][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1813.590202][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1813.597299][ T9861] RIP: 0033:0x457eba
[ 1813.601179][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1813.623289][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1813.631739][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1813.639695][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1813.647687][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1813.655773][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1813.664371][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1813.674410][ T9861] memory: usage 54204kB, limit 0kB, failcnt 80
[ 1813.680585][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1813.687482][ T9861] Memory cgroup stats for /syz3:
[ 1813.687595][ T9861] anon 42885120
[ 1813.687595][ T9861] file 765952
[ 1813.687595][ T9861] kernel_stack 917504
[ 1813.687595][ T9861] slab 7172096
[ 1813.687595][ T9861] sock 0
[ 1813.687595][ T9861] shmem 696320
[ 1813.687595][ T9861] file_mapped 0
[ 1813.687595][ T9861] file_dirty 0
[ 1813.687595][ T9861] file_writeback 0
[ 1813.687595][ T9861] anon_thp 39845888
[ 1813.687595][ T9861] inactive_anon 811008
[ 1813.687595][ T9861] active_anon 42868736
[ 1813.687595][ T9861] inactive_file 167936
[ 1813.687595][ T9861] active_file 135168
[ 1813.687595][ T9861] unevictable 0
[ 1813.687595][ T9861] slab_reclaimable 1486848
[ 1813.687595][ T9861] slab_unreclaimable 5685248
[ 1813.687595][ T9861] pgfault 344289
[ 1813.687595][ T9861] pgmajfault 0
[ 1813.687595][ T9861] workingset_refault 0
[ 1813.687595][ T9861] workingset_activate 0
[ 1813.687595][ T9861] workingset_nodereclaim 0
[ 1813.687595][ T9861] pgrefill 0
[ 1813.687595][ T9861] pgscan 0
[ 1813.687595][ T9861] pgsteal 0
[ 1813.782754][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4754,uid=0
[ 1813.798896][ T9861] Memory cgroup out of memory: Killed process 4754 (syz-executor.3) total-vm:72708kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB
[ 1813.814786][ T1058] oom_reaper: reaped process 4754 (syz-executor.3), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB
[ 1813.815121][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1813.837920][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1813.845841][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1813.856120][ T9861] Call Trace:
[ 1813.859516][ T9861]  dump_stack+0x172/0x1f0
[ 1813.863860][ T9861]  dump_header+0x10b/0x82d
[ 1813.868393][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1813.873606][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1813.878876][ T9861]  out_of_memory+0x79a/0x12c0
[ 1813.883549][ T9861]  ? lock_downgrade+0x920/0x920
[ 1813.889467][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1813.895725][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1813.900918][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1813.906668][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1813.912514][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1813.917718][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1813.923081][ T9861]  try_charge+0xf4b/0x1440
[ 1813.927523][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1813.933067][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1813.938601][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1813.944668][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1813.949832][ T9861]  ? lock_downgrade+0x920/0x920
[ 1813.957022][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1813.962555][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1813.968016][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1813.973221][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1813.978749][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1813.984035][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1813.989404][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1813.995302][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1814.000977][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1814.006331][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1814.011696][ T9861]  copy_process+0x3f8/0x6b00
[ 1814.016674][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1814.021600][ T9861]  ? perf_pending_event+0x190/0x190
[ 1814.026998][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1814.031954][ T9861]  _do_fork+0x146/0xfa0
[ 1814.036111][ T9861]  ? copy_init_mm+0x20/0x20
[ 1814.041611][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1814.047511][ T9861]  ? _copy_to_user+0x118/0x160
[ 1814.052281][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1814.058840][ T9861]  ? put_timespec64+0xda/0x140
[ 1814.063599][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1814.068354][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1814.073310][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1814.079109][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1814.084132][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1814.088632][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1814.095127][ T9861] RIP: 0033:0x457eba
[ 1814.099800][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1814.119497][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1814.128092][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1814.136053][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1814.144238][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1814.152310][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1814.160530][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1814.169024][ T9861] memory: usage 51880kB, limit 0kB, failcnt 86
[ 1814.177239][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1814.184291][ T9861] Memory cgroup stats for /syz3:
[ 1814.184389][ T9861] anon 40660992
[ 1814.184389][ T9861] file 765952
[ 1814.184389][ T9861] kernel_stack 917504
[ 1814.184389][ T9861] slab 7172096
[ 1814.184389][ T9861] sock 0
[ 1814.184389][ T9861] shmem 696320
[ 1814.184389][ T9861] file_mapped 0
[ 1814.184389][ T9861] file_dirty 0
[ 1814.184389][ T9861] file_writeback 0
[ 1814.184389][ T9861] anon_thp 37748736
[ 1814.184389][ T9861] inactive_anon 811008
[ 1814.184389][ T9861] active_anon 40644608
[ 1814.184389][ T9861] inactive_file 167936
[ 1814.184389][ T9861] active_file 135168
[ 1814.184389][ T9861] unevictable 0
[ 1814.184389][ T9861] slab_reclaimable 1486848
[ 1814.184389][ T9861] slab_unreclaimable 5685248
[ 1814.184389][ T9861] pgfault 344289
[ 1814.184389][ T9861] pgmajfault 0
[ 1814.184389][ T9861] workingset_refault 0
[ 1814.184389][ T9861] workingset_activate 0
[ 1814.184389][ T9861] workingset_nodereclaim 0
[ 1814.184389][ T9861] pgrefill 0
[ 1814.184389][ T9861] pgscan 0
[ 1814.184389][ T9861] pgsteal 0
[ 1814.278186][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23900,uid=0
[ 1814.294152][ T9861] Memory cgroup out of memory: Killed process 23900 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35804kB, shmem-rss:0kB
[ 1814.310336][ T1058] oom_reaper: reaped process 23900 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB
[ 1814.310468][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1814.333504][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1814.341518][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1814.353091][ T9861] Call Trace:
[ 1814.356374][ T9861]  dump_stack+0x172/0x1f0
[ 1814.360716][ T9861]  dump_header+0x10b/0x82d
[ 1814.365211][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1814.370756][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1814.376057][ T9861]  out_of_memory+0x79a/0x12c0
[ 1814.380975][ T9861]  ? lock_downgrade+0x920/0x920
[ 1814.385970][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1814.392495][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1814.397966][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1814.403694][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1814.409338][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1814.415149][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1814.420507][ T9861]  try_charge+0xf4b/0x1440
[ 1814.425552][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1814.431714][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1814.437443][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1814.443188][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1814.448307][ T9861]  ? lock_downgrade+0x920/0x920
[ 1814.453240][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1814.458803][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1814.464451][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1814.469669][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1814.475337][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1814.480447][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1814.485887][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1814.491703][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1814.496944][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1814.502193][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1814.507230][ T9861]  copy_process+0x3f8/0x6b00
[ 1814.512164][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1814.517004][ T9861]  ? perf_pending_event+0x190/0x190
[ 1814.522193][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1814.527121][ T9861]  _do_fork+0x146/0xfa0
[ 1814.531257][ T9861]  ? copy_init_mm+0x20/0x20
[ 1814.535756][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1814.540789][ T9861]  ? _copy_to_user+0x118/0x160
[ 1814.545645][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1814.552060][ T9861]  ? put_timespec64+0xda/0x140
[ 1814.556919][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1814.561678][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1814.566608][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1814.572309][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1814.577323][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1814.581813][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1814.587699][ T9861] RIP: 0033:0x457eba
[ 1814.591695][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1814.611281][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1814.619776][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1814.627737][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1814.635861][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1814.643826][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1814.651794][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1814.660082][ T9861] memory: usage 49580kB, limit 0kB, failcnt 92
[ 1814.666370][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1814.673212][ T9861] Memory cgroup stats for /syz3:
[ 1814.673283][ T9861] anon 38449152
[ 1814.673283][ T9861] file 765952
[ 1814.673283][ T9861] kernel_stack 851968
[ 1814.673283][ T9861] slab 7172096
[ 1814.673283][ T9861] sock 0
[ 1814.673283][ T9861] shmem 696320
[ 1814.673283][ T9861] file_mapped 0
[ 1814.673283][ T9861] file_dirty 0
[ 1814.673283][ T9861] file_writeback 0
[ 1814.673283][ T9861] anon_thp 35651584
[ 1814.673283][ T9861] inactive_anon 811008
[ 1814.673283][ T9861] active_anon 38432768
[ 1814.673283][ T9861] inactive_file 167936
[ 1814.673283][ T9861] active_file 135168
[ 1814.673283][ T9861] unevictable 0
[ 1814.673283][ T9861] slab_reclaimable 1486848
[ 1814.673283][ T9861] slab_unreclaimable 5685248
[ 1814.673283][ T9861] pgfault 344289
[ 1814.673283][ T9861] pgmajfault 0
[ 1814.673283][ T9861] workingset_refault 0
[ 1814.673283][ T9861] workingset_activate 0
[ 1814.673283][ T9861] workingset_nodereclaim 0
[ 1814.673283][ T9861] pgrefill 0
[ 1814.673283][ T9861] pgscan 0
[ 1814.673283][ T9861] pgsteal 0
[ 1814.767385][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22904,uid=0
[ 1814.782885][ T9861] Memory cgroup out of memory: Killed process 22904 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35804kB, shmem-rss:0kB
[ 1814.798720][ T1058] oom_reaper: reaped process 22904 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB
[ 1814.799103][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1814.821886][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1814.830034][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1814.840271][ T9861] Call Trace:
[ 1814.843560][ T9861]  dump_stack+0x172/0x1f0
[ 1814.847891][ T9861]  dump_header+0x10b/0x82d
[ 1814.852305][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1814.857235][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1814.863023][ T9861]  out_of_memory+0x79a/0x12c0
[ 1814.867704][ T9861]  ? lock_downgrade+0x920/0x920
[ 1814.872614][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1814.878837][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1814.884033][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1814.889654][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1814.895267][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1814.900476][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1814.905853][ T9861]  try_charge+0xf4b/0x1440
[ 1814.910276][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1814.915803][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1814.921363][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1814.927039][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1814.932149][ T9861]  ? lock_downgrade+0x920/0x920
[ 1814.937008][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1814.942550][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1814.948106][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1814.953328][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1814.959181][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1814.964443][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1814.969812][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1814.975515][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1814.980712][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1814.985900][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1814.991034][ T9861]  copy_process+0x3f8/0x6b00
[ 1814.995636][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1815.000582][ T9861]  ? perf_pending_event+0x190/0x190
[ 1815.005783][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1815.010725][ T9861]  _do_fork+0x146/0xfa0
[ 1815.014885][ T9861]  ? copy_init_mm+0x20/0x20
[ 1815.019391][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1815.024411][ T9861]  ? _copy_to_user+0x118/0x160
[ 1815.029205][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1815.035456][ T9861]  ? put_timespec64+0xda/0x140
[ 1815.040327][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1815.045869][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1815.050714][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1815.056866][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1815.061971][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1815.066472][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1815.072352][ T9861] RIP: 0033:0x457eba
[ 1815.076230][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1815.095942][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1815.104363][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1815.112852][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1815.120813][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1815.128860][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1815.136901][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1815.145326][ T9861] memory: usage 47228kB, limit 0kB, failcnt 98
[ 1815.151502][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1815.158387][ T9861] Memory cgroup stats for /syz3:
[ 1815.158474][ T9861] anon 36249600
[ 1815.158474][ T9861] file 765952
[ 1815.158474][ T9861] kernel_stack 851968
[ 1815.158474][ T9861] slab 7172096
[ 1815.158474][ T9861] sock 0
[ 1815.158474][ T9861] shmem 696320
[ 1815.158474][ T9861] file_mapped 0
[ 1815.158474][ T9861] file_dirty 0
[ 1815.158474][ T9861] file_writeback 0
[ 1815.158474][ T9861] anon_thp 33554432
[ 1815.158474][ T9861] inactive_anon 811008
[ 1815.158474][ T9861] active_anon 36233216
[ 1815.158474][ T9861] inactive_file 167936
[ 1815.158474][ T9861] active_file 135168
[ 1815.158474][ T9861] unevictable 0
[ 1815.158474][ T9861] slab_reclaimable 1486848
[ 1815.158474][ T9861] slab_unreclaimable 5685248
[ 1815.158474][ T9861] pgfault 344289
[ 1815.158474][ T9861] pgmajfault 0
[ 1815.158474][ T9861] workingset_refault 0
[ 1815.158474][ T9861] workingset_activate 0
[ 1815.158474][ T9861] workingset_nodereclaim 0
[ 1815.158474][ T9861] pgrefill 0
[ 1815.158474][ T9861] pgscan 0
[ 1815.158474][ T9861] pgsteal 0
[ 1815.252322][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22725,uid=0
[ 1815.269604][ T9861] Memory cgroup out of memory: Killed process 22725 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35804kB, shmem-rss:0kB
[ 1815.285053][ T1058] oom_reaper: reaped process 22725 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB
[ 1815.285782][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1815.308038][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1815.316289][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1815.326737][ T9861] Call Trace:
[ 1815.330021][ T9861]  dump_stack+0x172/0x1f0
[ 1815.334353][ T9861]  dump_header+0x10b/0x82d
[ 1815.338774][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1815.343847][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1815.348942][ T9861]  out_of_memory+0x79a/0x12c0
[ 1815.353628][ T9861]  ? lock_downgrade+0x920/0x920
[ 1815.358474][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1815.364795][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1815.370004][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1815.375567][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1815.381339][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1815.386445][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1815.391461][ T9861]  try_charge+0xf4b/0x1440
[ 1815.395877][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1815.401429][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1815.406963][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1815.412509][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1815.417570][ T9861]  ? lock_downgrade+0x920/0x920
[ 1815.422524][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1815.428367][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1815.434066][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1815.439280][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1815.445339][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1815.450525][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1815.455916][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1815.461630][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1815.466856][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1815.471876][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1815.476899][ T9861]  copy_process+0x3f8/0x6b00
[ 1815.481555][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1815.486605][ T9861]  ? perf_pending_event+0x190/0x190
[ 1815.491806][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1815.496941][ T9861]  _do_fork+0x146/0xfa0
[ 1815.501104][ T9861]  ? copy_init_mm+0x20/0x20
[ 1815.505598][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1815.510608][ T9861]  ? _copy_to_user+0x118/0x160
[ 1815.515378][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1815.521700][ T9861]  ? put_timespec64+0xda/0x140
[ 1815.526452][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1815.531206][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1815.536056][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1815.542995][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1815.548201][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1815.552743][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1815.558632][ T9861] RIP: 0033:0x457eba
[ 1815.562511][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1815.582187][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1815.590583][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1815.598650][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1815.606848][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1815.614812][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1815.622797][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1815.631077][ T9861] memory: usage 44908kB, limit 0kB, failcnt 104
[ 1815.637369][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1815.644664][ T9861] Memory cgroup stats for /syz3:
[ 1815.644751][ T9861] anon 34050048
[ 1815.644751][ T9861] file 626688
[ 1815.644751][ T9861] kernel_stack 786432
[ 1815.644751][ T9861] slab 7172096
[ 1815.644751][ T9861] sock 0
[ 1815.644751][ T9861] shmem 557056
[ 1815.644751][ T9861] file_mapped 0
[ 1815.644751][ T9861] file_dirty 0
[ 1815.644751][ T9861] file_writeback 0
[ 1815.644751][ T9861] anon_thp 31457280
[ 1815.644751][ T9861] inactive_anon 675840
[ 1815.644751][ T9861] active_anon 34033664
[ 1815.644751][ T9861] inactive_file 167936
[ 1815.644751][ T9861] active_file 135168
[ 1815.644751][ T9861] unevictable 0
[ 1815.644751][ T9861] slab_reclaimable 1486848
[ 1815.644751][ T9861] slab_unreclaimable 5685248
[ 1815.644751][ T9861] pgfault 344289
[ 1815.644751][ T9861] pgmajfault 0
[ 1815.644751][ T9861] workingset_refault 0
[ 1815.644751][ T9861] workingset_activate 0
[ 1815.644751][ T9861] workingset_nodereclaim 0
[ 1815.644751][ T9861] pgrefill 0
[ 1815.644751][ T9861] pgscan 0
[ 1815.644751][ T9861] pgsteal 0
[ 1815.742135][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20481,uid=0
[ 1815.758413][ T9861] Memory cgroup out of memory: Killed process 20481 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35804kB, shmem-rss:0kB
[ 1815.774033][ T1058] oom_reaper: reaped process 20481 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB
[ 1815.774498][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1815.797074][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1815.805027][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1815.816727][ T9861] Call Trace:
[ 1815.820010][ T9861]  dump_stack+0x172/0x1f0
[ 1815.824520][ T9861]  dump_header+0x10b/0x82d
[ 1815.828929][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1815.833940][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1815.839229][ T9861]  out_of_memory+0x79a/0x12c0
[ 1815.844186][ T9861]  ? lock_downgrade+0x920/0x920
[ 1815.849212][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1815.855588][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1815.860815][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1815.866362][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1815.871990][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1815.877082][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1815.881912][ T9861]  try_charge+0xf4b/0x1440
[ 1815.886324][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1815.891879][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1815.897413][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1815.902944][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1815.907962][ T9861]  ? lock_downgrade+0x920/0x920
[ 1815.912807][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1815.918343][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1815.923792][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1815.928983][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1815.934508][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1815.939612][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1815.944978][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1815.950690][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1815.955958][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1815.960957][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1815.965977][ T9861]  copy_process+0x3f8/0x6b00
[ 1815.970580][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1815.975411][ T9861]  ? perf_pending_event+0x190/0x190
[ 1815.980605][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1815.985564][ T9861]  _do_fork+0x146/0xfa0
[ 1815.989810][ T9861]  ? copy_init_mm+0x20/0x20
[ 1815.994304][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1815.999396][ T9861]  ? _copy_to_user+0x118/0x160
[ 1816.004156][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1816.010386][ T9861]  ? put_timespec64+0xda/0x140
[ 1816.015143][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1816.019892][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1816.024748][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1816.030459][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1816.035488][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1816.040009][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1816.045886][ T9861] RIP: 0033:0x457eba
[ 1816.049779][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1816.069579][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1816.078078][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1816.086042][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1816.094007][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1816.101957][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1816.110097][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1816.118218][ T9861] memory: usage 42520kB, limit 0kB, failcnt 110
[ 1816.124607][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1816.131436][ T9861] Memory cgroup stats for /syz3:
[ 1816.131501][ T9861] anon 31850496
[ 1816.131501][ T9861] file 626688
[ 1816.131501][ T9861] kernel_stack 786432
[ 1816.131501][ T9861] slab 7172096
[ 1816.131501][ T9861] sock 0
[ 1816.131501][ T9861] shmem 557056
[ 1816.131501][ T9861] file_mapped 0
[ 1816.131501][ T9861] file_dirty 0
[ 1816.131501][ T9861] file_writeback 0
[ 1816.131501][ T9861] anon_thp 29360128
[ 1816.131501][ T9861] inactive_anon 675840
[ 1816.131501][ T9861] active_anon 31834112
[ 1816.131501][ T9861] inactive_file 167936
[ 1816.131501][ T9861] active_file 135168
[ 1816.131501][ T9861] unevictable 0
[ 1816.131501][ T9861] slab_reclaimable 1486848
[ 1816.131501][ T9861] slab_unreclaimable 5685248
[ 1816.131501][ T9861] pgfault 344289
[ 1816.131501][ T9861] pgmajfault 0
[ 1816.131501][ T9861] workingset_refault 0
[ 1816.131501][ T9861] workingset_activate 0
[ 1816.131501][ T9861] workingset_nodereclaim 0
[ 1816.131501][ T9861] pgrefill 0
[ 1816.131501][ T9861] pgscan 0
[ 1816.131501][ T9861] pgsteal 0
[ 1816.225505][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27651,uid=0
[ 1816.240997][ T9861] Memory cgroup out of memory: Killed process 27651 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35800kB, shmem-rss:0kB
[ 1816.256901][ T1058] oom_reaper: reaped process 27651 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB
[ 1816.257051][ T9861] Memory cgroup out of memory: Killed process 26774 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35800kB, shmem-rss:0kB
[ 1816.290801][ T9861] Memory cgroup out of memory: Killed process 26761 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35800kB, shmem-rss:0kB
[ 1816.310232][ T1058] oom_reaper: reaped process 26761 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB
[ 1816.313061][ T9861] Memory cgroup out of memory: Killed process 26502 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35800kB, shmem-rss:0kB
[ 1816.350181][ T9861] Memory cgroup out of memory: Killed process 25589 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35800kB, shmem-rss:0kB
[ 1816.366794][ T9861] Memory cgroup out of memory: Killed process 24841 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35800kB, shmem-rss:0kB
[ 1816.369788][ T1058] oom_reaper: reaped process 25589 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB
[ 1816.395755][ T9861] oom_kill_process: 5 callbacks suppressed
[ 1816.395771][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1816.413446][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1816.421238][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1816.431332][ T9861] Call Trace:
[ 1816.434650][ T9861]  dump_stack+0x172/0x1f0
[ 1816.438983][ T9861]  dump_header+0x10b/0x82d
[ 1816.443585][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1816.448516][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1816.453657][ T9861]  out_of_memory+0x79a/0x12c0
[ 1816.458354][ T9861]  ? lock_downgrade+0x920/0x920
[ 1816.463326][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1816.469765][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1816.475130][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1816.480669][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1816.486286][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1816.491467][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1816.496313][ T9861]  try_charge+0xf4b/0x1440
[ 1816.500727][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1816.506345][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1816.511875][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1816.517416][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1816.522432][ T9861]  ? lock_downgrade+0x920/0x920
[ 1816.527267][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1816.532791][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1816.538242][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1816.543673][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1816.549304][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1816.554420][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1816.559946][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1816.565665][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1816.570870][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1816.575887][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1816.580931][ T9861]  copy_process+0x3f8/0x6b00
[ 1816.585517][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1816.590356][ T9861]  ? perf_pending_event+0x190/0x190
[ 1816.595583][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1816.600524][ T9861]  _do_fork+0x146/0xfa0
[ 1816.604699][ T9861]  ? copy_init_mm+0x20/0x20
[ 1816.609227][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1816.614240][ T9861]  ? _copy_to_user+0x118/0x160
[ 1816.619012][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1816.625458][ T9861]  ? put_timespec64+0xda/0x140
[ 1816.630202][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1816.635747][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1816.640605][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1816.646300][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1816.651307][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1816.655806][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1816.661690][ T9861] RIP: 0033:0x457eba
[ 1816.665770][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1816.685475][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1816.693894][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1816.701853][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1816.709813][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1816.717942][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1816.726027][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1816.734384][ T9861] memory: usage 28460kB, limit 0kB, failcnt 146
[ 1816.740639][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1816.747788][ T9861] Memory cgroup stats for /syz3:
[ 1816.747883][ T9861] anon 18640896
[ 1816.747883][ T9861] file 626688
[ 1816.747883][ T9861] kernel_stack 589824
[ 1816.747883][ T9861] slab 7036928
[ 1816.747883][ T9861] sock 0
[ 1816.747883][ T9861] shmem 557056
[ 1816.747883][ T9861] file_mapped 0
[ 1816.747883][ T9861] file_dirty 0
[ 1816.747883][ T9861] file_writeback 0
[ 1816.747883][ T9861] anon_thp 16777216
[ 1816.747883][ T9861] inactive_anon 675840
[ 1816.747883][ T9861] active_anon 18624512
[ 1816.747883][ T9861] inactive_file 167936
[ 1816.747883][ T9861] active_file 135168
[ 1816.747883][ T9861] unevictable 0
[ 1816.747883][ T9861] slab_reclaimable 1486848
[ 1816.747883][ T9861] slab_unreclaimable 5550080
[ 1816.747883][ T9861] pgfault 344289
[ 1816.747883][ T9861] pgmajfault 0
[ 1816.747883][ T9861] workingset_refault 0
[ 1816.747883][ T9861] workingset_activate 0
[ 1816.747883][ T9861] workingset_nodereclaim 0
[ 1816.747883][ T9861] pgrefill 0
[ 1816.747883][ T9861] pgscan 0
[ 1816.747883][ T9861] pgsteal 0
[ 1816.841955][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24190,uid=0
[ 1816.858070][ T9861] Memory cgroup out of memory: Killed process 24190 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35800kB, shmem-rss:0kB
[ 1816.873833][ T1058] oom_reaper: reaped process 24190 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB
[ 1816.874171][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1816.898110][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1816.905916][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1816.916240][ T9861] Call Trace:
[ 1816.919635][ T9861]  dump_stack+0x172/0x1f0
[ 1816.924060][ T9861]  dump_header+0x10b/0x82d
[ 1816.929031][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1816.934050][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1816.939230][ T9861]  out_of_memory+0x79a/0x12c0
[ 1816.944048][ T9861]  ? lock_downgrade+0x920/0x920
[ 1816.948896][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1816.955419][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1816.960786][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1816.966336][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1816.971979][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1816.977335][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1816.982281][ T9861]  try_charge+0xf4b/0x1440
[ 1816.986937][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1816.992598][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1816.998257][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1817.004259][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1817.009351][ T9861]  ? lock_downgrade+0x920/0x920
[ 1817.014398][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1817.019932][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1817.025486][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1817.030720][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1817.036261][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1817.041354][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1817.046833][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1817.052558][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1817.057915][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1817.063028][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1817.068131][ T9861]  copy_process+0x3f8/0x6b00
[ 1817.072707][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1817.077560][ T9861]  ? perf_pending_event+0x190/0x190
[ 1817.082852][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1817.087901][ T9861]  _do_fork+0x146/0xfa0
[ 1817.092290][ T9861]  ? copy_init_mm+0x20/0x20
[ 1817.096790][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1817.101917][ T9861]  ? _copy_to_user+0x118/0x160
[ 1817.106792][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1817.113028][ T9861]  ? put_timespec64+0xda/0x140
[ 1817.117782][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1817.122526][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1817.127377][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1817.133098][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1817.138152][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1817.142738][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1817.148920][ T9861] RIP: 0033:0x457eba
[ 1817.153241][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1817.173398][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1817.181903][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1817.189961][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1817.197927][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1817.205896][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1817.214068][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1817.223613][ T9861] memory: usage 26088kB, limit 0kB, failcnt 152
[ 1817.230334][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1817.237392][ T9861] Memory cgroup stats for /syz3:
[ 1817.237477][ T9861] anon 16441344
[ 1817.237477][ T9861] file 626688
[ 1817.237477][ T9861] kernel_stack 524288
[ 1817.237477][ T9861] slab 7036928
[ 1817.237477][ T9861] sock 0
[ 1817.237477][ T9861] shmem 557056
[ 1817.237477][ T9861] file_mapped 0
[ 1817.237477][ T9861] file_dirty 0
[ 1817.237477][ T9861] file_writeback 0
[ 1817.237477][ T9861] anon_thp 14680064
[ 1817.237477][ T9861] inactive_anon 675840
[ 1817.237477][ T9861] active_anon 16424960
[ 1817.237477][ T9861] inactive_file 167936
[ 1817.237477][ T9861] active_file 135168
[ 1817.237477][ T9861] unevictable 0
[ 1817.237477][ T9861] slab_reclaimable 1486848
[ 1817.237477][ T9861] slab_unreclaimable 5550080
[ 1817.237477][ T9861] pgfault 344289
[ 1817.237477][ T9861] pgmajfault 0
[ 1817.237477][ T9861] workingset_refault 0
[ 1817.237477][ T9861] workingset_activate 0
[ 1817.237477][ T9861] workingset_nodereclaim 0
[ 1817.237477][ T9861] pgrefill 0
[ 1817.237477][ T9861] pgscan 0
[ 1817.237477][ T9861] pgsteal 0
[ 1817.331416][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24049,uid=0
[ 1817.348425][ T9861] Memory cgroup out of memory: Killed process 24049 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35800kB, shmem-rss:0kB
[ 1817.365194][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1817.369046][ T1058] oom_reaper: reaped process 24049 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB
[ 1817.377077][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1817.377086][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1817.377099][ T9861] Call Trace:
[ 1817.409925][ T9861]  dump_stack+0x172/0x1f0
[ 1817.414239][ T9861]  dump_header+0x10b/0x82d
[ 1817.418795][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1817.423981][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1817.429185][ T9861]  out_of_memory+0x79a/0x12c0
[ 1817.433844][ T9861]  ? lock_downgrade+0x920/0x920
[ 1817.438685][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1817.445003][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1817.450390][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1817.455936][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1817.461550][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1817.466989][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1817.471922][ T9861]  try_charge+0xf4b/0x1440
[ 1817.476508][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1817.482050][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1817.489733][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1817.495290][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1817.500419][ T9861]  ? lock_downgrade+0x920/0x920
[ 1817.505258][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1817.512005][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1817.517483][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1817.522752][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1817.528291][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1817.533385][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1817.538740][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1817.544455][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1817.549634][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1817.554639][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1817.559677][ T9861]  copy_process+0x3f8/0x6b00
[ 1817.564266][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1817.569300][ T9861]  ? perf_pending_event+0x190/0x190
[ 1817.574586][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1817.579517][ T9861]  _do_fork+0x146/0xfa0
[ 1817.583845][ T9861]  ? copy_init_mm+0x20/0x20
[ 1817.588329][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1817.593809][ T9861]  ? _copy_to_user+0x118/0x160
[ 1817.598574][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1817.604792][ T9861]  ? put_timespec64+0xda/0x140
[ 1817.609539][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1817.614751][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1817.619904][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1817.625710][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1817.630732][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1817.635326][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1817.641198][ T9861] RIP: 0033:0x457eba
[ 1817.645101][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1817.665668][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1817.674218][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1817.682384][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1817.690362][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1817.698315][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1817.706270][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1817.715301][ T9861] memory: usage 23748kB, limit 0kB, failcnt 158
[ 1817.721551][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1817.728578][ T9861] Memory cgroup stats for /syz3:
[ 1817.728665][ T9861] anon 14225408
[ 1817.728665][ T9861] file 626688
[ 1817.728665][ T9861] kernel_stack 524288
[ 1817.728665][ T9861] slab 7036928
[ 1817.728665][ T9861] sock 0
[ 1817.728665][ T9861] shmem 557056
[ 1817.728665][ T9861] file_mapped 0
[ 1817.728665][ T9861] file_dirty 0
[ 1817.728665][ T9861] file_writeback 0
[ 1817.728665][ T9861] anon_thp 12582912
[ 1817.728665][ T9861] inactive_anon 675840
[ 1817.728665][ T9861] active_anon 14209024
[ 1817.728665][ T9861] inactive_file 167936
[ 1817.728665][ T9861] active_file 135168
[ 1817.728665][ T9861] unevictable 0
[ 1817.728665][ T9861] slab_reclaimable 1486848
[ 1817.728665][ T9861] slab_unreclaimable 5550080
[ 1817.728665][ T9861] pgfault 344289
[ 1817.728665][ T9861] pgmajfault 0
[ 1817.728665][ T9861] workingset_refault 0
[ 1817.728665][ T9861] workingset_activate 0
[ 1817.728665][ T9861] workingset_nodereclaim 0
[ 1817.728665][ T9861] pgrefill 0
[ 1817.728665][ T9861] pgscan 0
[ 1817.728665][ T9861] pgsteal 0
[ 1817.822353][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10776,uid=0
[ 1817.838229][ T9861] Memory cgroup out of memory: Killed process 10776 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:35752kB, shmem-rss:0kB
[ 1817.853903][ T1058] oom_reaper: reaped process 10776 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB
[ 1817.854772][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1817.877584][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1817.886696][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1817.896760][ T9861] Call Trace:
[ 1817.900052][ T9861]  dump_stack+0x172/0x1f0
[ 1817.904653][ T9861]  dump_header+0x10b/0x82d
[ 1817.909605][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1817.914531][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1817.919625][ T9861]  out_of_memory+0x79a/0x12c0
[ 1817.924297][ T9861]  ? lock_downgrade+0x920/0x920
[ 1817.929138][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1817.935744][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1817.941722][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1817.947568][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1817.953824][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1817.959115][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1817.963963][ T9861]  try_charge+0xf4b/0x1440
[ 1817.968376][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1817.973908][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1817.979529][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1817.985060][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1817.990512][ T9861]  ? lock_downgrade+0x920/0x920
[ 1817.995443][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1818.000982][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1818.006535][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1818.011944][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1818.017766][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1818.022882][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1818.028975][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1818.034891][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1818.040732][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1818.045957][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1818.050990][ T9861]  copy_process+0x3f8/0x6b00
[ 1818.055581][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1818.062869][ T9861]  ? perf_pending_event+0x190/0x190
[ 1818.068153][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1818.073082][ T9861]  _do_fork+0x146/0xfa0
[ 1818.078409][ T9861]  ? copy_init_mm+0x20/0x20
[ 1818.083017][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1818.088729][ T9861]  ? _copy_to_user+0x118/0x160
[ 1818.093655][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1818.100113][ T9861]  ? put_timespec64+0xda/0x140
[ 1818.104968][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1818.109743][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1818.114687][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1818.120609][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1818.125909][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1818.130824][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1818.136819][ T9861] RIP: 0033:0x457eba
[ 1818.140700][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1818.160663][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1818.170356][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1818.178346][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1818.186475][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1818.194617][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1818.202581][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1818.211263][ T9861] memory: usage 21380kB, limit 0kB, failcnt 164
[ 1818.217744][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1818.224805][ T9861] Memory cgroup stats for /syz3:
[ 1818.224902][ T9861] anon 12009472
[ 1818.224902][ T9861] file 626688
[ 1818.224902][ T9861] kernel_stack 458752
[ 1818.224902][ T9861] slab 7036928
[ 1818.224902][ T9861] sock 0
[ 1818.224902][ T9861] shmem 557056
[ 1818.224902][ T9861] file_mapped 0
[ 1818.224902][ T9861] file_dirty 0
[ 1818.224902][ T9861] file_writeback 0
[ 1818.224902][ T9861] anon_thp 10485760
[ 1818.224902][ T9861] inactive_anon 675840
[ 1818.224902][ T9861] active_anon 11993088
[ 1818.224902][ T9861] inactive_file 167936
[ 1818.224902][ T9861] active_file 135168
[ 1818.224902][ T9861] unevictable 0
[ 1818.224902][ T9861] slab_reclaimable 1486848
[ 1818.224902][ T9861] slab_unreclaimable 5550080
[ 1818.224902][ T9861] pgfault 344289
[ 1818.224902][ T9861] pgmajfault 0
[ 1818.224902][ T9861] workingset_refault 0
[ 1818.224902][ T9861] workingset_activate 0
[ 1818.224902][ T9861] workingset_nodereclaim 0
[ 1818.224902][ T9861] pgrefill 0
[ 1818.224902][ T9861] pgscan 0
[ 1818.224902][ T9861] pgsteal 0
[ 1818.320239][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7795,uid=0
[ 1818.335930][ T9861] Memory cgroup out of memory: Killed process 7795 (syz-executor.3) total-vm:72708kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB
[ 1818.351296][ T1058] oom_reaper: reaped process 7795 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 1818.352246][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1818.375251][ T9861] CPU: 0 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1818.383327][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1818.393487][ T9861] Call Trace:
[ 1818.396803][ T9861]  dump_stack+0x172/0x1f0
[ 1818.401139][ T9861]  dump_header+0x10b/0x82d
[ 1818.405800][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1818.410899][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1818.416021][ T9861]  out_of_memory+0x79a/0x12c0
[ 1818.420909][ T9861]  ? lock_downgrade+0x920/0x920
[ 1818.426131][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1818.432461][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1818.437849][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1818.443381][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1818.449240][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1818.454345][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1818.459355][ T9861]  try_charge+0xf4b/0x1440
[ 1818.464122][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1818.469836][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1818.475366][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1818.480981][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1818.486096][ T9861]  ? lock_downgrade+0x920/0x920
[ 1818.490942][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1818.496639][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1818.502170][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1818.507370][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1818.512909][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1818.518006][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1818.523462][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1818.529159][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1818.534403][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1818.539420][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1818.544527][ T9861]  copy_process+0x3f8/0x6b00
[ 1818.549119][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1818.553954][ T9861]  ? perf_pending_event+0x190/0x190
[ 1818.559139][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1818.564058][ T9861]  _do_fork+0x146/0xfa0
[ 1818.568193][ T9861]  ? copy_init_mm+0x20/0x20
[ 1818.572676][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1818.577765][ T9861]  ? _copy_to_user+0x118/0x160
[ 1818.582513][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1818.588753][ T9861]  ? put_timespec64+0xda/0x140
[ 1818.593540][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1818.598293][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1818.603140][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1818.608838][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1818.613958][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1818.618456][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1818.624340][ T9861] RIP: 0033:0x457eba
[ 1818.628226][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1818.648092][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1818.656504][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1818.664676][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1818.672908][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1818.680870][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1818.688997][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1818.697350][ T9861] memory: usage 18936kB, limit 0kB, failcnt 170
[ 1818.703652][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1818.710490][ T9861] Memory cgroup stats for /syz3:
[ 1818.710564][ T9861] anon 9818112
[ 1818.710564][ T9861] file 487424
[ 1818.710564][ T9861] kernel_stack 458752
[ 1818.710564][ T9861] slab 7036928
[ 1818.710564][ T9861] sock 0
[ 1818.710564][ T9861] shmem 417792
[ 1818.710564][ T9861] file_mapped 0
[ 1818.710564][ T9861] file_dirty 0
[ 1818.710564][ T9861] file_writeback 0
[ 1818.710564][ T9861] anon_thp 8388608
[ 1818.710564][ T9861] inactive_anon 540672
[ 1818.710564][ T9861] active_anon 9801728
[ 1818.710564][ T9861] inactive_file 167936
[ 1818.710564][ T9861] active_file 135168
[ 1818.710564][ T9861] unevictable 0
[ 1818.710564][ T9861] slab_reclaimable 1486848
[ 1818.710564][ T9861] slab_unreclaimable 5550080
[ 1818.710564][ T9861] pgfault 344289
[ 1818.710564][ T9861] pgmajfault 0
[ 1818.710564][ T9861] workingset_refault 0
[ 1818.710564][ T9861] workingset_activate 0
[ 1818.710564][ T9861] workingset_nodereclaim 0
[ 1818.710564][ T9861] pgrefill 0
[ 1818.710564][ T9861] pgscan 0
[ 1818.710564][ T9861] pgsteal 0
[ 1818.710564][ T9861] pgactivate 0
[ 1818.807626][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11473,uid=0
[ 1818.825124][ T9861] Memory cgroup out of memory: Killed process 11473 (syz-executor.3) total-vm:72576kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB
[ 1818.840678][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1818.852876][ T9861] CPU: 1 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1818.860888][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1818.871060][ T9861] Call Trace:
[ 1818.874348][ T9861]  dump_stack+0x172/0x1f0
[ 1818.878754][ T9861]  dump_header+0x10b/0x82d
[ 1818.883257][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1818.888280][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1818.893377][ T9861]  out_of_memory+0x79a/0x12c0
[ 1818.898133][ T9861]  ? lock_downgrade+0x920/0x920
[ 1818.902977][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1818.909214][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1818.914428][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1818.920052][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1818.925684][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1818.930783][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1818.935711][ T9861]  try_charge+0xf4b/0x1440
[ 1818.940122][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1818.946168][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1818.951955][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1818.957482][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1818.962486][ T9861]  ? lock_downgrade+0x920/0x920
[ 1818.967498][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1818.973028][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1818.978810][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1818.984010][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1818.989556][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1818.994850][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1819.000399][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1819.006115][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1819.011308][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1819.016325][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1819.021345][ T9861]  copy_process+0x3f8/0x6b00
[ 1819.025938][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1819.030780][ T9861]  ? perf_pending_event+0x190/0x190
[ 1819.035978][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1819.040909][ T9861]  _do_fork+0x146/0xfa0
[ 1819.045053][ T9861]  ? copy_init_mm+0x20/0x20
[ 1819.049655][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1819.054753][ T9861]  ? _copy_to_user+0x118/0x160
[ 1819.059569][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1819.065789][ T9861]  ? put_timespec64+0xda/0x140
[ 1819.070639][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1819.075392][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1819.080235][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1819.086088][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1819.091105][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1819.095613][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1819.101611][ T9861] RIP: 0033:0x457eba
[ 1819.105757][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1819.125518][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1819.133918][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1819.142071][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1819.150050][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1819.158615][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1819.166605][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1819.175832][ T9861] memory: usage 16636kB, limit 0kB, failcnt 176
[ 1819.182085][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1819.188979][ T9861] Memory cgroup stats for /syz3:
[ 1819.189072][ T9861] anon 7643136
[ 1819.189072][ T9861] file 487424
[ 1819.189072][ T9861] kernel_stack 458752
[ 1819.189072][ T9861] slab 7036928
[ 1819.189072][ T9861] sock 0
[ 1819.189072][ T9861] shmem 417792
[ 1819.189072][ T9861] file_mapped 0
[ 1819.189072][ T9861] file_dirty 0
[ 1819.189072][ T9861] file_writeback 0
[ 1819.189072][ T9861] anon_thp 6291456
[ 1819.189072][ T9861] inactive_anon 540672
[ 1819.189072][ T9861] active_anon 7626752
[ 1819.189072][ T9861] inactive_file 167936
[ 1819.189072][ T9861] active_file 135168
[ 1819.189072][ T9861] unevictable 0
[ 1819.189072][ T9861] slab_reclaimable 1486848
[ 1819.189072][ T9861] slab_unreclaimable 5550080
[ 1819.189072][ T9861] pgfault 344289
[ 1819.189072][ T9861] pgmajfault 0
[ 1819.189072][ T9861] workingset_refault 0
[ 1819.189072][ T9861] workingset_activate 0
[ 1819.189072][ T9861] workingset_nodereclaim 0
[ 1819.189072][ T9861] pgrefill 0
[ 1819.189072][ T9861] pgscan 0
[ 1819.189072][ T9861] pgsteal 0
[ 1819.189072][ T9861] pgactivate 0
[ 1819.286943][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7768,uid=0
[ 1819.302404][ T9861] Memory cgroup out of memory: Killed process 7768 (syz-executor.3) total-vm:72576kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB
[ 1819.317490][ T1058] oom_reaper: reaped process 7768 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 1819.318452][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1819.341950][ T9861] CPU: 1 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1819.349765][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1819.360011][ T9861] Call Trace:
[ 1819.363477][ T9861]  dump_stack+0x172/0x1f0
[ 1819.367811][ T9861]  dump_header+0x10b/0x82d
[ 1819.372876][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1819.377984][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1819.383121][ T9861]  out_of_memory+0x79a/0x12c0
[ 1819.387797][ T9861]  ? lock_downgrade+0x920/0x920
[ 1819.392642][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1819.398986][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1819.404317][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1819.410743][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1819.416639][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1819.421740][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1819.426587][ T9861]  try_charge+0xf4b/0x1440
[ 1819.431002][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1819.436634][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1819.442163][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1819.447778][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1819.453753][ T9861]  ? lock_downgrade+0x920/0x920
[ 1819.458592][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1819.464308][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1819.469864][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1819.475163][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1819.480706][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1819.485907][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1819.491294][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1819.497206][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1819.503201][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1819.508316][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1819.513409][ T9861]  copy_process+0x3f8/0x6b00
[ 1819.518282][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1819.523303][ T9861]  ? perf_pending_event+0x190/0x190
[ 1819.528528][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1819.533466][ T9861]  _do_fork+0x146/0xfa0
[ 1819.537629][ T9861]  ? copy_init_mm+0x20/0x20
[ 1819.542202][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1819.547222][ T9861]  ? _copy_to_user+0x118/0x160
[ 1819.552172][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1819.558422][ T9861]  ? put_timespec64+0xda/0x140
[ 1819.563185][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1819.567946][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1819.572873][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1819.578581][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1819.583609][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1819.588111][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1819.594072][ T9861] RIP: 0033:0x457eba
[ 1819.597965][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1819.618046][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1819.626901][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1819.635217][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1819.643183][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1819.651534][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1819.659505][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1819.668791][ T9861] memory: usage 14168kB, limit 0kB, failcnt 182
[ 1819.675262][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1819.682810][ T9861] Memory cgroup stats for /syz3:
[ 1819.682882][ T9861] anon 5419008
[ 1819.682882][ T9861] file 352256
[ 1819.682882][ T9861] kernel_stack 393216
[ 1819.682882][ T9861] slab 7036928
[ 1819.682882][ T9861] sock 0
[ 1819.682882][ T9861] shmem 282624
[ 1819.682882][ T9861] file_mapped 0
[ 1819.682882][ T9861] file_dirty 0
[ 1819.682882][ T9861] file_writeback 0
[ 1819.682882][ T9861] anon_thp 4194304
[ 1819.682882][ T9861] inactive_anon 405504
[ 1819.682882][ T9861] active_anon 5419008
[ 1819.682882][ T9861] inactive_file 167936
[ 1819.682882][ T9861] active_file 135168
[ 1819.682882][ T9861] unevictable 0
[ 1819.682882][ T9861] slab_reclaimable 1486848
[ 1819.682882][ T9861] slab_unreclaimable 5550080
[ 1819.682882][ T9861] pgfault 344289
[ 1819.682882][ T9861] pgmajfault 0
[ 1819.682882][ T9861] workingset_refault 0
[ 1819.682882][ T9861] workingset_activate 0
[ 1819.682882][ T9861] workingset_nodereclaim 0
[ 1819.682882][ T9861] pgrefill 0
[ 1819.682882][ T9861] pgscan 0
[ 1819.682882][ T9861] pgsteal 0
[ 1819.682882][ T9861] pgactivate 0
[ 1819.781374][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11511,uid=0
[ 1819.798323][ T9861] Memory cgroup out of memory: Killed process 11511 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB
[ 1819.814904][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1819.815111][ T1058] oom_reaper: reaped process 11511 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 1819.826918][ T9861] CPU: 1 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1819.846946][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1819.857764][ T9861] Call Trace:
[ 1819.861233][ T9861]  dump_stack+0x172/0x1f0
[ 1819.866428][ T9861]  dump_header+0x10b/0x82d
[ 1819.870830][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1819.876552][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1819.881758][ T9861]  out_of_memory+0x79a/0x12c0
[ 1819.886434][ T9861]  ? lock_downgrade+0x920/0x920
[ 1819.891290][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1819.897634][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1819.902833][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1819.908368][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1819.913996][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1819.919543][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1819.925901][ T9861]  try_charge+0xf4b/0x1440
[ 1819.930316][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1819.935854][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1819.941493][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1819.947037][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1819.952342][ T9861]  ? lock_downgrade+0x920/0x920
[ 1819.957201][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1819.963161][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1819.969770][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1819.975060][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1819.980637][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1819.985839][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1819.991551][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1819.997268][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1820.002557][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1820.007657][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1820.012957][ T9861]  copy_process+0x3f8/0x6b00
[ 1820.017655][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1820.023223][ T9861]  ? perf_pending_event+0x190/0x190
[ 1820.028706][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1820.033738][ T9861]  _do_fork+0x146/0xfa0
[ 1820.037910][ T9861]  ? copy_init_mm+0x20/0x20
[ 1820.042405][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1820.048119][ T9861]  ? _copy_to_user+0x118/0x160
[ 1820.052972][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1820.059453][ T9861]  ? put_timespec64+0xda/0x140
[ 1820.064558][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1820.069306][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1820.074246][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1820.079960][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1820.085079][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1820.089853][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1820.095822][ T9861] RIP: 0033:0x457eba
[ 1820.099799][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1820.120331][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1820.128828][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1820.136957][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1820.145013][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1820.152989][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1820.162014][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1820.170833][ T9861] memory: usage 11852kB, limit 0kB, failcnt 188
[ 1820.177266][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1820.184631][ T9861] Memory cgroup stats for /syz3:
[ 1820.184728][ T9861] anon 3219456
[ 1820.184728][ T9861] file 352256
[ 1820.184728][ T9861] kernel_stack 393216
[ 1820.184728][ T9861] slab 7036928
[ 1820.184728][ T9861] sock 0
[ 1820.184728][ T9861] shmem 282624
[ 1820.184728][ T9861] file_mapped 0
[ 1820.184728][ T9861] file_dirty 0
[ 1820.184728][ T9861] file_writeback 0
[ 1820.184728][ T9861] anon_thp 2097152
[ 1820.184728][ T9861] inactive_anon 405504
[ 1820.184728][ T9861] active_anon 3219456
[ 1820.184728][ T9861] inactive_file 167936
[ 1820.184728][ T9861] active_file 135168
[ 1820.184728][ T9861] unevictable 0
[ 1820.184728][ T9861] slab_reclaimable 1486848
[ 1820.184728][ T9861] slab_unreclaimable 5550080
[ 1820.184728][ T9861] pgfault 344289
[ 1820.184728][ T9861] pgmajfault 0
[ 1820.184728][ T9861] workingset_refault 0
[ 1820.184728][ T9861] workingset_activate 0
[ 1820.184728][ T9861] workingset_nodereclaim 0
[ 1820.184728][ T9861] pgrefill 0
[ 1820.184728][ T9861] pgscan 0
[ 1820.184728][ T9861] pgsteal 0
[ 1820.184728][ T9861] pgactivate 0
[ 1820.282470][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11472,uid=0
[ 1820.298801][ T9861] Memory cgroup out of memory: Killed process 11472 (syz-executor.3) total-vm:72576kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB
[ 1820.314542][ T1058] oom_reaper: reaped process 11472 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 1820.314831][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1820.338422][ T9861] CPU: 1 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1820.346231][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1820.356363][ T9861] Call Trace:
[ 1820.359648][ T9861]  dump_stack+0x172/0x1f0
[ 1820.363969][ T9861]  dump_header+0x10b/0x82d
[ 1820.368461][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1820.373401][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1820.378510][ T9861]  out_of_memory+0x79a/0x12c0
[ 1820.383180][ T9861]  ? lock_downgrade+0x920/0x920
[ 1820.388625][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1820.394941][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1820.400143][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1820.405673][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1820.411298][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1820.416397][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1820.424889][ T9861]  try_charge+0xf4b/0x1440
[ 1820.429311][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1820.434852][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1820.440903][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1820.446432][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1820.451445][ T9861]  ? lock_downgrade+0x920/0x920
[ 1820.456627][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1820.462160][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1820.467713][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1820.472896][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1820.478523][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1820.483794][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1820.489165][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1820.494877][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1820.500075][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1820.505171][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1820.510183][ T9861]  copy_process+0x3f8/0x6b00
[ 1820.514931][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1820.520380][ T9861]  ? perf_pending_event+0x190/0x190
[ 1820.525666][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1820.530605][ T9861]  _do_fork+0x146/0xfa0
[ 1820.534746][ T9861]  ? copy_init_mm+0x20/0x20
[ 1820.539232][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1820.544250][ T9861]  ? _copy_to_user+0x118/0x160
[ 1820.548998][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1820.555224][ T9861]  ? put_timespec64+0xda/0x140
[ 1820.559973][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1820.564738][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1820.569572][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1820.575296][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1820.580316][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1820.584814][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1820.590693][ T9861] RIP: 0033:0x457eba
[ 1820.594572][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1820.614251][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1820.622661][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1820.630715][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1820.638665][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1820.646801][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1820.655813][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1820.666892][ T9861] memory: usage 9532kB, limit 0kB, failcnt 194
[ 1820.673067][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1820.680273][ T9861] Memory cgroup stats for /syz3:
[ 1820.680377][ T9861] anon 1007616
[ 1820.680377][ T9861] file 352256
[ 1820.680377][ T9861] kernel_stack 393216
[ 1820.680377][ T9861] slab 7036928
[ 1820.680377][ T9861] sock 0
[ 1820.680377][ T9861] shmem 282624
[ 1820.680377][ T9861] file_mapped 0
[ 1820.680377][ T9861] file_dirty 0
[ 1820.680377][ T9861] file_writeback 0
[ 1820.680377][ T9861] anon_thp 0
[ 1820.680377][ T9861] inactive_anon 405504
[ 1820.680377][ T9861] active_anon 1007616
[ 1820.680377][ T9861] inactive_file 167936
[ 1820.680377][ T9861] active_file 135168
[ 1820.680377][ T9861] unevictable 0
[ 1820.680377][ T9861] slab_reclaimable 1486848
[ 1820.680377][ T9861] slab_unreclaimable 5550080
[ 1820.680377][ T9861] pgfault 344289
[ 1820.680377][ T9861] pgmajfault 0
[ 1820.680377][ T9861] workingset_refault 0
[ 1820.680377][ T9861] workingset_activate 0
[ 1820.680377][ T9861] workingset_nodereclaim 0
[ 1820.680377][ T9861] pgrefill 0
[ 1820.680377][ T9861] pgscan 0
[ 1820.680377][ T9861] pgsteal 0
[ 1820.680377][ T9861] pgactivate 0
[ 1820.777980][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8781,uid=0
[ 1820.793544][ T9861] Memory cgroup out of memory: Killed process 8781 (syz-executor.3) total-vm:72576kB, anon-rss:168kB, file-rss:35876kB, shmem-rss:0kB
[ 1820.809022][ T1058] oom_reaper: reaped process 8781 (syz-executor.3), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB
[ 1820.810060][ T9861] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 1820.832028][ T9861] CPU: 1 PID: 9861 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1820.840876][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1820.850933][ T9861] Call Trace:
[ 1820.854247][ T9861]  dump_stack+0x172/0x1f0
[ 1820.858658][ T9861]  dump_header+0x10b/0x82d
[ 1820.863607][ T9861]  ? oom_kill_process+0x94/0x3f0
[ 1820.868554][ T9861]  oom_kill_process.cold+0x10/0x15
[ 1820.873652][ T9861]  out_of_memory+0x79a/0x12c0
[ 1820.878336][ T9861]  ? lock_downgrade+0x920/0x920
[ 1820.883166][ T9861]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1820.889554][ T9861]  ? oom_killer_disable+0x280/0x280
[ 1820.894766][ T9861]  mem_cgroup_out_of_memory+0x1d8/0x240
[ 1820.900301][ T9861]  ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0
[ 1820.905925][ T9861]  ? do_raw_spin_unlock+0x57/0x270
[ 1820.911014][ T9861]  ? _raw_spin_unlock+0x2d/0x50
[ 1820.915997][ T9861]  try_charge+0xf4b/0x1440
[ 1820.920586][ T9861]  ? perf_trace_lock_acquire+0xc0/0x530
[ 1820.926113][ T9861]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1820.931637][ T9861]  ? get_mem_cgroup_from_mm+0x139/0x320
[ 1820.937435][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1820.942531][ T9861]  ? lock_downgrade+0x920/0x920
[ 1820.947364][ T9861]  ? percpu_ref_tryget_live+0x111/0x290
[ 1820.952991][ T9861]  __memcg_kmem_charge_memcg+0x71/0xf0
[ 1820.958539][ T9861]  ? memcg_kmem_put_cache+0x50/0x50
[ 1820.963730][ T9861]  ? get_mem_cgroup_from_mm+0x156/0x320
[ 1820.969282][ T9861]  __memcg_kmem_charge+0x13a/0x3a0
[ 1820.974398][ T9861]  __alloc_pages_nodemask+0x4f4/0x900
[ 1820.979781][ T9861]  ? __alloc_pages_slowpath+0x2520/0x2520
[ 1820.986026][ T9861]  ? percpu_ref_put_many+0xb6/0x190
[ 1820.991212][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1820.996230][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1821.001265][ T9861]  copy_process+0x3f8/0x6b00
[ 1821.005852][ T9861]  ? perf_trace_lock+0xeb/0x4c0
[ 1821.010695][ T9861]  ? perf_pending_event+0x190/0x190
[ 1821.015922][ T9861]  ? __cleanup_sighand+0x60/0x60
[ 1821.020968][ T9861]  _do_fork+0x146/0xfa0
[ 1821.025120][ T9861]  ? copy_init_mm+0x20/0x20
[ 1821.029744][ T9861]  ? __kasan_check_read+0x11/0x20
[ 1821.034783][ T9861]  ? _copy_to_user+0x118/0x160
[ 1821.039699][ T9861]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1821.045922][ T9861]  ? put_timespec64+0xda/0x140
[ 1821.050666][ T9861]  __x64_sys_clone+0x18d/0x250
[ 1821.055419][ T9861]  ? __ia32_sys_vfork+0xc0/0xc0
[ 1821.060257][ T9861]  ? trace_hardirqs_off_caller+0x65/0x230
[ 1821.065957][ T9861]  ? trace_hardirqs_on+0x67/0x240
[ 1821.071155][ T9861]  do_syscall_64+0xfd/0x6a0
[ 1821.075752][ T9861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1821.081724][ T9861] RIP: 0033:0x457eba
[ 1821.085603][ T9861] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 1821.105191][ T9861] RSP: 002b:0000000000a6fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1821.113880][ T9861] RAX: ffffffffffffffda RBX: 0000000000a6fd60 RCX: 0000000000457eba
[ 1821.122034][ T9861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1821.129989][ T9861] RBP: 0000000000a6fda0 R08: 0000000000000001 R09: 000055555623c940
[ 1821.137957][ T9861] R10: 000055555623cc10 R11: 0000000000000246 R12: 0000000000000001
[ 1821.145908][ T9861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdf0
[ 1821.154475][ T9861] memory: usage 8960kB, limit 0kB, failcnt 200
[ 1821.160769][ T9861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1821.167945][ T9861] Memory cgroup stats for /syz3:
[ 1821.168045][ T9861] anon 1007616
[ 1821.168045][ T9861] file 73728
[ 1821.168045][ T9861] kernel_stack 327680
[ 1821.168045][ T9861] slab 6897664
[ 1821.168045][ T9861] sock 0
[ 1821.168045][ T9861] shmem 143360
[ 1821.168045][ T9861] file_mapped 0
[ 1821.168045][ T9861] file_dirty 0
[ 1821.168045][ T9861] file_writeback 0
[ 1821.168045][ T9861] anon_thp 0
[ 1821.168045][ T9861] inactive_anon 135168
[ 1821.168045][ T9861] active_anon 1007616
[ 1821.168045][ T9861] inactive_file 167936
[ 1821.168045][ T9861] active_file 135168
[ 1821.168045][ T9861] unevictable 0
[ 1821.168045][ T9861] slab_reclaimable 1486848
[ 1821.168045][ T9861] slab_unreclaimable 5410816
[ 1821.168045][ T9861] pgfault 344289
[ 1821.168045][ T9861] pgmajfault 0
[ 1821.168045][ T9861] workingset_refault 0
[ 1821.168045][ T9861] workingset_activate 0
[ 1821.168045][ T9861] workingset_nodereclaim 0
[ 1821.168045][ T9861] pgrefill 0
[ 1821.168045][ T9861] pgscan 0
[ 1821.168045][ T9861] pgsteal 0
[ 1821.168045][ T9861] pgactivate 0
[ 1821.264995][ T9861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8811,uid=0
[ 1821.280440][ T9861] Memory cgroup out of memory: Killed process 8811 (syz-executor.3) total-vm:72576kB, anon-rss:168kB, file-rss:35800kB, shmem-rss:0kB
[ 1821.295487][ T1058] oom_reaper: reaped process 8811 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB
[ 1821.296507][ T9861] Memory cgroup out of memory: Killed process 11536 (syz-executor.3) total-vm:72576kB, anon-rss:144kB, file-rss:35780kB, shmem-rss:0kB
[ 1821.320896][ T1058] oom_reaper: reaped process 11536 (syz-executor.3), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 1821.322121][ T9861] Memory cgroup out of memory: Killed process 9861 (syz-executor.3) total-vm:72444kB, anon-rss:124kB, file-rss:35776kB, shmem-rss:0kB
[ 1821.346719][ T1058] oom_reaper: reaped process 9861 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
12:52:04 executing program 3:

12:52:04 executing program 1:
r0 = gettid()
ptrace$cont(0x28, r0, 0x8, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x60000004)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r7 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r7, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r6, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x101, 0x40000)
ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000240))
bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r5, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r8=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:04 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:04 executing program 5:

12:52:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:04 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x338)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:04 executing program 5:

[ 1821.517091][T16134] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1821.547470][T16134] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:04 executing program 3:

12:52:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="4ef27f454c4600000033006c0000000000000000012305030000000000380b00e00000000009000400"/55], 0x50)

[ 1821.719893][T16148] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1821.772491][T16148] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:05 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17})

[ 1822.003364][T16160] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1822.059899][T16160] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1822.120791][T20300] device gretap0 left promiscuous mode
[ 1822.139271][T20300] bridge0: port 4(gretap0) entered disabled state
12:52:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="440f20c03504000000440f22c00f20c3b8546200000f23d00f21f835000000090f23f80f01c3f3360f01dfb8010000000f01d9dfc80f01cbb8cf95c1d70f23c80f21f8350000a0000f23f8c4e2a59c84eb00000000", 0x55}], 0x1, 0x0, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12:52:05 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:05 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x339)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:05 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x240)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x16d2ea6abfabbcf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x10000000000002ae, 0x6)
chdir(&(0x7f0000000100)='./file0\x00')

[ 1822.438462][T16182] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:05 executing program 5:
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 1822.543375][T16182] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:05 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001840)={{0x80}, 'port1\x00', 0x36934851e561eef9, 0xd14acf789fb99587})

[ 1822.719496][T20300] device team0 left promiscuous mode
[ 1822.728521][T20300] device team_slave_0 left promiscuous mode
[ 1822.740591][T20300] device team_slave_1 left promiscuous mode
[ 1822.780161][T20300] bridge0: port 3(team0) entered disabled state
[ 1822.837854][T20300] device bridge_slave_1 left promiscuous mode
[ 1822.854911][T20300] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1822.914548][T20300] device bridge_slave_0 left promiscuous mode
[ 1822.924114][T20300] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1823.144699][T20300] device hsr_slave_0 left promiscuous mode
[ 1823.193701][T20300] device hsr_slave_1 left promiscuous mode
[ 1823.243064][T20300] team0 (unregistering): Port device team_slave_1 removed
[ 1823.294113][T20300] team0 (unregistering): Port device team_slave_0 removed
[ 1823.328504][T20300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1823.435051][T20300] bond0 (unregistering): Released all slaves
[ 1824.444157][T16220] IPVS: ftp: loaded support on port[0] = 21
[ 1824.495933][T16220] chnl_net:caif_netlink_parms(): no params data found
[ 1824.519395][T16220] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1824.526662][T16220] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1824.534358][T16220] device bridge_slave_0 entered promiscuous mode
[ 1824.542414][T16220] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1824.549706][T16220] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1824.557255][T16220] device bridge_slave_1 entered promiscuous mode
[ 1824.572555][T16220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1824.583267][T16220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1824.601290][T16220] team0: Port device team_slave_0 added
[ 1824.608432][T16220] team0: Port device team_slave_1 added
[ 1824.666385][T16220] device hsr_slave_0 entered promiscuous mode
[ 1824.714622][T16220] device hsr_slave_1 entered promiscuous mode
[ 1824.753768][T16220] debugfs: Directory 'hsr0' with parent '/' already present!
[ 1824.786310][T16220] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1824.799152][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1824.808558][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1824.816555][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1824.826498][T16220] 8021q: adding VLAN 0 to HW filter on device team0
[ 1824.836267][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1824.845054][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1824.853486][T24343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1824.860595][T24343] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1824.869099][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1824.878490][T16125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1824.887815][T16125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1824.896452][T16125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1824.903687][T16125] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1824.923411][T16220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1824.934120][T16220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1824.946309][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1824.955490][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1824.964190][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1824.972588][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1824.981723][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1824.989412][T24343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1825.004487][T16220] 8021q: adding VLAN 0 to HW filter on device batadv0
12:52:08 executing program 3:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
r6 = dup3(r5, r0, 0x80000)
epoll_wait(r6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x80)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r8 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r9 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r9, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r8, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r8, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r10 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r11 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r11, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r10, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r10, r11, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000340)={0x5, 0x70, 0x783e, 0x5, 0xf0, 0x80000001, 0x0, 0x400, 0x10480, 0xf, 0x800, 0x9, 0x70f, 0x16f, 0x0, 0x100000000, 0x9, 0x932, 0x8, 0xf1e, 0x5, 0x5, 0xffb, 0x9, 0xffff, 0x2, 0x20, 0x0, 0x80000001, 0xfbb, 0x9, 0x6, 0x9, 0x800, 0x8, 0x1, 0x8001, 0xfffffffffffffffa, 0x0, 0x10b3, 0x0, @perf_bp={&(0x7f0000000300), 0x9}, 0x800, 0x0, 0x1000, 0xea1cccaf1b3ce172, 0xbdb5, 0x9, 0x4})
ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000240)=""/179)

12:52:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:08 executing program 5:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
r6 = dup3(r5, r0, 0x80000)
epoll_wait(r6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x80)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r8 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r9 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r9, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r8, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r8, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r10 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r11 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r11, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r10, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r10, r11, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000340)={0x5, 0x70, 0x783e, 0x5, 0xf0, 0x80000001, 0x0, 0x400, 0x10480, 0xf, 0x800, 0x9, 0x70f, 0x16f, 0x0, 0x100000000, 0x9, 0x932, 0x8, 0xf1e, 0x5, 0x5, 0xffb, 0x9, 0xffff, 0x2, 0x20, 0x0, 0x80000001, 0xfbb, 0x9, 0x6, 0x9, 0x800, 0x8, 0x1, 0x8001, 0xfffffffffffffffa, 0x0, 0x10b3, 0x0, @perf_bp={&(0x7f0000000300), 0x9}, 0x800, 0x0, 0x1000, 0xea1cccaf1b3ce172, 0xbdb5, 0x9, 0x4})
ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000240)=""/179)

12:52:08 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:08 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x33a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:08 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000002c0)={0x6, 0x13, "91fafc9d5588b558573a52fc571d5ae281999f"})
r4 = socket$alg(0x26, 0x5, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0x56b}, 0x2)
bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r4, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x311e8464d6780d0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000100)={0x957, 0x8, 0x1, 0x10000, 0xfffffffffffffffa, 0x7, 0x3})
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x200, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1825.099596][T16227] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1825.113817][T16227] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:08 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000ec0)="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", 0x1000, 0x20000004, &(0x7f0000000240)=@file={0x3, './file0\x00'}, 0x6e)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @broadcast, 0x4e24, 0x2, 'lblc\x00', 0x10, 0x5, 0x75}, 0x2c)
bind$alg(r4, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
fadvise64(r5, 0x0, 0x0, 0x2)

12:52:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:08 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x80000001, 0x200)
socket$alg(0x26, 0x5, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:09 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x33b)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:09 executing program 3 (fault-call:8 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:09 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1826.124787][T16302] FAULT_INJECTION: forcing a failure.
[ 1826.124787][T16302] name failslab, interval 1, probability 0, space 0, times 0
[ 1826.163263][T16302] CPU: 1 PID: 16302 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1826.171192][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1826.181252][T16302] Call Trace:
[ 1826.184558][T16302]  dump_stack+0x172/0x1f0
[ 1826.188994][T16302]  should_fail.cold+0xa/0x15
[ 1826.193603][T16302]  ? fault_create_debugfs_attr+0x180/0x180
[ 1826.199425][T16302]  ? page_to_nid.part.0+0x20/0x20
[ 1826.204578][T16302]  ? ___might_sleep+0x163/0x280
[ 1826.209446][T16302]  __should_failslab+0x121/0x190
[ 1826.214415][T16302]  should_failslab+0x9/0x14
[ 1826.218930][T16302]  __kmalloc+0x2e0/0x770
[ 1826.223185][T16302]  ? lock_sock_nested+0x9a/0x120
[ 1826.228134][T16302]  ? sock_kmalloc+0xc6/0x120
[ 1826.232735][T16302]  sock_kmalloc+0xc6/0x120
[ 1826.237156][T16302]  af_alg_alloc_areq+0x24/0x1e0
[ 1826.242004][T16302]  aead_recvmsg+0x45d/0x16a0
[ 1826.246597][T16302]  ? _copy_from_user+0x12c/0x1a0
[ 1826.251540][T16302]  ? aead_release+0x50/0x50
[ 1826.256648][T16302]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1826.262105][T16302]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1826.268466][T16302]  ? security_socket_recvmsg+0x95/0xc0
[ 1826.273934][T16302]  ? aead_release+0x50/0x50
[ 1826.278444][T16302]  sock_recvmsg+0xce/0x110
[ 1826.283384][T16302]  ? sockfs_setattr+0x170/0x170
[ 1826.288233][T16302]  ___sys_recvmsg+0x271/0x5a0
[ 1826.292930][T16302]  ? ___sys_sendmsg+0x920/0x920
[ 1826.297903][T16302]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1826.304424][T16302]  ? ksys_dup3+0x3e0/0x3e0
[ 1826.310591][T16302]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1826.316943][T16302]  ? debug_smp_processor_id+0x3c/0x214
[ 1826.322408][T16302]  ? __fget_light+0x1a9/0x230
[ 1826.327087][T16302]  ? __fdget+0x1b/0x20
[ 1826.331249][T16302]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1826.337496][T16302]  do_recvmmsg+0x27e/0x7a0
[ 1826.341922][T16302]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1826.346873][T16302]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1826.353114][T16302]  ? _copy_from_user+0x12c/0x1a0
[ 1826.358070][T16302]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1826.364311][T16302]  __sys_recvmmsg+0xe5/0x270
[ 1826.368913][T16302]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1826.373943][T16302]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1826.380007][T16302]  __x64_sys_recvmmsg+0xe6/0x140
[ 1826.384988][T16302]  do_syscall_64+0xfd/0x6a0
[ 1826.389494][T16302]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1826.395505][T16302] RIP: 0033:0x4598e9
[ 1826.399582][T16302] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1826.419187][T16302] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1826.427598][T16302] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1826.435575][T16302] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1826.443554][T16302] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1826.451521][T16302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1826.459495][T16302] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:09 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:09 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000080)={@local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x42200, 0xfa1047e134969640)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x40000, 0x0)
write$nbd(r6, &(0x7f0000000240)={0x67446698, 0x0, 0x2, 0x3, 0x2, "f0c25d5b3a197c5b51f2dfea17b527e695a363bbed02d01787e47dad5c5bc647a35d3ae7a98962730f8af8e31248570957ccfb0c8b781355a3faac14cf955af0aed2c00fbe800b463349486d66e2783894541fb297813edc8996bccd0baf85e57c1862d2325fa3cbcdc731e852a6641ad5983ab8f961c3e62345905c9f16cec966c4e44f318afe4e684e3d08a549978bbec4633938b26e4b583cd8790acec3c71226ab2147748c3895986c61f777847eae449ca76384047a6ce5575d1a"}, 0xcd)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x12, r5, 0x0)

[ 1826.577602][T16316] __nla_validate_parse: 14 callbacks suppressed
[ 1826.577618][T16316] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1826.593673][T16316] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:09 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x33c)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:09 executing program 5 (fault-call:3 fault-nth:0):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1826.742616][T16332] FAULT_INJECTION: forcing a failure.
[ 1826.742616][T16332] name failslab, interval 1, probability 0, space 0, times 0
[ 1826.758403][T16332] CPU: 0 PID: 16332 Comm: syz-executor.5 Not tainted 5.3.0-rc8+ #0
[ 1826.766329][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1826.776374][T16332] Call Trace:
[ 1826.776398][T16332]  dump_stack+0x172/0x1f0
[ 1826.776418][T16332]  should_fail.cold+0xa/0x15
[ 1826.776433][T16332]  ? __kasan_check_read+0x11/0x20
[ 1826.776448][T16332]  ? fault_create_debugfs_attr+0x180/0x180
[ 1826.776462][T16332]  ? page_to_nid.part.0+0x20/0x20
[ 1826.776479][T16332]  ? ___might_sleep+0x163/0x280
[ 1826.776495][T16332]  __should_failslab+0x121/0x190
[ 1826.776509][T16332]  should_failslab+0x9/0x14
[ 1826.776520][T16332]  kmem_cache_alloc_node_trace+0x274/0x750
[ 1826.776531][T16332]  ? _raw_spin_unlock_bh+0x31/0x40
[ 1826.776544][T16332]  ? release_sock+0x156/0x1c0
[ 1826.776562][T16332]  __get_vm_area_node+0x12b/0x3a0
[ 1826.776579][T16332]  __vmalloc_node_range+0xd4/0x7d0
[ 1826.776592][T16332]  ? netlink_sendmsg+0x637/0xd60
[ 1826.776607][T16332]  ? netlink_sendmsg+0x637/0xd60
[ 1826.776620][T16332]  vmalloc+0x6b/0x90
[ 1826.776633][T16332]  ? netlink_sendmsg+0x637/0xd60
[ 1826.776646][T16332]  netlink_sendmsg+0x637/0xd60
[ 1826.776669][T16332]  ? netlink_unicast+0x710/0x710
[ 1826.873611][T16332]  ? aa_sock_msg_perm.isra.0+0xba/0x170
[ 1826.879193][T16332]  ? apparmor_socket_sendmsg+0x2a/0x30
[ 1826.884660][T16332]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1826.890989][T16332]  ? security_socket_sendmsg+0x8d/0xc0
[ 1826.896455][T16332]  ? netlink_unicast+0x710/0x710
[ 1826.901396][T16332]  sock_sendmsg+0xd7/0x130
[ 1826.905820][T16332]  ___sys_sendmsg+0x803/0x920
[ 1826.910508][T16332]  ? copy_msghdr_from_user+0x440/0x440
[ 1826.916146][T16332]  ? __fget+0xa3/0x560
[ 1826.920224][T16332]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1826.926567][T16332]  ? __fget+0x384/0x560
[ 1826.930737][T16332]  ? ksys_dup3+0x3e0/0x3e0
[ 1826.935261][T16332]  ? __fget_light+0x1a9/0x230
[ 1826.939952][T16332]  ? __fdget+0x1b/0x20
[ 1826.944113][T16332]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1826.950369][T16332]  __sys_sendmsg+0x105/0x1d0
[ 1826.954967][T16332]  ? __sys_sendmsg_sock+0xd0/0xd0
[ 1826.960097][T16332]  ? switch_fpu_return+0x1fa/0x4f0
[ 1826.965214][T16332]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1826.971292][T16332]  __x64_sys_sendmsg+0x78/0xb0
[ 1826.976069][T16332]  do_syscall_64+0xfd/0x6a0
[ 1826.980758][T16332]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1826.986649][T16332] RIP: 0033:0x4598e9
[ 1826.990684][T16332] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1827.010561][T16332] RSP: 002b:00007f456d943c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1827.018984][T16332] RAX: ffffffffffffffda RBX: 00007f456d943c90 RCX: 00000000004598e9
[ 1827.027083][T16332] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[ 1827.035147][T16332] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1827.043121][T16332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f456d9446d4
[ 1827.051098][T16332] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000005
[ 1827.076762][T16341] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netemr'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1827.123756][T16341] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:10 executing program 3 (fault-call:8 fault-nth:1):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:10 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x33d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1827.291209][T16355] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1827.323741][T16355] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:10 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1827.488285][T16368] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1827.513785][T16368] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:10 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x800)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r4 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r4, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r3, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x6)
accept$alg(r2, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r5, 0x0, 0x0)
write(r0, &(0x7f0000000340), 0xffffffffffffffba)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r6=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1827.612230][T16332] syz-executor.5: vmalloc: allocation failure: 63872 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[ 1827.627409][T16379] FAULT_INJECTION: forcing a failure.
[ 1827.627409][T16379] name failslab, interval 1, probability 0, space 0, times 0
[ 1827.640919][T16332] CPU: 0 PID: 16332 Comm: syz-executor.5 Not tainted 5.3.0-rc8+ #0
[ 1827.648918][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1827.659120][T16332] Call Trace:
[ 1827.662427][T16332]  dump_stack+0x172/0x1f0
[ 1827.666811][T16332]  warn_alloc.cold+0x87/0x17f
[ 1827.671494][T16332]  ? zone_watermark_ok_safe+0x260/0x260
[ 1827.671518][T16332]  ? __get_vm_area_node+0x2df/0x3a0
[ 1827.682329][T16332]  __vmalloc_node_range+0x483/0x7d0
[ 1827.687645][T16332]  ? netlink_sendmsg+0x637/0xd60
[ 1827.692587][T16332]  vmalloc+0x6b/0x90
[ 1827.696493][T16332]  ? netlink_sendmsg+0x637/0xd60
[ 1827.701431][T16332]  netlink_sendmsg+0x637/0xd60
[ 1827.706209][T16332]  ? netlink_unicast+0x710/0x710
[ 1827.711128][T16332]  ? aa_sock_msg_perm.isra.0+0xba/0x170
[ 1827.716668][T16332]  ? apparmor_socket_sendmsg+0x2a/0x30
[ 1827.722118][T16332]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1827.728513][T16332]  ? security_socket_sendmsg+0x8d/0xc0
[ 1827.734571][T16332]  ? netlink_unicast+0x710/0x710
[ 1827.739597][T16332]  sock_sendmsg+0xd7/0x130
[ 1827.744274][T16332]  ___sys_sendmsg+0x803/0x920
[ 1827.749291][T16332]  ? copy_msghdr_from_user+0x440/0x440
[ 1827.754842][T16332]  ? __fget+0xa3/0x560
[ 1827.759028][T16332]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1827.765251][T16332]  ? __fget+0x384/0x560
[ 1827.769390][T16332]  ? ksys_dup3+0x3e0/0x3e0
[ 1827.773793][T16332]  ? __fget_light+0x1a9/0x230
[ 1827.778536][T16332]  ? __fdget+0x1b/0x20
[ 1827.782591][T16332]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1827.788821][T16332]  __sys_sendmsg+0x105/0x1d0
[ 1827.793393][T16332]  ? __sys_sendmsg_sock+0xd0/0xd0
[ 1827.798581][T16332]  ? switch_fpu_return+0x1fa/0x4f0
[ 1827.803682][T16332]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1827.809797][T16332]  __x64_sys_sendmsg+0x78/0xb0
[ 1827.814773][T16332]  do_syscall_64+0xfd/0x6a0
[ 1827.819274][T16332]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1827.825153][T16332] RIP: 0033:0x4598e9
[ 1827.829038][T16332] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1827.848790][T16332] RSP: 002b:00007f456d943c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1827.857190][T16332] RAX: ffffffffffffffda RBX: 00007f456d943c90 RCX: 00000000004598e9
[ 1827.865226][T16332] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[ 1827.873178][T16332] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1827.881137][T16332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f456d9446d4
[ 1827.889089][T16332] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000005
[ 1827.906829][T16387] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1827.916602][T16387] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1827.932192][T16379] CPU: 0 PID: 16379 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1827.940695][T16379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1827.951021][T16379] Call Trace:
[ 1827.954453][T16379]  dump_stack+0x172/0x1f0
[ 1827.958821][T16379]  should_fail.cold+0xa/0x15
[ 1827.963545][T16379]  ? fault_create_debugfs_attr+0x180/0x180
[ 1827.969358][T16379]  ? page_to_nid.part.0+0x20/0x20
[ 1827.974392][T16379]  ? ___might_sleep+0x163/0x280
[ 1827.979319][T16379]  __should_failslab+0x121/0x190
[ 1827.984316][T16379]  should_failslab+0x9/0x14
[ 1827.988910][T16379]  __kmalloc+0x2e0/0x770
[ 1827.993379][T16379]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1827.999370][T16379]  ? iov_iter_advance+0x295/0xf70
[ 1828.004398][T16379]  ? sock_kmalloc+0xc6/0x120
[ 1828.009003][T16379]  sock_kmalloc+0xc6/0x120
[ 1828.013629][T16379]  af_alg_get_rsgl+0xd9/0x6b0
[ 1828.018412][T16379]  aead_recvmsg+0x4b6/0x16a0
[ 1828.023020][T16379]  ? _copy_from_user+0x12c/0x1a0
[ 1828.027974][T16379]  ? aead_release+0x50/0x50
[ 1828.032492][T16379]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1828.038411][T16379]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1828.044917][T16379]  ? security_socket_recvmsg+0x95/0xc0
[ 1828.050387][T16379]  ? aead_release+0x50/0x50
[ 1828.054937][T16379]  sock_recvmsg+0xce/0x110
[ 1828.059359][T16379]  ? sockfs_setattr+0x170/0x170
[ 1828.064241][T16379]  ___sys_recvmsg+0x271/0x5a0
[ 1828.069031][T16379]  ? ___sys_sendmsg+0x920/0x920
[ 1828.074156][T16379]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1828.080516][T16379]  ? ksys_dup3+0x3e0/0x3e0
[ 1828.084941][T16379]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1828.091183][T16379]  ? debug_smp_processor_id+0x3c/0x214
[ 1828.096648][T16379]  ? __fget_light+0x1a9/0x230
[ 1828.101334][T16379]  ? __fdget+0x1b/0x20
[ 1828.105586][T16379]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1828.111923][T16379]  do_recvmmsg+0x27e/0x7a0
[ 1828.116530][T16379]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1828.121418][T16379]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1828.127667][T16379]  ? _copy_from_user+0x12c/0x1a0
[ 1828.132707][T16379]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1828.139163][T16379]  __sys_recvmmsg+0xe5/0x270
[ 1828.143936][T16379]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1828.148973][T16379]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1828.155131][T16379]  __x64_sys_recvmmsg+0xe6/0x140
[ 1828.160160][T16379]  do_syscall_64+0xfd/0x6a0
12:52:11 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1828.164857][T16379]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1828.170750][T16379] RIP: 0033:0x4598e9
[ 1828.174737][T16379] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1828.194833][T16379] RSP: 002b:00007ff4207c1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1828.203250][T16379] RAX: ffffffffffffffda RBX: 00007ff4207c1c90 RCX: 00000000004598e9
12:52:11 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x33e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1828.211315][T16379] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000004
[ 1828.219331][T16379] RBP: 000000000075c070 R08: 0000000020004840 R09: 0000000000000000
[ 1828.227427][T16379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207c26d4
[ 1828.227434][T16379] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000005
[ 1828.259444][T16332] Mem-Info:
12:52:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1828.268129][T16332] active_anon:247364 inactive_anon:4949 isolated_anon:0
[ 1828.268129][T16332]  active_file:9324 inactive_file:40763 isolated_file:0
[ 1828.268129][T16332]  unevictable:2 dirty:429 writeback:0 unstable:0
[ 1828.268129][T16332]  slab_reclaimable:12372 slab_unreclaimable:116851
[ 1828.268129][T16332]  mapped:59121 shmem:5025 pagetables:6366 bounce:0
[ 1828.268129][T16332]  free:1010646 free_pcp:580 free_cma:0
[ 1828.332529][T16332] Node 0 active_anon:987324kB inactive_anon:19796kB active_file:37152kB inactive_file:162800kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:236484kB dirty:1712kB writeback:0kB shmem:20100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1828.429675][T16332] Node 1 active_anon:4376kB inactive_anon:0kB active_file:144kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1828.494290][T16332] Node 0 DMA free:11968kB min:220kB low:272kB high:324kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1828.537365][T16332] lowmem_reserve[]: 0 2549 2550 2550
[ 1828.542859][T16332] Node 0 DMA32 free:260504kB min:105832kB low:114880kB high:123928kB active_anon:980952kB inactive_anon:19796kB active_file:35904kB inactive_file:162732kB unevictable:8kB writepending:1704kB present:3129332kB managed:2613920kB mlocked:8kB kernel_stack:14144kB pagetables:25232kB bounce:0kB free_pcp:2284kB local_pcp:1404kB free_cma:0kB
[ 1828.588296][T16332] lowmem_reserve[]: 0 0 1 1
[ 1828.597869][T16332] Node 0 Normal free:8kB min:2064kB low:2068kB high:2072kB active_anon:80kB inactive_anon:0kB active_file:1248kB inactive_file:64kB unevictable:0kB writepending:8kB present:786432kB managed:1404kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1828.659095][T16332] lowmem_reserve[]: 0 0 0 0
[ 1828.663871][T16332] Node 1 Normal free:3769772kB min:53668kB low:67084kB high:80500kB active_anon:4376kB inactive_anon:0kB active_file:144kB inactive_file:252kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:96kB pagetables:232kB bounce:0kB free_pcp:564kB local_pcp:84kB free_cma:0kB
[ 1828.701352][T16332] lowmem_reserve[]: 0 0 0 0
[ 1828.712406][T16332] Node 0 DMA: 4*4kB (UM) 34*8kB (UM) 24*16kB (UM) 9*32kB (UM) 6*64kB (UM) 5*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 11968kB
[ 1828.745716][T16332] Node 0 DMA32: 3690*4kB (UME) 1888*8kB (UME) 624*16kB (UME) 1500*32kB (UME) 673*64kB (UME) 55*128kB (UM) 29*256kB (UM) 8*512kB (U) 6*1024kB (U) 32*2048kB (UM) 11*4096kB (M) = 266216kB
[ 1828.768881][T16332] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 1828.781693][T16332] Node 1 Normal: 319*4kB (UME) 315*8kB (UM) 297*16kB (UME) 155*32kB (UM) 74*64kB (UME) 35*128kB (UME) 16*256kB (UM) 13*512kB (UM) 13*1024kB (UME) 6*2048kB (UM) 906*4096kB (UM) = 3770052kB
[ 1828.805141][T16332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1828.829170][T16332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1828.840636][T16332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1828.852373][T16332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
12:52:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:12 executing program 3 (fault-call:8 fault-nth:2):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:12 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:12 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x33f)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:12 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1828.864191][T16332] 55144 total pagecache pages
[ 1828.869107][T16332] 0 pages in swap cache
[ 1828.873438][T16332] Swap cache stats: add 0, delete 0, find 0/0
[ 1828.886070][T16332] Free swap  = 0kB
[ 1828.889890][T16332] Total swap = 0kB
[ 1828.893728][T16332] 1965979 pages RAM
[ 1828.897587][T16332] 0 pages HighMem/MovableOnly
[ 1828.902313][T16332] 340625 pages reserved
[ 1828.906636][T16332] 0 pages cma reserved
12:52:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'neteme'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1828.998699][T16431] FAULT_INJECTION: forcing a failure.
[ 1828.998699][T16431] name failslab, interval 1, probability 0, space 0, times 0
[ 1829.056957][T16431] CPU: 1 PID: 16431 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1829.065063][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1829.065070][T16431] Call Trace:
[ 1829.065090][T16431]  dump_stack+0x172/0x1f0
[ 1829.065111][T16431]  should_fail.cold+0xa/0x15
[ 1829.065132][T16431]  ? fault_create_debugfs_attr+0x180/0x180
[ 1829.093749][T16431]  ? page_to_nid.part.0+0x20/0x20
[ 1829.098795][T16431]  ? ___might_sleep+0x163/0x280
[ 1829.103755][T16431]  __should_failslab+0x121/0x190
[ 1829.108728][T16431]  should_failslab+0x9/0x14
[ 1829.113303][T16431]  __kmalloc+0x2e0/0x770
[ 1829.117558][T16431]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1829.123293][T16431]  ? iov_iter_advance+0x295/0xf70
[ 1829.128420][T16431]  ? sock_kmalloc+0xc6/0x120
[ 1829.133250][T16431]  sock_kmalloc+0xc6/0x120
[ 1829.137682][T16431]  af_alg_get_rsgl+0xd9/0x6b0
[ 1829.142637][T16431]  aead_recvmsg+0x4b6/0x16a0
[ 1829.147252][T16431]  ? _copy_from_user+0x12c/0x1a0
[ 1829.152396][T16431]  ? aead_release+0x50/0x50
[ 1829.156908][T16431]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1829.156925][T16431]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1829.156936][T16431]  ? security_socket_recvmsg+0x95/0xc0
[ 1829.156954][T16431]  ? aead_release+0x50/0x50
[ 1829.178888][T16431]  sock_recvmsg+0xce/0x110
[ 1829.183305][T16431]  ? sockfs_setattr+0x170/0x170
[ 1829.188782][T16431]  ___sys_recvmsg+0x271/0x5a0
[ 1829.193475][T16431]  ? ___sys_sendmsg+0x920/0x920
[ 1829.198345][T16431]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1829.204621][T16431]  ? ksys_dup3+0x3e0/0x3e0
[ 1829.209045][T16431]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1829.215403][T16431]  ? debug_smp_processor_id+0x3c/0x214
[ 1829.220875][T16431]  ? __fget_light+0x1a9/0x230
[ 1829.225567][T16431]  ? __fdget+0x1b/0x20
[ 1829.230776][T16431]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1829.237107][T16431]  do_recvmmsg+0x27e/0x7a0
[ 1829.241527][T16431]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1829.247179][T16431]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1829.253427][T16431]  ? _copy_from_user+0x12c/0x1a0
[ 1829.258587][T16431]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1829.264929][T16431]  __sys_recvmmsg+0xe5/0x270
[ 1829.269528][T16431]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1829.274559][T16431]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1829.280733][T16431]  __x64_sys_recvmmsg+0xe6/0x140
[ 1829.285678][T16431]  do_syscall_64+0xfd/0x6a0
[ 1829.290360][T16431]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1829.296506][T16431] RIP: 0033:0x4598e9
[ 1829.300480][T16431] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1829.320256][T16431] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1829.329019][T16431] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1829.337005][T16431] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1829.345417][T16431] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
12:52:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1829.353676][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1829.361908][T16431] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x30, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:12 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r5 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r5, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r4, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000240))
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:12 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x340)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:12 executing program 3 (fault-call:8 fault-nth:3):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netemX'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:13 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1829.878549][T16487] FAULT_INJECTION: forcing a failure.
[ 1829.878549][T16487] name failslab, interval 1, probability 0, space 0, times 0
12:52:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1829.949639][T16487] CPU: 1 PID: 16487 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1829.958709][T16487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1829.972583][T16487] Call Trace:
[ 1829.975887][T16487]  dump_stack+0x172/0x1f0
[ 1829.980527][T16487]  should_fail.cold+0xa/0x15
[ 1829.985150][T16487]  ? fault_create_debugfs_attr+0x180/0x180
[ 1829.993926][T16487]  ? page_to_nid.part.0+0x20/0x20
[ 1829.998975][T16487]  ? ___might_sleep+0x163/0x280
[ 1830.004447][T16487]  __should_failslab+0x121/0x190
[ 1830.009789][T16487]  should_failslab+0x9/0x14
[ 1830.014301][T16487]  __kmalloc+0x2e0/0x770
[ 1830.018565][T16487]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1830.025166][T16487]  ? iov_iter_advance+0x295/0xf70
[ 1830.030627][T16487]  ? sock_kmalloc+0xc6/0x120
[ 1830.036284][T16487]  sock_kmalloc+0xc6/0x120
[ 1830.048178][T16487]  af_alg_get_rsgl+0xd9/0x6b0
[ 1830.052887][T16487]  aead_recvmsg+0x4b6/0x16a0
[ 1830.057481][T16487]  ? _copy_from_user+0x12c/0x1a0
[ 1830.063041][T16487]  ? aead_release+0x50/0x50
[ 1830.067741][T16487]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1830.073219][T16487]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1830.079564][T16487]  ? security_socket_recvmsg+0x95/0xc0
[ 1830.085263][T16487]  ? aead_release+0x50/0x50
[ 1830.089772][T16487]  sock_recvmsg+0xce/0x110
[ 1830.094394][T16487]  ? sockfs_setattr+0x170/0x170
12:52:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x7f8, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1830.099356][T16487]  ___sys_recvmsg+0x271/0x5a0
[ 1830.104045][T16487]  ? ___sys_sendmsg+0x920/0x920
[ 1830.109168][T16487]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1830.115434][T16487]  ? ksys_dup3+0x3e0/0x3e0
[ 1830.120042][T16487]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1830.126398][T16487]  ? debug_smp_processor_id+0x3c/0x214
[ 1830.131871][T16487]  ? __fget_light+0x1a9/0x230
[ 1830.136560][T16487]  ? __fdget+0x1b/0x20
[ 1830.140638][T16487]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1830.146912][T16487]  do_recvmmsg+0x27e/0x7a0
[ 1830.151433][T16487]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1830.156394][T16487]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1830.162807][T16487]  ? _copy_from_user+0x12c/0x1a0
[ 1830.167774][T16487]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1830.174031][T16487]  __sys_recvmmsg+0xe5/0x270
[ 1830.178643][T16487]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1830.184033][T16487]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1830.190163][T16487]  __x64_sys_recvmmsg+0xe6/0x140
[ 1830.195121][T16487]  do_syscall_64+0xfd/0x6a0
12:52:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x25d7, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1830.199644][T16487]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1830.205539][T16487] RIP: 0033:0x4598e9
[ 1830.209526][T16487] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1830.230061][T16487] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1830.238492][T16487] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
12:52:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1830.246983][T16487] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1830.255051][T16487] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1830.263043][T16487] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1830.271456][T16487] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:13 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r3, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc)
write(r1, &(0x7f0000000340), 0x41395527)
r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r5 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r5, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r4, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000240)={0x3ff, 0x0, [], {0x0, @reserved}})
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0))
pselect6(0x40, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x77359400}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:13 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x341)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:13 executing program 3 (fault-call:8 fault-nth:4):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x19'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:13 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1830.803556][T16548] FAULT_INJECTION: forcing a failure.
[ 1830.803556][T16548] name failslab, interval 1, probability 0, space 0, times 0
12:52:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x8100, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1830.863846][T16548] CPU: 1 PID: 16548 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1830.871775][T16548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1830.882014][T16548] Call Trace:
[ 1830.885319][T16548]  dump_stack+0x172/0x1f0
[ 1830.889755][T16548]  should_fail.cold+0xa/0x15
[ 1830.894388][T16548]  ? fault_create_debugfs_attr+0x180/0x180
[ 1830.900214][T16548]  ? page_to_nid.part.0+0x20/0x20
[ 1830.905441][T16548]  ? ___might_sleep+0x163/0x280
[ 1830.910500][T16548]  __should_failslab+0x121/0x190
[ 1830.915447][T16548]  should_failslab+0x9/0x14
[ 1830.920120][T16548]  __kmalloc+0x2e0/0x770
[ 1830.924557][T16548]  ? __kasan_check_write+0x14/0x20
[ 1830.929684][T16548]  ? sock_kmalloc+0xc6/0x120
[ 1830.934291][T16548]  sock_kmalloc+0xc6/0x120
[ 1830.938826][T16548]  af_alg_alloc_areq+0x24/0x1e0
[ 1830.943694][T16548]  aead_recvmsg+0x45d/0x16a0
[ 1830.948405][T16548]  ? aead_release+0x50/0x50
[ 1830.952922][T16548]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1830.958405][T16548]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
12:52:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xd725, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1830.964658][T16548]  ? security_socket_recvmsg+0x95/0xc0
[ 1830.970135][T16548]  ? aead_release+0x50/0x50
[ 1830.974677][T16548]  sock_recvmsg+0xce/0x110
[ 1830.979106][T16548]  ? sockfs_setattr+0x170/0x170
[ 1830.984152][T16548]  ___sys_recvmsg+0x271/0x5a0
[ 1830.989068][T16548]  ? ___sys_sendmsg+0x920/0x920
[ 1830.993939][T16548]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1831.001244][T16548]  ? ksys_dup3+0x3e0/0x3e0
[ 1831.005828][T16548]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1831.012100][T16548]  ? debug_smp_processor_id+0x3c/0x214
[ 1831.018622][T16548]  ? __fget_light+0x1a9/0x230
[ 1831.023399][T16548]  ? __fdget+0x1b/0x20
[ 1831.027564][T16548]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1831.034256][T16548]  do_recvmmsg+0x27e/0x7a0
[ 1831.038783][T16548]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1831.043651][T16548]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1831.050072][T16548]  ? _copy_from_user+0x12c/0x1a0
[ 1831.055025][T16548]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1831.061428][T16548]  __sys_recvmmsg+0xe5/0x270
[ 1831.066041][T16548]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1831.071263][T16548]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1831.077536][T16548]  __x64_sys_recvmmsg+0xe6/0x140
[ 1831.082484][T16548]  do_syscall_64+0xfd/0x6a0
[ 1831.087004][T16548]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1831.093117][T16548] RIP: 0033:0x4598e9
[ 1831.097016][T16548] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1831.116715][T16548] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1831.125489][T16548] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1831.133590][T16548] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1831.142047][T16548] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1831.150372][T16548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1831.158531][T16548] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:14 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r1, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x3}}, 0x26)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r5, 0x0, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_yield()
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r6=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0)
connect$rds(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x2}, 0x10)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:14 executing program 3 (fault-call:8 fault-nth:5):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:14 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x342)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:14 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf807, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x11000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1831.584377][T16606] __nla_validate_parse: 22 callbacks suppressed
[ 1831.584385][T16606] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1831.602432][T16606] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1831.671940][T16615] FAULT_INJECTION: forcing a failure.
[ 1831.671940][T16615] name failslab, interval 1, probability 0, space 0, times 0
[ 1831.702897][T16619] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1831.745652][T16619] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1831.762683][T16615] CPU: 0 PID: 16615 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1831.770616][T16615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1831.780678][T16615] Call Trace:
[ 1831.784134][T16615]  dump_stack+0x172/0x1f0
[ 1831.788500][T16615]  should_fail.cold+0xa/0x15
[ 1831.793287][T16615]  ? fault_create_debugfs_attr+0x180/0x180
[ 1831.799300][T16615]  ? page_to_nid.part.0+0x20/0x20
[ 1831.804341][T16615]  ? ___might_sleep+0x163/0x280
[ 1831.809246][T16615]  __should_failslab+0x121/0x190
[ 1831.814200][T16615]  should_failslab+0x9/0x14
[ 1831.819063][T16615]  __kmalloc+0x2e0/0x770
[ 1831.823494][T16615]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1831.829173][T16615]  ? __kasan_check_write+0x14/0x20
[ 1831.834289][T16615]  ? sock_kmalloc+0xc6/0x120
[ 1831.839186][T16615]  sock_kmalloc+0xc6/0x120
[ 1831.843618][T16615]  af_alg_alloc_areq+0x24/0x1e0
[ 1831.848481][T16615]  aead_recvmsg+0x45d/0x16a0
[ 1831.853111][T16615]  ? aead_release+0x50/0x50
[ 1831.857710][T16615]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1831.863178][T16615]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1831.869429][T16615]  ? security_socket_recvmsg+0x95/0xc0
[ 1831.874899][T16615]  ? aead_release+0x50/0x50
[ 1831.879412][T16615]  sock_recvmsg+0xce/0x110
[ 1831.883842][T16615]  ? sockfs_setattr+0x170/0x170
[ 1831.888704][T16615]  ___sys_recvmsg+0x271/0x5a0
[ 1831.893426][T16615]  ? ___sys_sendmsg+0x920/0x920
[ 1831.898290][T16615]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1831.904683][T16615]  ? ksys_dup3+0x3e0/0x3e0
[ 1831.909113][T16615]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1831.915453][T16615]  ? debug_smp_processor_id+0x3c/0x214
[ 1831.920929][T16615]  ? __fget_light+0x1a9/0x230
[ 1831.925604][T16615]  ? __fdget+0x1b/0x20
[ 1831.929672][T16615]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1831.936007][T16615]  do_recvmmsg+0x27e/0x7a0
[ 1831.940428][T16615]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1831.945283][T16615]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1831.951820][T16615]  ? _copy_from_user+0x12c/0x1a0
[ 1831.956864][T16615]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1831.963122][T16615]  __sys_recvmmsg+0xe5/0x270
[ 1831.967808][T16615]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1831.973414][T16615]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1831.979603][T16615]  __x64_sys_recvmmsg+0xe6/0x140
[ 1831.984555][T16615]  do_syscall_64+0xfd/0x6a0
[ 1831.989157][T16615]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1831.995068][T16615] RIP: 0033:0x4598e9
[ 1831.998975][T16615] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1832.018758][T16615] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1832.027242][T16615] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1832.035582][T16615] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
12:52:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xff'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1832.044120][T16615] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1832.052138][T16615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1832.060109][T16615] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1832.107672][T16631] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1832.128472][T16631] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:15 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x343)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x100100, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:15 executing program 3 (fault-call:8 fault-nth:6):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:15 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:15 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/D\x00', 0x0, 0x80000)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r5 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r5, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r4, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r7 = accept$alg(r6, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18}, 0x0)
write$binfmt_script(r7, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r7, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0)
r8 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r9 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r9, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r8, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r8, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r10=>r8})
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000080)=[r2, r2, r7, r10, r3, r11], 0x6)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7b, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r12=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r12+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1832.396496][T16644] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1832.413046][T16644] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1832.515419][T16662] FAULT_INJECTION: forcing a failure.
[ 1832.515419][T16662] name failslab, interval 1, probability 0, space 0, times 0
[ 1832.573676][T16662] CPU: 1 PID: 16662 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1832.581781][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1832.592045][T16662] Call Trace:
[ 1832.595345][T16662]  dump_stack+0x172/0x1f0
[ 1832.599692][T16662]  should_fail.cold+0xa/0x15
[ 1832.604319][T16662]  ? fault_create_debugfs_attr+0x180/0x180
[ 1832.610130][T16662]  ? page_to_nid.part.0+0x20/0x20
[ 1832.615258][T16662]  ? ___might_sleep+0x163/0x280
[ 1832.620124][T16662]  __should_failslab+0x121/0x190
[ 1832.625287][T16662]  should_failslab+0x9/0x14
[ 1832.629792][T16673] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1832.630009][T16662]  __kmalloc+0x2e0/0x770
[ 1832.644180][T16662]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1832.650088][T16662]  ? __kasan_check_write+0x14/0x20
[ 1832.655472][T16662]  ? sock_kmalloc+0xc6/0x120
[ 1832.660252][T16662]  sock_kmalloc+0xc6/0x120
[ 1832.664680][T16662]  af_alg_alloc_areq+0x24/0x1e0
12:52:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1832.669893][T16662]  aead_recvmsg+0x45d/0x16a0
[ 1832.674060][T16673] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1832.674492][T16662]  ? aead_release+0x50/0x50
[ 1832.688253][T16662]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1832.693725][T16662]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1832.700091][T16662]  ? security_socket_recvmsg+0x95/0xc0
[ 1832.705543][T16662]  ? aead_release+0x50/0x50
[ 1832.705558][T16662]  sock_recvmsg+0xce/0x110
[ 1832.705570][T16662]  ? sockfs_setattr+0x170/0x170
[ 1832.705583][T16662]  ___sys_recvmsg+0x271/0x5a0
[ 1832.705601][T16662]  ? ___sys_sendmsg+0x920/0x920
[ 1832.733157][T16662]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1832.739416][T16662]  ? ksys_dup3+0x3e0/0x3e0
[ 1832.743843][T16662]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1832.750180][T16662]  ? debug_smp_processor_id+0x3c/0x214
[ 1832.755647][T16662]  ? __fget_light+0x1a9/0x230
[ 1832.760331][T16662]  ? __fdget+0x1b/0x20
[ 1832.764604][T16662]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
12:52:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1832.770950][T16662]  do_recvmmsg+0x27e/0x7a0
[ 1832.775568][T16662]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1832.780530][T16662]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1832.786784][T16662]  ? _copy_from_user+0x12c/0x1a0
[ 1832.791740][T16662]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1832.798693][T16662]  __sys_recvmmsg+0xe5/0x270
[ 1832.803301][T16662]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1832.808463][T16662]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1832.814544][T16662]  __x64_sys_recvmmsg+0xe6/0x140
[ 1832.819588][T16662]  do_syscall_64+0xfd/0x6a0
12:52:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1832.824122][T16662]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1832.830024][T16662] RIP: 0033:0x4598e9
[ 1832.833916][T16662] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1832.833922][T16662] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1832.833934][T16662] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
12:52:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1832.833941][T16662] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1832.833954][T16662] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1832.886372][T16662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1832.894427][T16662] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:16 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x344)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:16 executing program 3 (fault-call:8 fault-nth:7):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:16 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:16 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x0)
r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xa2, 0x2b31f7f98feca035)
ioctl$VT_DISALLOCATE(r3, 0x5608)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1833.420284][T16720] FAULT_INJECTION: forcing a failure.
[ 1833.420284][T16720] name failslab, interval 1, probability 0, space 0, times 0
12:52:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x7f80000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:16 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1833.503725][T16720] CPU: 1 PID: 16720 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1833.511795][T16720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1833.521849][T16720] Call Trace:
[ 1833.525141][T16720]  dump_stack+0x172/0x1f0
[ 1833.525160][T16720]  should_fail.cold+0xa/0x15
[ 1833.525177][T16720]  ? fault_create_debugfs_attr+0x180/0x180
[ 1833.525195][T16720]  ? page_to_nid.part.0+0x20/0x20
[ 1833.545238][T16720]  ? ___might_sleep+0x163/0x280
[ 1833.550321][T16720]  __should_failslab+0x121/0x190
[ 1833.555270][T16720]  should_failslab+0x9/0x14
[ 1833.555284][T16720]  __kmalloc+0x2e0/0x770
[ 1833.555303][T16720]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1833.569382][T16720]  ? __kasan_check_write+0x14/0x20
[ 1833.575062][T16720]  ? sock_kmalloc+0xc6/0x120
[ 1833.579681][T16720]  sock_kmalloc+0xc6/0x120
[ 1833.579700][T16720]  af_alg_alloc_areq+0x24/0x1e0
[ 1833.588943][T16720]  aead_recvmsg+0x45d/0x16a0
[ 1833.593547][T16720]  ? aead_release+0x50/0x50
[ 1833.598057][T16720]  ? apparmor_socket_recvmsg+0x2a/0x30
12:52:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x30000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1833.603659][T16720]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1833.609905][T16720]  ? security_socket_recvmsg+0x95/0xc0
[ 1833.615456][T16720]  ? aead_release+0x50/0x50
[ 1833.619969][T16720]  sock_recvmsg+0xce/0x110
[ 1833.624400][T16720]  ? sockfs_setattr+0x170/0x170
[ 1833.629261][T16720]  ___sys_recvmsg+0x271/0x5a0
[ 1833.633953][T16720]  ? ___sys_sendmsg+0x920/0x920
[ 1833.638813][T16720]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1833.645069][T16720]  ? ksys_dup3+0x3e0/0x3e0
[ 1833.649506][T16720]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1833.655751][T16720]  ? debug_smp_processor_id+0x3c/0x214
[ 1833.661222][T16720]  ? __fget_light+0x1a9/0x230
[ 1833.666023][T16720]  ? __fdget+0x1b/0x20
[ 1833.670108][T16720]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1833.676460][T16720]  do_recvmmsg+0x27e/0x7a0
[ 1833.680989][T16720]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1833.685880][T16720]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1833.692308][T16720]  ? _copy_from_user+0x12c/0x1a0
[ 1833.697272][T16720]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
12:52:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3f000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1833.704399][T16720]  __sys_recvmmsg+0xe5/0x270
[ 1833.709047][T16720]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1833.714113][T16720]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1833.720196][T16720]  __x64_sys_recvmmsg+0xe6/0x140
[ 1833.725251][T16720]  do_syscall_64+0xfd/0x6a0
[ 1833.729894][T16720]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1833.735908][T16720] RIP: 0033:0x4598e9
[ 1833.735921][T16720] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1833.735928][T16720] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1833.735946][T16720] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1833.759675][T16720] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1833.759683][T16720] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1833.759691][T16720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
12:52:16 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x345)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1833.759699][T16720] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x40000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:17 executing program 3 (fault-call:8 fault-nth:8):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:17 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x81000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:17 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={<r4=>0x0, 0x80000})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={<r5=>0x0, 0x0, 0xe401})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={r4, r5})
r6 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r7 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r7, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r6, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x2)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:17 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x346)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1834.312490][T16787] FAULT_INJECTION: forcing a failure.
[ 1834.312490][T16787] name failslab, interval 1, probability 0, space 0, times 0
[ 1834.364049][T16787] CPU: 0 PID: 16787 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1834.372251][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1834.382554][T16787] Call Trace:
[ 1834.385855][T16787]  dump_stack+0x172/0x1f0
[ 1834.390199][T16787]  should_fail.cold+0xa/0x15
[ 1834.394815][T16787]  ? fault_create_debugfs_attr+0x180/0x180
[ 1834.400820][T16787]  ? page_to_nid.part.0+0x20/0x20
[ 1834.405933][T16787]  ? ___might_sleep+0x163/0x280
[ 1834.411226][T16787]  __should_failslab+0x121/0x190
[ 1834.416261][T16787]  should_failslab+0x9/0x14
[ 1834.420917][T16787]  __kmalloc+0x2e0/0x770
[ 1834.425175][T16787]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1834.430578][T16787]  ? __kasan_check_write+0x14/0x20
[ 1834.435893][T16787]  ? sock_kmalloc+0xc6/0x120
[ 1834.440593][T16787]  sock_kmalloc+0xc6/0x120
[ 1834.445025][T16787]  af_alg_alloc_areq+0x24/0x1e0
[ 1834.449975][T16787]  aead_recvmsg+0x45d/0x16a0
[ 1834.455302][T16787]  ? aead_release+0x50/0x50
12:52:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:17 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1834.460010][T16787]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1834.465580][T16787]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1834.471826][T16787]  ? security_socket_recvmsg+0x95/0xc0
[ 1834.477393][T16787]  ? aead_release+0x50/0x50
[ 1834.481900][T16787]  sock_recvmsg+0xce/0x110
[ 1834.486325][T16787]  ? sockfs_setattr+0x170/0x170
[ 1834.491183][T16787]  ___sys_recvmsg+0x271/0x5a0
[ 1834.496057][T16787]  ? ___sys_sendmsg+0x920/0x920
[ 1834.501222][T16787]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1834.508199][T16787]  ? ksys_dup3+0x3e0/0x3e0
[ 1834.512716][T16787]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1834.518955][T16787]  ? debug_smp_processor_id+0x3c/0x214
[ 1834.525575][T16787]  ? __fget_light+0x1a9/0x230
[ 1834.530348][T16787]  ? __fdget+0x1b/0x20
[ 1834.534512][T16787]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1834.540788][T16787]  do_recvmmsg+0x27e/0x7a0
[ 1834.545219][T16787]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1834.550083][T16787]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1834.556332][T16787]  ? _copy_from_user+0x12c/0x1a0
[ 1834.561376][T16787]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1834.567726][T16787]  __sys_recvmmsg+0xe5/0x270
[ 1834.572883][T16787]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1834.577927][T16787]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1834.584017][T16787]  __x64_sys_recvmmsg+0xe6/0x140
[ 1834.588983][T16787]  do_syscall_64+0xfd/0x6a0
[ 1834.593493][T16787]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1834.599477][T16787] RIP: 0033:0x4598e9
12:52:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1834.603905][T16787] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1834.623515][T16787] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1834.631930][T16787] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1834.639995][T16787] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1834.648058][T16787] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1834.656186][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1834.656193][T16787] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:17 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xd7250000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:18 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:18 executing program 3 (fault-call:8 fault-nth:9):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:18 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x347)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:18 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:18 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x8900, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', 0x1a)

12:52:18 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:18 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1835.186404][T16847] FAULT_INJECTION: forcing a failure.
[ 1835.186404][T16847] name failslab, interval 1, probability 0, space 0, times 0
[ 1835.255489][T16847] CPU: 0 PID: 16847 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1835.263425][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1835.273615][T16847] Call Trace:
[ 1835.276923][T16847]  dump_stack+0x172/0x1f0
[ 1835.281273][T16847]  should_fail.cold+0xa/0x15
[ 1835.286060][T16847]  ? fault_create_debugfs_attr+0x180/0x180
[ 1835.291976][T16847]  ? page_to_nid.part.0+0x20/0x20
[ 1835.297108][T16847]  ? ___might_sleep+0x163/0x280
[ 1835.302167][T16847]  __should_failslab+0x121/0x190
[ 1835.307433][T16847]  should_failslab+0x9/0x14
[ 1835.312146][T16847]  __kmalloc+0x2e0/0x770
[ 1835.316408][T16847]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1835.321813][T16847]  ? __kasan_check_write+0x14/0x20
[ 1835.328151][T16847]  ? sock_kmalloc+0xc6/0x120
[ 1835.333118][T16847]  sock_kmalloc+0xc6/0x120
[ 1835.337548][T16847]  af_alg_alloc_areq+0x24/0x1e0
[ 1835.342510][T16847]  aead_recvmsg+0x45d/0x16a0
[ 1835.347299][T16847]  ? aead_release+0x50/0x50
[ 1835.351919][T16847]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1835.357503][T16847]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1835.364117][T16847]  ? security_socket_recvmsg+0x95/0xc0
[ 1835.369788][T16847]  ? aead_release+0x50/0x50
[ 1835.374392][T16847]  sock_recvmsg+0xce/0x110
[ 1835.378845][T16847]  ? sockfs_setattr+0x170/0x170
[ 1835.383794][T16847]  ___sys_recvmsg+0x271/0x5a0
[ 1835.388679][T16847]  ? ___sys_sendmsg+0x920/0x920
[ 1835.393722][T16847]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1835.399978][T16847]  ? ksys_dup3+0x3e0/0x3e0
[ 1835.404410][T16847]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1835.410663][T16847]  ? debug_smp_processor_id+0x3c/0x214
[ 1835.416261][T16847]  ? __fget_light+0x1a9/0x230
[ 1835.421313][T16847]  ? __fdget+0x1b/0x20
[ 1835.425418][T16847]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1835.431760][T16847]  do_recvmmsg+0x27e/0x7a0
[ 1835.436213][T16847]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1835.441619][T16847]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1835.448091][T16847]  ? _copy_from_user+0x12c/0x1a0
12:52:18 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1835.453140][T16847]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1835.459592][T16847]  __sys_recvmmsg+0xe5/0x270
[ 1835.464193][T16847]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1835.469229][T16847]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1835.475308][T16847]  __x64_sys_recvmmsg+0xe6/0x140
[ 1835.480290][T16847]  do_syscall_64+0xfd/0x6a0
[ 1835.484799][T16847]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1835.491036][T16847] RIP: 0033:0x4598e9
[ 1835.494960][T16847] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1835.514757][T16847] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1835.514771][T16847] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1835.514777][T16847] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1835.514784][T16847] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
12:52:18 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:18 executing program 2:
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xff01)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1835.514791][T16847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1835.514798][T16847] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:19 executing program 3 (fault-call:8 fault-nth:10):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:19 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r4 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r4, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r3, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x2, {0x7, 0x1f, 0x80, 0x200020, 0x1164, 0xf2bc}}, 0x50)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r5=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:19 executing program 2:
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xff01)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:19 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x348)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:19 executing program 2:
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xff01)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1836.025226][T16893] FAULT_INJECTION: forcing a failure.
[ 1836.025226][T16893] name failslab, interval 1, probability 0, space 0, times 0
[ 1836.123984][T16893] CPU: 0 PID: 16893 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1836.132005][T16893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1836.142535][T16893] Call Trace:
[ 1836.145836][T16893]  dump_stack+0x172/0x1f0
[ 1836.150191][T16893]  should_fail.cold+0xa/0x15
[ 1836.154886][T16893]  ? fault_create_debugfs_attr+0x180/0x180
[ 1836.160703][T16893]  ? page_to_nid.part.0+0x20/0x20
[ 1836.165740][T16893]  ? ___might_sleep+0x163/0x280
[ 1836.170661][T16893]  __should_failslab+0x121/0x190
[ 1836.175610][T16893]  should_failslab+0x9/0x14
[ 1836.180122][T16893]  __kmalloc+0x2e0/0x770
[ 1836.184379][T16893]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1836.189752][T16893]  ? __kasan_check_write+0x14/0x20
[ 1836.195155][T16893]  ? sock_kmalloc+0xc6/0x120
[ 1836.199759][T16893]  sock_kmalloc+0xc6/0x120
[ 1836.204803][T16893]  af_alg_alloc_areq+0x24/0x1e0
[ 1836.209784][T16893]  aead_recvmsg+0x45d/0x16a0
[ 1836.214407][T16893]  ? aead_release+0x50/0x50
[ 1836.218928][T16893]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1836.224483][T16893]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1836.230737][T16893]  ? security_socket_recvmsg+0x95/0xc0
[ 1836.236295][T16893]  ? aead_release+0x50/0x50
[ 1836.241081][T16893]  sock_recvmsg+0xce/0x110
[ 1836.245596][T16893]  ? sockfs_setattr+0x170/0x170
[ 1836.250452][T16893]  ___sys_recvmsg+0x271/0x5a0
[ 1836.255336][T16893]  ? ___sys_sendmsg+0x920/0x920
[ 1836.260196][T16893]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1836.266857][T16893]  ? ksys_dup3+0x3e0/0x3e0
[ 1836.271509][T16893]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1836.277768][T16893]  ? debug_smp_processor_id+0x3c/0x214
[ 1836.283253][T16893]  ? __fget_light+0x1a9/0x230
[ 1836.288136][T16893]  ? __fdget+0x1b/0x20
[ 1836.292297][T16893]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1836.298649][T16893]  do_recvmmsg+0x27e/0x7a0
[ 1836.303957][T16893]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1836.308820][T16893]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1836.315074][T16893]  ? _copy_from_user+0x12c/0x1a0
[ 1836.320037][T16893]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1836.329003][T16893]  __sys_recvmmsg+0xe5/0x270
[ 1836.333693][T16893]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1836.338753][T16893]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1836.345050][T16893]  __x64_sys_recvmmsg+0xe6/0x140
[ 1836.355228][T16893]  do_syscall_64+0xfd/0x6a0
[ 1836.359753][T16893]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1836.365931][T16893] RIP: 0033:0x4598e9
[ 1836.369834][T16893] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1836.389736][T16893] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1836.398349][T16893] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1836.398356][T16893] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1836.398362][T16893] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
12:52:19 executing program 2:
r0 = memfd_create(0x0, 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x10010000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1836.398369][T16893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1836.398375][T16893] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:19 executing program 3 (fault-call:8 fault-nth:11):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:19 executing program 2:
r0 = memfd_create(0x0, 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:19 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x349)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x40030000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:19 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3f00000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x9c92, 0x0, 0x200000000000000, 0x0, @perf_bp={&(0x7f0000000040), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf0ffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1836.802738][T16933] __nla_validate_parse: 26 callbacks suppressed
[ 1836.802747][T16933] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1836.840574][T16933] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:20 executing program 2:
r0 = memfd_create(0x0, 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1836.909055][T16953] FAULT_INJECTION: forcing a failure.
[ 1836.909055][T16953] name failslab, interval 1, probability 0, space 0, times 0
12:52:20 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1837.014549][T16966] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1837.037600][T16966] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1837.063041][T16953] CPU: 0 PID: 16953 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1837.071150][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1837.081364][T16953] Call Trace:
[ 1837.084713][T16953]  dump_stack+0x172/0x1f0
[ 1837.090191][T16953]  should_fail.cold+0xa/0x15
[ 1837.094796][T16953]  ? fault_create_debugfs_attr+0x180/0x180
[ 1837.100615][T16953]  ? page_to_nid.part.0+0x20/0x20
[ 1837.105653][T16953]  ? ___might_sleep+0x163/0x280
[ 1837.110515][T16953]  __should_failslab+0x121/0x190
[ 1837.115468][T16953]  should_failslab+0x9/0x14
[ 1837.119979][T16953]  __kmalloc+0x2e0/0x770
[ 1837.124317][T16953]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1837.129780][T16953]  ? __kasan_check_write+0x14/0x20
[ 1837.135068][T16953]  ? sock_kmalloc+0xc6/0x120
[ 1837.139792][T16953]  sock_kmalloc+0xc6/0x120
[ 1837.144228][T16953]  af_alg_alloc_areq+0x24/0x1e0
[ 1837.149081][T16953]  aead_recvmsg+0x45d/0x16a0
[ 1837.153778][T16953]  ? aead_release+0x50/0x50
[ 1837.153791][T16953]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1837.153806][T16953]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1837.153818][T16953]  ? security_socket_recvmsg+0x95/0xc0
[ 1837.153834][T16953]  ? aead_release+0x50/0x50
[ 1837.180205][T16953]  sock_recvmsg+0xce/0x110
[ 1837.184631][T16953]  ? sockfs_setattr+0x170/0x170
[ 1837.189583][T16953]  ___sys_recvmsg+0x271/0x5a0
[ 1837.194285][T16953]  ? ___sys_sendmsg+0x920/0x920
[ 1837.199153][T16953]  ? ksys_dup3+0x3e0/0x3e0
[ 1837.203687][T16953]  ? preempt_schedule_irq+0xf3/0x160
[ 1837.208981][T16953]  ? __fget_light+0x1a9/0x230
12:52:20 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1837.213655][T16953]  ? __fdget+0x1b/0x20
[ 1837.213671][T16953]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1837.213687][T16953]  do_recvmmsg+0x27e/0x7a0
[ 1837.213704][T16953]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1837.213722][T16953]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1837.213734][T16953]  ? _copy_from_user+0x12c/0x1a0
[ 1837.213755][T16953]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1837.250995][T16953]  __sys_recvmmsg+0xe5/0x270
[ 1837.255605][T16953]  ? __ia32_sys_recvmsg+0xb0/0xb0
12:52:20 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1837.260665][T16953]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1837.266839][T16953]  __x64_sys_recvmmsg+0xe6/0x140
[ 1837.273182][T16953]  do_syscall_64+0xfd/0x6a0
[ 1837.277703][T16953]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1837.283604][T16953] RIP: 0033:0x4598e9
[ 1837.287724][T16953] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1837.307975][T16953] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1837.316610][T16953] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1837.324582][T16953] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1837.324590][T16953] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1837.324596][T16953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1837.324603][T16953] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:20 executing program 3 (fault-call:8 fault-nth:12):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x100000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:20 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:20 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x34a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:20 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000040)={{0xc3, @remote, 0x4e22, 0x3, 'fo\x00', 0x8, 0x1, 0x7d}, {@empty, 0x4e23, 0x1, 0x9, 0x80000001, 0x6}}, 0x44)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000340)=[@exit_looper], 0x22, 0x0, &(0x7f0000000380)="daf14e09c8e30c06e1e832b4a52bb980264a1b35bc55a0e04a18716cedd80ca98076"})
r6 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r6, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r5, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000300))
r7 = openat(r5, &(0x7f0000000100)='./file0\x00', 0xa26400, 0x40)
ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000240)=""/129)

[ 1837.692872][T16989] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1837.711013][T16999] IPVS: set_ctl: invalid protocol: 195 172.20.20.187:20002
12:52:20 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x200000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1837.736951][T16989] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1837.813883][T16998] FAULT_INJECTION: forcing a failure.
[ 1837.813883][T16998] name failslab, interval 1, probability 0, space 0, times 0
12:52:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x300000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1837.892838][T16998] CPU: 1 PID: 16998 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1837.900957][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1837.911131][T16998] Call Trace:
[ 1837.914556][T16998]  dump_stack+0x172/0x1f0
[ 1837.918937][T16998]  should_fail.cold+0xa/0x15
[ 1837.923723][T16998]  ? fault_create_debugfs_attr+0x180/0x180
[ 1837.929545][T16998]  ? page_to_nid.part.0+0x20/0x20
[ 1837.934757][T16998]  ? ___might_sleep+0x163/0x280
[ 1837.939621][T16998]  __should_failslab+0x121/0x190
[ 1837.944640][T16998]  should_failslab+0x9/0x14
[ 1837.944651][T16998]  __kmalloc+0x2e0/0x770
[ 1837.944667][T16998]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1837.944678][T16998]  ? __kasan_check_write+0x14/0x20
[ 1837.944690][T16998]  ? sock_kmalloc+0xc6/0x120
[ 1837.944705][T16998]  sock_kmalloc+0xc6/0x120
[ 1837.944720][T16998]  af_alg_alloc_areq+0x24/0x1e0
[ 1837.944734][T16998]  aead_recvmsg+0x45d/0x16a0
[ 1837.944763][T16998]  ? aead_release+0x50/0x50
[ 1837.988534][T16998]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1837.994366][T16998]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1838.001046][T16998]  ? security_socket_recvmsg+0x95/0xc0
[ 1838.006775][T16998]  ? aead_release+0x50/0x50
[ 1838.011476][T16998]  sock_recvmsg+0xce/0x110
[ 1838.016619][T16998]  ? sockfs_setattr+0x170/0x170
[ 1838.021854][T16998]  ___sys_recvmsg+0x271/0x5a0
[ 1838.026748][T16998]  ? ___sys_sendmsg+0x920/0x920
[ 1838.033039][T16998]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1838.039509][T16998]  ? ksys_dup3+0x3e0/0x3e0
[ 1838.043943][T16998]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1838.050200][T16998]  ? debug_smp_processor_id+0x3c/0x214
[ 1838.055939][T16998]  ? __fget_light+0x1a9/0x230
[ 1838.060815][T16998]  ? __fdget+0x1b/0x20
[ 1838.064891][T16998]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1838.071249][T16998]  do_recvmmsg+0x27e/0x7a0
[ 1838.076531][T16998]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1838.081400][T16998]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1838.087660][T16998]  ? _copy_from_user+0x12c/0x1a0
[ 1838.093683][T16998]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1838.100023][T16998]  __sys_recvmmsg+0xe5/0x270
[ 1838.104631][T16998]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1838.109847][T16998]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1838.115928][T16998]  __x64_sys_recvmmsg+0xe6/0x140
[ 1838.120887][T16998]  do_syscall_64+0xfd/0x6a0
[ 1838.125424][T16998]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1838.131413][T16998] RIP: 0033:0x4598e9
[ 1838.135450][T16998] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1838.155171][T16998] RSP: 002b:00007ff420803c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1838.163704][T16998] RAX: ffffffffffffffda RBX: 00007ff420803c90 RCX: 00000000004598e9
[ 1838.171856][T16998] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1838.180193][T16998] RBP: 000000000075bf20 R08: 0000000020004840 R09: 0000000000000000
12:52:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x7f8000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:21 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1838.188178][T16998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4208046d4
[ 1838.196268][T16998] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:21 executing program 3 (fault-call:8 fault-nth:13):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:21 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3000000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:21 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x34b)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1838.480844][T16999] IPVS: set_ctl: invalid protocol: 195 172.20.20.187:20002
[ 1838.535917][T17047] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1838.560182][T17047] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:21 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000480)={0x6, 0x0, 0x2080, {0xd000, 0x202000, 0x3}, [], "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", "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"})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3f00000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1838.639936][T17060] FAULT_INJECTION: forcing a failure.
[ 1838.639936][T17060] name failslab, interval 1, probability 0, space 0, times 0
[ 1838.720764][T17068] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1838.777613][T17068] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1838.787791][T17060] CPU: 1 PID: 17060 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1838.795985][T17060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1838.806166][T17060] Call Trace:
[ 1838.809474][T17060]  dump_stack+0x172/0x1f0
[ 1838.813969][T17060]  should_fail.cold+0xa/0x15
[ 1838.819575][T17060]  ? fault_create_debugfs_attr+0x180/0x180
[ 1838.825433][T17060]  ? page_to_nid.part.0+0x20/0x20
[ 1838.830567][T17060]  ? ___might_sleep+0x163/0x280
[ 1838.835538][T17060]  __should_failslab+0x121/0x190
[ 1838.840814][T17060]  should_failslab+0x9/0x14
[ 1838.845508][T17060]  __kmalloc+0x2e0/0x770
[ 1838.849765][T17060]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1838.855237][T17060]  ? __kasan_check_write+0x14/0x20
[ 1838.860364][T17060]  ? sock_kmalloc+0xc6/0x120
[ 1838.864966][T17060]  sock_kmalloc+0xc6/0x120
[ 1838.869481][T17060]  af_alg_alloc_areq+0x24/0x1e0
[ 1838.874343][T17060]  aead_recvmsg+0x45d/0x16a0
[ 1838.878964][T17060]  ? aead_release+0x50/0x50
[ 1838.883483][T17060]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1838.888955][T17060]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1838.895405][T17060]  ? security_socket_recvmsg+0x95/0xc0
[ 1838.900882][T17060]  ? aead_release+0x50/0x50
[ 1838.905886][T17060]  sock_recvmsg+0xce/0x110
[ 1838.910351][T17060]  ? sockfs_setattr+0x170/0x170
[ 1838.915310][T17060]  ___sys_recvmsg+0x271/0x5a0
[ 1838.920790][T17060]  ? ___sys_sendmsg+0x920/0x920
[ 1838.925663][T17060]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1838.931932][T17060]  ? ksys_dup3+0x3e0/0x3e0
[ 1838.936407][T17060]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1838.942768][T17060]  ? debug_smp_processor_id+0x3c/0x214
[ 1838.948252][T17060]  ? __fget_light+0x1a9/0x230
[ 1838.952945][T17060]  ? __fdget+0x1b/0x20
[ 1838.957033][T17060]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1838.963302][T17060]  do_recvmmsg+0x27e/0x7a0
[ 1838.967740][T17060]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1838.972826][T17060]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1838.979175][T17060]  ? _copy_from_user+0x12c/0x1a0
[ 1838.984142][T17060]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1838.990402][T17060]  __sys_recvmmsg+0xe5/0x270
[ 1838.995121][T17060]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1839.000284][T17060]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1839.006885][T17060]  __x64_sys_recvmmsg+0xe6/0x140
[ 1839.012297][T17060]  do_syscall_64+0xfd/0x6a0
[ 1839.017637][T17060]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1839.023744][T17060] RIP: 0033:0x4598e9
[ 1839.027653][T17060] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1839.047437][T17060] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1839.056036][T17060] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1839.064281][T17060] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
12:52:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x4000000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x8100000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x9effffff00000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xd725000000000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1839.072268][T17060] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1839.080419][T17060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1839.088397][T17060] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:22 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf0ffffff00000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:22 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '*,'}], 0xa, "9d22ef4ffcddf9d0a08fd680ac33af6d2c85e0b05c575d50a0b0c49a860e507c521fe654fa8256cbac32167cd6137e52e995fcad5dbe97db0c52424fe300fcfe0621946e3b0414005f901a00059f412a586b9f9aa5267050906f201d794ab65b20c9eaffdcf43ef5ff27ef6d866907048bf4bdcc09bfec0f0c0414ae164c35af927e2ddb20e1eed309281d035edf771a5bd4c26a306efad286be3f53f07714461f34a2ba6fcf116c63e6f242a4db3dd48ff1eb32aea5dbe955b4a9e207c945bd"}, 0xce)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
tkill(0xffffffffffffffff, 0x31)
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0x1, 0x66, 0x1, 0x8, 0x80000000, "81708b442ac16fa306c4dacee988fad2ef737a", 0x1, 0x34})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:22 executing program 3 (fault-call:8 fault-nth:14):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:22 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x34c)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xffffff7f00000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1839.470113][T17115] FAULT_INJECTION: forcing a failure.
[ 1839.470113][T17115] name failslab, interval 1, probability 0, space 0, times 0
[ 1839.557480][T17115] CPU: 1 PID: 17115 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1839.565418][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1839.575474][T17115] Call Trace:
[ 1839.578804][T17115]  dump_stack+0x172/0x1f0
[ 1839.583177][T17115]  should_fail.cold+0xa/0x15
[ 1839.588022][T17115]  ? fault_create_debugfs_attr+0x180/0x180
[ 1839.593996][T17115]  ? page_to_nid.part.0+0x20/0x20
[ 1839.599123][T17115]  ? ___might_sleep+0x163/0x280
[ 1839.604281][T17115]  __should_failslab+0x121/0x190
[ 1839.609320][T17115]  should_failslab+0x9/0x14
[ 1839.613863][T17115]  __kmalloc+0x2e0/0x770
[ 1839.618122][T17115]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1839.623515][T17115]  ? __kasan_check_write+0x14/0x20
[ 1839.628633][T17115]  ? sock_kmalloc+0xc6/0x120
[ 1839.633237][T17115]  sock_kmalloc+0xc6/0x120
[ 1839.637684][T17115]  af_alg_alloc_areq+0x24/0x1e0
[ 1839.642646][T17115]  aead_recvmsg+0x45d/0x16a0
[ 1839.647266][T17115]  ? aead_release+0x50/0x50
[ 1839.651870][T17115]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1839.657432][T17115]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1839.663815][T17115]  ? security_socket_recvmsg+0x95/0xc0
[ 1839.669290][T17115]  ? aead_release+0x50/0x50
[ 1839.673833][T17115]  sock_recvmsg+0xce/0x110
[ 1839.678267][T17115]  ? sockfs_setattr+0x170/0x170
[ 1839.683231][T17115]  ___sys_recvmsg+0x271/0x5a0
[ 1839.687930][T17115]  ? ___sys_sendmsg+0x920/0x920
[ 1839.692891][T17115]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1839.699149][T17115]  ? ksys_dup3+0x3e0/0x3e0
[ 1839.703752][T17115]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1839.710005][T17115]  ? debug_smp_processor_id+0x3c/0x214
[ 1839.715607][T17115]  ? __fget_light+0x1a9/0x230
[ 1839.720411][T17115]  ? __fdget+0x1b/0x20
[ 1839.724502][T17115]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1839.730842][T17115]  do_recvmmsg+0x27e/0x7a0
[ 1839.735275][T17115]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1839.740144][T17115]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1839.747278][T17115]  ? _copy_from_user+0x12c/0x1a0
[ 1839.752247][T17115]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1839.758747][T17115]  __sys_recvmmsg+0xe5/0x270
[ 1839.763367][T17115]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1839.768493][T17115]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1839.774576][T17115]  __x64_sys_recvmmsg+0xe6/0x140
[ 1839.779530][T17115]  do_syscall_64+0xfd/0x6a0
[ 1839.784048][T17115]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1839.789942][T17115] RIP: 0033:0x4598e9
[ 1839.793841][T17115] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1839.813884][T17115] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1839.822309][T17115] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1839.830375][T17115] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1839.838442][T17115] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1839.846430][T17115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
12:52:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xffffffff00000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xfffffffffffff000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1839.854407][T17115] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:23 executing program 3 (fault-call:8 fault-nth:15):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:23 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x34d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:23 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000), 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:23 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r5 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r5, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
r6 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r7 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r7, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r6, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
getpeername$tipc(r6, &(0x7f0000000400), &(0x7f00000003c0)=0xffffffffffffff9e)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000100)={0x4c, 0x38, &(0x7f0000000040)="6a999d1ddada1912b2f7acdf1f11100221984f0fb6ab55bbf2839c2acd6eb610827569e5dde6716ce4f1dffc7b734f72c5fa8cc2e6ee9c4b308a78a49893405221c8719657f4dc4f2018b870d650039893e4c4a00d22a1566ae68bc12f454561823c32a2e2f2cea587ff41b2a8b51913c5136e94db9798980d36", {0x3, 0x80000001, 0x43564548, 0x6, 0x7, 0x2, 0x9ddb6348c33e6e50, 0x8000000000000}})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1840.338044][T17170] FAULT_INJECTION: forcing a failure.
[ 1840.338044][T17170] name failslab, interval 1, probability 0, space 0, times 0
[ 1840.420666][T17170] CPU: 1 PID: 17170 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1840.428608][T17170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1840.438780][T17170] Call Trace:
[ 1840.442082][T17170]  dump_stack+0x172/0x1f0
[ 1840.446516][T17170]  should_fail.cold+0xa/0x15
[ 1840.451124][T17170]  ? fault_create_debugfs_attr+0x180/0x180
[ 1840.456943][T17170]  ? page_to_nid.part.0+0x20/0x20
[ 1840.462124][T17170]  ? ___might_sleep+0x163/0x280
[ 1840.466992][T17170]  __should_failslab+0x121/0x190
[ 1840.471940][T17170]  should_failslab+0x9/0x14
[ 1840.476491][T17170]  __kmalloc+0x2e0/0x770
[ 1840.480750][T17170]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1840.486481][T17170]  ? iov_iter_advance+0x295/0xf70
[ 1840.491518][T17170]  ? sock_kmalloc+0xc6/0x120
[ 1840.496121][T17170]  sock_kmalloc+0xc6/0x120
[ 1840.500545][T17170]  af_alg_get_rsgl+0xd9/0x6b0
[ 1840.505232][T17170]  aead_recvmsg+0x4b6/0x16a0
[ 1840.509840][T17170]  ? aead_release+0x50/0x50
[ 1840.514352][T17170]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1840.519815][T17170]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1840.526059][T17170]  ? security_socket_recvmsg+0x95/0xc0
[ 1840.531532][T17170]  ? aead_release+0x50/0x50
[ 1840.536039][T17170]  sock_recvmsg+0xce/0x110
[ 1840.540466][T17170]  ? sockfs_setattr+0x170/0x170
[ 1840.545585][T17170]  ___sys_recvmsg+0x271/0x5a0
[ 1840.550269][T17170]  ? ___sys_sendmsg+0x920/0x920
[ 1840.555299][T17170]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1840.561548][T17170]  ? ksys_dup3+0x3e0/0x3e0
[ 1840.565967][T17170]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1840.572213][T17170]  ? debug_smp_processor_id+0x3c/0x214
[ 1840.577711][T17170]  ? __fget_light+0x1a9/0x230
[ 1840.582392][T17170]  ? __fdget+0x1b/0x20
[ 1840.586488][T17170]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1840.592846][T17170]  do_recvmmsg+0x27e/0x7a0
[ 1840.597289][T17170]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1840.602156][T17170]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1840.608524][T17170]  ? _copy_from_user+0x12c/0x1a0
[ 1840.613481][T17170]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1840.619726][T17170]  __sys_recvmmsg+0xe5/0x270
[ 1840.624324][T17170]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1840.629360][T17170]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1840.635471][T17170]  __x64_sys_recvmmsg+0xe6/0x140
[ 1840.640427][T17170]  do_syscall_64+0xfd/0x6a0
[ 1840.644948][T17170]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1840.650841][T17170] RIP: 0033:0x4598e9
[ 1840.654900][T17170] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1840.675039][T17170] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1840.683546][T17170] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1840.691525][T17170] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1840.699764][T17170] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1840.708367][T17170] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
12:52:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1840.716441][T17170] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:24 executing program 3 (fault-call:8 fault-nth:16):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:24 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x34e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:24 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={<r4=>0x0, 0xff, 0x20}, &(0x7f0000000080)=0xc)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4, 0x45ad}, 0x8)
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:24 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:24 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1841.196122][T17222] FAULT_INJECTION: forcing a failure.
[ 1841.196122][T17222] name failslab, interval 1, probability 0, space 0, times 0
[ 1841.273236][T17222] CPU: 1 PID: 17222 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1841.281474][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1841.291910][T17222] Call Trace:
[ 1841.295302][T17222]  dump_stack+0x172/0x1f0
[ 1841.300348][T17222]  should_fail.cold+0xa/0x15
[ 1841.304956][T17222]  ? fault_create_debugfs_attr+0x180/0x180
[ 1841.310774][T17222]  ? page_to_nid.part.0+0x20/0x20
[ 1841.315837][T17222]  ? ___might_sleep+0x163/0x280
[ 1841.320710][T17222]  __should_failslab+0x121/0x190
[ 1841.325651][T17222]  should_failslab+0x9/0x14
[ 1841.330148][T17222]  __kmalloc+0x2e0/0x770
[ 1841.334397][T17222]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1841.339775][T17222]  ? __kasan_check_write+0x14/0x20
[ 1841.344889][T17222]  ? sock_kmalloc+0xc6/0x120
[ 1841.349560][T17222]  sock_kmalloc+0xc6/0x120
[ 1841.353980][T17222]  af_alg_alloc_areq+0x24/0x1e0
[ 1841.358833][T17222]  aead_recvmsg+0x45d/0x16a0
[ 1841.363430][T17222]  ? aead_release+0x50/0x50
[ 1841.367935][T17222]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1841.373395][T17222]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1841.379643][T17222]  ? security_socket_recvmsg+0x95/0xc0
[ 1841.385103][T17222]  ? aead_release+0x50/0x50
[ 1841.389611][T17222]  sock_recvmsg+0xce/0x110
[ 1841.394063][T17222]  ? sockfs_setattr+0x170/0x170
[ 1841.399006][T17222]  ___sys_recvmsg+0x271/0x5a0
[ 1841.403823][T17222]  ? ___sys_sendmsg+0x920/0x920
[ 1841.408833][T17222]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1841.415182][T17222]  ? ksys_dup3+0x3e0/0x3e0
[ 1841.419610][T17222]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1841.426035][T17222]  ? debug_smp_processor_id+0x3c/0x214
[ 1841.431527][T17222]  ? __fget_light+0x1a9/0x230
[ 1841.436557][T17222]  ? __fdget+0x1b/0x20
[ 1841.440725][T17222]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1841.447053][T17222]  do_recvmmsg+0x27e/0x7a0
[ 1841.451475][T17222]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1841.456348][T17222]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1841.462586][T17222]  ? _copy_from_user+0x12c/0x1a0
[ 1841.467537][T17222]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
12:52:24 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1841.473908][T17222]  __sys_recvmmsg+0xe5/0x270
[ 1841.478620][T17222]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1841.483658][T17222]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1841.489735][T17222]  __x64_sys_recvmmsg+0xe6/0x140
[ 1841.494688][T17222]  do_syscall_64+0xfd/0x6a0
[ 1841.499200][T17222]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1841.505177][T17222] RIP: 0033:0x4598e9
[ 1841.509078][T17222] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1841.528688][T17222] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1841.537134][T17222] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1841.545194][T17222] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1841.553250][T17222] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1841.561211][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1841.569260][T17222] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:25 executing program 3 (fault-call:8 fault-nth:17):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:25 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:25 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = getpgrp(0x0)
setpriority(0x1, r3, 0xcb)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x34f)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1841.977290][T17265] __nla_validate_parse: 12 callbacks suppressed
[ 1841.977299][T17265] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1842.009058][T17265] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1842.089962][T17271] FAULT_INJECTION: forcing a failure.
[ 1842.089962][T17271] name failslab, interval 1, probability 0, space 0, times 0
12:52:25 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1842.223238][T17295] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1842.237387][T17271] CPU: 1 PID: 17271 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1842.245306][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1842.255453][T17271] Call Trace:
[ 1842.258770][T17271]  dump_stack+0x172/0x1f0
[ 1842.261063][T17295] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1842.263135][T17271]  should_fail.cold+0xa/0x15
[ 1842.263154][T17271]  ? fault_create_debugfs_attr+0x180/0x180
[ 1842.263174][T17271]  ? page_to_nid.part.0+0x20/0x20
[ 1842.287837][T17271]  ? ___might_sleep+0x163/0x280
[ 1842.292732][T17271]  __should_failslab+0x121/0x190
[ 1842.297703][T17271]  should_failslab+0x9/0x14
[ 1842.302209][T17271]  __kmalloc+0x2e0/0x770
[ 1842.306546][T17271]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1842.312011][T17271]  ? __kasan_check_write+0x14/0x20
[ 1842.317113][T17271]  ? sock_kmalloc+0xc6/0x120
12:52:25 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1842.317126][T17271]  sock_kmalloc+0xc6/0x120
[ 1842.317142][T17271]  af_alg_alloc_areq+0x24/0x1e0
[ 1842.317159][T17271]  aead_recvmsg+0x45d/0x16a0
[ 1842.335655][T17271]  ? aead_release+0x50/0x50
[ 1842.340176][T17271]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1842.345651][T17271]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1842.352018][T17271]  ? security_socket_recvmsg+0x95/0xc0
[ 1842.357641][T17271]  ? aead_release+0x50/0x50
[ 1842.362144][T17271]  sock_recvmsg+0xce/0x110
[ 1842.366559][T17271]  ? sockfs_setattr+0x170/0x170
[ 1842.366573][T17271]  ___sys_recvmsg+0x271/0x5a0
[ 1842.366589][T17271]  ? ___sys_sendmsg+0x920/0x920
[ 1842.366609][T17271]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1842.388488][T17271]  ? ksys_dup3+0x3e0/0x3e0
[ 1842.393104][T17271]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1842.399379][T17271]  ? debug_smp_processor_id+0x3c/0x214
[ 1842.404953][T17271]  ? __fget_light+0x1a9/0x230
[ 1842.409643][T17271]  ? __fdget+0x1b/0x20
[ 1842.413727][T17271]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1842.422027][T17271]  do_recvmmsg+0x27e/0x7a0
[ 1842.426470][T17271]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1842.431604][T17271]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1842.438019][T17271]  ? _copy_from_user+0x12c/0x1a0
[ 1842.438042][T17271]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1842.438063][T17271]  __sys_recvmmsg+0xe5/0x270
[ 1842.453800][T17271]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1842.453820][T17271]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1842.453833][T17271]  __x64_sys_recvmmsg+0xe6/0x140
[ 1842.453850][T17271]  do_syscall_64+0xfd/0x6a0
[ 1842.453868][T17271]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1842.480458][T17271] RIP: 0033:0x4598e9
[ 1842.484449][T17271] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1842.504190][T17271] RSP: 002b:00007ff420803c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1842.512811][T17271] RAX: ffffffffffffffda RBX: 00007ff420803c90 RCX: 00000000004598e9
[ 1842.520886][T17271] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1842.520893][T17271] RBP: 000000000075bf20 R08: 0000000020004840 R09: 0000000000000000
[ 1842.520900][T17271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4208046d4
[ 1842.520906][T17271] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:25 executing program 3 (fault-call:8 fault-nth:18):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:25 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, 0x0, 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x350)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:25 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1, &(0x7f0000000100)={0x3}, 0x8)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x101000, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000340)={0x40000010})
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
write(r2, &(0x7f0000000340), 0x41395527)
r6 = getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x3}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r7=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0)
r8 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r9 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r9, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r8, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r8, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000240)=0x8)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1842.811402][T17321] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1842.851954][T17321] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1842.911168][T17336] FAULT_INJECTION: forcing a failure.
[ 1842.911168][T17336] name failslab, interval 1, probability 0, space 0, times 0
12:52:26 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, 0x0, 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xff'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1843.079972][T17336] CPU: 0 PID: 17336 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1843.089395][T17336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1843.097981][T17352] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1843.099455][T17336] Call Trace:
[ 1843.099475][T17336]  dump_stack+0x172/0x1f0
[ 1843.099498][T17336]  should_fail.cold+0xa/0x15
[ 1843.110789][T17352] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1843.112405][T17336]  ? fault_create_debugfs_attr+0x180/0x180
[ 1843.112419][T17336]  ? page_to_nid.part.0+0x20/0x20
[ 1843.112438][T17336]  ? ___might_sleep+0x163/0x280
[ 1843.146832][T17336]  __should_failslab+0x121/0x190
[ 1843.151778][T17336]  should_failslab+0x9/0x14
[ 1843.156290][T17336]  __kmalloc+0x2e0/0x770
[ 1843.160631][T17336]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1843.166022][T17336]  ? __kasan_check_write+0x14/0x20
[ 1843.171263][T17336]  ? sock_kmalloc+0xc6/0x120
[ 1843.175864][T17336]  sock_kmalloc+0xc6/0x120
[ 1843.175879][T17336]  af_alg_alloc_areq+0x24/0x1e0
[ 1843.175893][T17336]  aead_recvmsg+0x45d/0x16a0
[ 1843.175915][T17336]  ? aead_release+0x50/0x50
[ 1843.175936][T17336]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1843.199934][T17336]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1843.206448][T17336]  ? security_socket_recvmsg+0x95/0xc0
[ 1843.211933][T17336]  ? aead_release+0x50/0x50
[ 1843.216540][T17336]  sock_recvmsg+0xce/0x110
[ 1843.220964][T17336]  ? sockfs_setattr+0x170/0x170
[ 1843.225821][T17336]  ___sys_recvmsg+0x271/0x5a0
[ 1843.230512][T17336]  ? ___sys_sendmsg+0x920/0x920
[ 1843.235496][T17336]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1843.242036][T17336]  ? ksys_dup3+0x3e0/0x3e0
[ 1843.246514][T17336]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1843.252773][T17336]  ? debug_smp_processor_id+0x3c/0x214
[ 1843.258243][T17336]  ? __fget_light+0x1a9/0x230
[ 1843.262942][T17336]  ? __fdget+0x1b/0x20
[ 1843.267034][T17336]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1843.273360][T17336]  do_recvmmsg+0x27e/0x7a0
[ 1843.277787][T17336]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1843.282924][T17336]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1843.289264][T17336]  ? _copy_from_user+0x12c/0x1a0
[ 1843.294314][T17336]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1843.300595][T17336]  __sys_recvmmsg+0xe5/0x270
[ 1843.305196][T17336]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1843.310245][T17336]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1843.316421][T17336]  __x64_sys_recvmmsg+0xe6/0x140
[ 1843.321460][T17336]  do_syscall_64+0xfd/0x6a0
12:52:26 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x351)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:26 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, 0x0, 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xff'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1843.326175][T17336]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1843.332069][T17336] RIP: 0033:0x4598e9
[ 1843.335969][T17336] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1843.355662][T17336] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1843.364517][T17336] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1843.372497][T17336] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1843.381619][T17336] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1843.389683][T17336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
[ 1843.397753][T17336] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:26 executing program 3 (fault-call:8 fault-nth:19):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:26 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:26 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x20000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x100000000000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r4 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r4, 0x1000000)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r3, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r3}, 0x10)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80)
ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f00000003c0))
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r6=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xff'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:26 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x352)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:26 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1843.685101][T17384] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1843.713825][T17384] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1843.809567][T17391] FAULT_INJECTION: forcing a failure.
[ 1843.809567][T17391] name failslab, interval 1, probability 0, space 0, times 0
[ 1843.833368][T17391] CPU: 1 PID: 17391 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1843.841291][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1843.841298][T17391] Call Trace:
[ 1843.841320][T17391]  dump_stack+0x172/0x1f0
[ 1843.841348][T17391]  should_fail.cold+0xa/0x15
[ 1843.864087][T17391]  ? fault_create_debugfs_attr+0x180/0x180
[ 1843.869901][T17391]  ? page_to_nid.part.0+0x20/0x20
[ 1843.875027][T17391]  ? ___might_sleep+0x163/0x280
[ 1843.879886][T17391]  __should_failslab+0x121/0x190
[ 1843.884839][T17391]  should_failslab+0x9/0x14
[ 1843.889433][T17391]  __kmalloc+0x2e0/0x770
[ 1843.893680][T17391]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1843.899066][T17391]  ? __kasan_check_write+0x14/0x20
[ 1843.904392][T17391]  ? sock_kmalloc+0xc6/0x120
[ 1843.908993][T17391]  sock_kmalloc+0xc6/0x120
[ 1843.913503][T17391]  af_alg_alloc_areq+0x24/0x1e0
[ 1843.918376][T17391]  aead_recvmsg+0x45d/0x16a0
[ 1843.923012][T17391]  ? aead_release+0x50/0x50
[ 1843.927517][T17391]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1843.932990][T17391]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1843.939321][T17391]  ? security_socket_recvmsg+0x95/0xc0
[ 1843.945228][T17391]  ? aead_release+0x50/0x50
[ 1843.949727][T17391]  sock_recvmsg+0xce/0x110
[ 1843.954388][T17391]  ? sockfs_setattr+0x170/0x170
[ 1843.954401][T17391]  ___sys_recvmsg+0x271/0x5a0
[ 1843.954417][T17391]  ? ___sys_sendmsg+0x920/0x920
[ 1843.954437][T17391]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1843.975173][T17391]  ? ksys_dup3+0x3e0/0x3e0
[ 1843.979682][T17391]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1843.985932][T17391]  ? debug_smp_processor_id+0x3c/0x214
[ 1843.991397][T17391]  ? __fget_light+0x1a9/0x230
[ 1843.996196][T17391]  ? __fdget+0x1b/0x20
[ 1844.000280][T17391]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1844.006531][T17391]  do_recvmmsg+0x27e/0x7a0
[ 1844.010961][T17391]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1844.015826][T17391]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1844.022327][T17391]  ? _copy_from_user+0x12c/0x1a0
[ 1844.027296][T17391]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1844.033549][T17391]  __sys_recvmmsg+0xe5/0x270
[ 1844.038150][T17391]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1844.043273][T17391]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1844.049361][T17391]  __x64_sys_recvmmsg+0xe6/0x140
[ 1844.054404][T17391]  do_syscall_64+0xfd/0x6a0
[ 1844.059031][T17391]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1844.064952][T17391] RIP: 0033:0x4598e9
[ 1844.068860][T17391] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1844.088558][T17391] RSP: 002b:00007ff420803c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1844.096980][T17391] RAX: ffffffffffffffda RBX: 00007ff420803c90 RCX: 00000000004598e9
12:52:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xff'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:27 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1844.104962][T17391] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1844.112952][T17391] RBP: 000000000075bf20 R08: 0000000020004840 R09: 0000000000000000
[ 1844.121034][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4208046d4
[ 1844.129099][T17391] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:27 executing program 3 (fault-call:8 fault-nth:20):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:27 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x353)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:27 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x88'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:27 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r5 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r5, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r4, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r6 = socket(0x200000000000011, 0x0, 0x0)
bind$isdn(r6, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001}, 0x6)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'ip6erspan0\x00', r7})
sendmsg$xdp(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x2c, 0x4, r7, 0x3c}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="6970d8ba6cba30dd1255bacf89f7ebb9c16a14bd9ec192260b1e174a77a9b826bcb6926d1f49221859b4990ae851e435f04de0a7c3549deb3215fd70ead5ce51951b72a252c1fdd1eb0f76b38bd67a148e3ee112e5c88c48fd58330c3cf7746e7c9168b914b3efa901743d3c4c2bb05955f57d14e0d6cb8fcfccb8bb155828341004ccb359404baaef62508ac55173ceb043ad38c13bc4ebb365285bfb", 0x9d}], 0x1, 0x0, 0x0, 0x4008801}, 0x4)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0x1c, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/28}, &(0x7f00000002c0)=0x78)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r8=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1844.622755][T17451] FAULT_INJECTION: forcing a failure.
[ 1844.622755][T17451] name failslab, interval 1, probability 0, space 0, times 0
12:52:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1844.749573][T17451] CPU: 0 PID: 17451 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0
[ 1844.757598][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1844.767668][T17451] Call Trace:
[ 1844.770964][T17451]  dump_stack+0x172/0x1f0
[ 1844.775627][T17451]  should_fail.cold+0xa/0x15
[ 1844.780308][T17451]  ? fault_create_debugfs_attr+0x180/0x180
[ 1844.786132][T17451]  ? page_to_nid.part.0+0x20/0x20
[ 1844.791240][T17451]  ? ___might_sleep+0x163/0x280
[ 1844.796190][T17451]  __should_failslab+0x121/0x190
[ 1844.801262][T17451]  should_failslab+0x9/0x14
[ 1844.806240][T17451]  __kmalloc+0x2e0/0x770
[ 1844.810500][T17451]  ? af_alg_wait_for_wmem+0x520/0x520
[ 1844.815969][T17451]  ? __kasan_check_write+0x14/0x20
[ 1844.821097][T17451]  ? sock_kmalloc+0xc6/0x120
[ 1844.825707][T17451]  sock_kmalloc+0xc6/0x120
[ 1844.830518][T17451]  af_alg_alloc_areq+0x24/0x1e0
[ 1844.835391][T17451]  aead_recvmsg+0x45d/0x16a0
[ 1844.840009][T17451]  ? aead_release+0x50/0x50
[ 1844.844522][T17451]  ? apparmor_socket_recvmsg+0x2a/0x30
[ 1844.850140][T17451]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1844.856390][T17451]  ? security_socket_recvmsg+0x95/0xc0
[ 1844.861864][T17451]  ? aead_release+0x50/0x50
[ 1844.866375][T17451]  sock_recvmsg+0xce/0x110
[ 1844.870795][T17451]  ? sockfs_setattr+0x170/0x170
[ 1844.875648][T17451]  ___sys_recvmsg+0x271/0x5a0
[ 1844.880335][T17451]  ? ___sys_sendmsg+0x920/0x920
[ 1844.885265][T17451]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1844.891521][T17451]  ? ksys_dup3+0x3e0/0x3e0
[ 1844.895946][T17451]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1844.902542][T17451]  ? debug_smp_processor_id+0x3c/0x214
[ 1844.908017][T17451]  ? __fget_light+0x1a9/0x230
[ 1844.912705][T17451]  ? __fdget+0x1b/0x20
[ 1844.916778][T17451]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1844.923117][T17451]  do_recvmmsg+0x27e/0x7a0
[ 1844.927544][T17451]  ? ___sys_recvmsg+0x5a0/0x5a0
[ 1844.932428][T17451]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1844.938772][T17451]  ? _copy_from_user+0x12c/0x1a0
[ 1844.943811][T17451]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1844.950844][T17451]  __sys_recvmmsg+0xe5/0x270
[ 1844.955678][T17451]  ? __ia32_sys_recvmsg+0xb0/0xb0
[ 1844.960720][T17451]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1844.966803][T17451]  __x64_sys_recvmmsg+0xe6/0x140
[ 1844.971755][T17451]  do_syscall_64+0xfd/0x6a0
[ 1844.976277][T17451]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1844.982168][T17451] RIP: 0033:0x4598e9
[ 1844.986067][T17451] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1845.005675][T17451] RSP: 002b:00007ff4207e2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1845.014191][T17451] RAX: ffffffffffffffda RBX: 00007ff4207e2c90 RCX: 00000000004598e9
[ 1845.022168][T17451] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000005
[ 1845.030297][T17451] RBP: 000000000075bfc8 R08: 0000000020004840 R09: 0000000000000000
[ 1845.038268][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4207e36d4
12:52:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x7f'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1845.046241][T17451] R13: 00000000004c6e0e R14: 00000000004dc2a0 R15: 0000000000000006
12:52:28 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x354)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x9e'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:28 executing program 3 (fault-call:8 fault-nth:21):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:28 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xf0'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:28 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xa001, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080))
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xfc'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:28 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x355)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\xff'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:29 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:29 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100902, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x7fffffff, 0x7bde})
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:29 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x356)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:30 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1847.160091][T17636] __nla_validate_parse: 26 callbacks suppressed
[ 1847.160101][T17636] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1847.236657][T17636] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:30 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:30 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x357)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1847.404302][T17652] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1847.444594][T17652] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1847.692614][T17673] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1847.743803][T17673] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:31 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:31 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x358)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1848.029609][T17695] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1848.051308][T17695] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:31 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:31 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x359)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

[ 1848.357273][T17716] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1848.373714][T17716] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
12:52:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:32 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:32 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x35a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:32 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r5 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r5, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r4, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000040))
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000300)={0x7f, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x88)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:33 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x35b)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:33 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:33 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
r4 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x00\x00\'v\x01\x03\xf2\x00', @ifru_flags=0x4})
r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r6 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r6, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r5, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000240)={<r7=>0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, [0x7, 0xbcae, 0x8001, 0x1, 0x800, 0x20, 0x10000, 0xffffffff, 0x9, 0x5, 0x100000000, 0x823b, 0x8, 0x8001, 0x7f]}, &(0x7f0000000080)=0x100)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={r7, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @remote}, 0xffffffff}]}, &(0x7f0000000380)=0x10)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f0000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:33 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x35c)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:33 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0xfffffffffffffe58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r5 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r5, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
r6 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
sendmsg$key(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0)
getpeername$tipc(r4, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)=0x401)
socket$isdn(0x22, 0x3, 0x23)
r8 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r9 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r9, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r8, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r8, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$NBD_DISCONNECT(r8, 0xab08)
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:33 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="230000002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00e00002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:34 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x35d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

12:52:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2bf800002a00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x34000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840))

12:52:34 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

12:52:34 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r4, r3)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r5, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000003340)=[{{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000480)=""/178, 0xb2}], 0x2}, 0x9}, {{&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/94, 0x5e}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x3}, 0xf8}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000840)=""/69, 0x45}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f00000009c0)=""/147, 0x93}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/223, 0xdf}, {&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001c40)=""/183, 0xb7}, {&(0x7f0000001d00)=""/84, 0x54}], 0x9, &(0x7f0000001e40)=""/38, 0x26}}, {{&(0x7f0000001e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f00)=""/108, 0x6c}, {&(0x7f0000001f80)=""/98, 0x62}], 0x2, &(0x7f0000002040)=""/206, 0xce}, 0xffffffff}, {{&(0x7f0000002140)=@sco, 0x80, &(0x7f0000003300)=[{&(0x7f00000021c0)=""/126, 0x7e}, {&(0x7f0000002240)=""/78, 0x4e}, {&(0x7f00000022c0)=""/53, 0x35}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x4}, 0x4}], 0x5, 0x10120, &(0x7f0000003480))
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000b80)='cpuset\x1c\x15\xbe&\xba\xc6\xf9\xd8\xa4.effective_mems\x00', 0x26e1, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r10=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000000)={r10}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r10}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000034c0)={r10, 0x97, "8f740ec9000b408c4bac6f5beb18621cc92d7e0a4270e2b29160c4e249dde09f1016812af5b9c57da055ea3f37a125ec27729b63ba3674c02f17f9644874432067353582e7ba2d356c8d361f7315956f8c624148a5ebb6016c049f3d3b49dd0413d95d3c740592d761bdc9ae9603c08394e21633b161d53fb1ca1b05b0142479f55352c82aafe35ae2d3b9bb4e09fd1f6d2ec8fc815352"}, &(0x7f0000003580)=0x9f)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r11=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000200)={0x0, r11+30000000}, 0x0)
r12 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r13 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r13, 0x1000000)
getsockopt$EBT_SO_GET_INFO(r12, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(r12, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r12, r13, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$RTC_PIE_OFF(r12, 0x7006)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f00a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:35 executing program 1:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x39, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:52:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002800a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

12:52:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002900a59c00"/20, @ANYRES32=r2, @ANYBLOB="0382000000000000000000e0ffffff"], 0xf82b}}, 0x0)

12:52:35 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1107}], 0x1)
readv(r0, &(0x7f0000000580), 0x35e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xe418129d5d05289, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
r2 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r2, 0x1000000)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xa7, 0x3}}, 0x10)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x78)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffffd)
sendfile(r1, r2, &(0x7f00000000c0), 0xeefffdef)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0)
openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

[ 1852.211200][T17983] __nla_validate_parse: 32 callbacks suppressed
[ 1852.211209][T17983] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1852.314515][T17983] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1852.369166][T17987] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 1852.377023][T17987] #PF: supervisor instruction fetch in kernel mode
[ 1852.383564][T17987] #PF: error_code(0x0010) - not-present page
[ 1852.389540][T17987] PGD a8639067 P4D a8639067 PUD 48811067 PMD 0 
[ 1852.395895][T17987] Oops: 0010 [#1] PREEMPT SMP KASAN
[ 1852.401116][T17987] CPU: 0 PID: 17987 Comm: syz-executor.5 Not tainted 5.3.0-rc8+ #0
[ 1852.409009][T17987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1852.419098][T17987] RIP: 0010:0x0
[ 1852.422938][T17987] Code: Bad RIP value.
[ 1852.427010][T17987] RSP: 0018:ffff88804f0f74d8 EFLAGS: 00010246
[ 1852.433079][T17987] RAX: dffffc0000000000 RBX: ffffffff882a86a0 RCX: ffffc900109d6000
[ 1852.441437][T17987] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88805ac59380
[ 1852.449559][T17987] RBP: ffff88804f0f75d0 R08: ffff88804c596000 R09: ffff88804f0f7658
[ 1852.457562][T17987] R10: ffffed1009e1eed9 R11: ffff88804f0f76cf R12: ffff88805ac59380
[ 1852.465626][T17987] R13: 0000000000000001 R14: ffff88804f0f75a8 R15: ffffffff882a86a0
[ 1852.473625][T17987] FS:  00007f456d944700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 1852.483723][T17987] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1852.490398][T17987] CR2: ffffffffffffffd6 CR3: 00000000208fc000 CR4: 00000000001426f0
[ 1852.498379][T17987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000006254
[ 1852.506361][T17987] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1852.514366][T17987] Call Trace:
[ 1852.517701][T17987]  tc_bind_tclass+0x13e/0x2f0
[ 1852.522385][T17987]  ? qdisc_class_hash_init+0x110/0x110
[ 1852.527849][T17987]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1852.534257][T17987]  ? ns_capable_common+0x93/0x100
[ 1852.539398][T17987]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1852.545201][T17987]  ? qdisc_match_from_root+0x18a/0x280
[ 1852.550675][T17987]  tc_ctl_tclass+0xadb/0xcd0
[ 1852.555277][T17987]  ? qdisc_tree_reduce_backlog+0x570/0x570
[ 1852.561093][T17987]  ? rtnetlink_rcv_msg+0x3d0/0xb00
12:52:35 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='pZocuse\x04\x00', 0x0)
write$eventfd(r0, &(0x7f0000000000)=0x20000000000880, 0x8)
sendfile(r0, r0, &(0x7f00000000c0), 0xff01)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x10)

[ 1852.566235][T17987]  ? rtnetlink_rcv_msg+0x1ea/0xb00
[ 1852.571455][T17987]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1852.578240][T17987]  ? qdisc_tree_reduce_backlog+0x570/0x570
[ 1852.584500][T17987]  rtnetlink_rcv_msg+0x463/0xb00
[ 1852.589536][T17987]  ? rtnetlink_put_metrics+0x580/0x580
[ 1852.595264][T17987]  ? perf_trace_lock_acquire+0xf5/0x530
[ 1852.600823][T17987]  netlink_rcv_skb+0x177/0x450
[ 1852.605594][T17987]  ? rtnetlink_put_metrics+0x580/0x580
[ 1852.611151][T17987]  ? netlink_ack+0xb30/0xb30
[ 1852.616093][T17987]  ? lock_downgrade+0x920/0x920
[ 1852.619360][ T3906] kobject: 'loop2' (00000000f274ce0a): kobject_uevent_env
[ 1852.620965][T17987]  ? netlink_deliver_tap+0x254/0xbf0
[ 1852.634568][T17987]  rtnetlink_rcv+0x1d/0x30
[ 1852.639182][T17987]  netlink_unicast+0x531/0x710
[ 1852.644049][T17987]  ? netlink_attachskb+0x7c0/0x7c0
[ 1852.649272][T17987]  ? _copy_from_iter_full+0x25d/0x8a0
[ 1852.651112][ T3906] kobject: 'loop2' (00000000f274ce0a): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1852.654745][T17987]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1852.654760][T17987]  ? __check_object_size+0x3d/0x437
[ 1852.654773][T17987]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1852.654790][T17987]  netlink_sendmsg+0x8a5/0xd60
[ 1852.654804][T17987]  ? netlink_unicast+0x710/0x710
[ 1852.654823][T17987]  ? aa_sock_msg_perm.isra.0+0xba/0x170
[ 1852.697256][T17987]  ? apparmor_socket_sendmsg+0x2a/0x30
[ 1852.702819][T17987]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1852.709336][T17987]  ? security_socket_sendmsg+0x8d/0xc0
[ 1852.714904][T17987]  ? netlink_unicast+0x710/0x710
[ 1852.720021][T17987]  sock_sendmsg+0xd7/0x130
[ 1852.724450][T17987]  ___sys_sendmsg+0x803/0x920
[ 1852.729245][T17987]  ? copy_msghdr_from_user+0x440/0x440
[ 1852.734714][T17987]  ? __fget+0xa3/0x560
[ 1852.739656][T17987]  ? perf_trace_lock_acquire+0xf5/0x530
[ 1852.745352][T17987]  ? __fget+0x384/0x560
[ 1852.749695][T17987]  ? ksys_dup3+0x3e0/0x3e0
[ 1852.755108][T17987]  ? __might_fault+0xfb/0x1e0
[ 1852.759902][T17987]  ? __fget_light+0x1a9/0x230
[ 1852.764586][T17987]  ? __fdget+0x1b/0x20
[ 1852.768941][T17987]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1852.775278][T17987]  __sys_sendmsg+0x105/0x1d0
[ 1852.779991][T17987]  ? __sys_sendmsg_sock+0xd0/0xd0
[ 1852.785134][T17987]  ? __x64_sys_clock_gettime+0x16d/0x240
[ 1852.790806][T17987]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1852.796898][T17987]  __x64_sys_sendmsg+0x78/0xb0
[ 1852.801673][T17987]  do_syscall_64+0xfd/0x6a0
[ 1852.806291][T17987]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1852.812335][T17987] RIP: 0033:0x4598e9
[ 1852.816399][T17987] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1852.836584][T17987] RSP: 002b:00007f456d943c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1852.845094][T17987] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9
[ 1852.853186][T17987] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[ 1852.861254][T17987] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
12:52:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x83, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

[ 1852.869234][T17987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f456d9446d4
[ 1852.877300][T17987] R13: 00000000004c77fb R14: 00000000004dd098 R15: 00000000ffffffff
[ 1852.885398][T17987] Modules linked in:
[ 1852.889390][T17987] CR2: 0000000000000000
[ 1852.914436][ T3906] kobject: 'loop4' (00000000bbbad348): kobject_uevent_env
[ 1852.923028][ T3906] kobject: 'loop4' (00000000bbbad348): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1852.956265][ T3906] kobject: 'loop0' (000000001d2f529f): kobject_uevent_env
[ 1852.964380][ T3906] kobject: 'loop0' (000000001d2f529f): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1852.978842][T17987] ---[ end trace 16d9953f3a7f824a ]---
[ 1852.985707][T17987] RIP: 0010:0x0
[ 1852.997412][T17987] Code: Bad RIP value.
[ 1853.007668][T17987] RSP: 0018:ffff88804f0f74d8 EFLAGS: 00010246
[ 1853.024875][T17987] RAX: dffffc0000000000 RBX: ffffffff882a86a0 RCX: ffffc900109d6000
[ 1853.039134][T17987] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88805ac59380
[ 1853.048171][T17987] RBP: ffff88804f0f75d0 R08: ffff88804c596000 R09: ffff88804f0f7658
[ 1853.075999][T17987] R10: ffffed1009e1eed9 R11: ffff88804f0f76cf R12: ffff88805ac59380
[ 1853.090848][T17987] R13: 0000000000000001 R14: ffff88804f0f75a8 R15: ffffffff882a86a0
[ 1853.111578][T17987] FS:  00007f456d944700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 1853.120898][T17987] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1853.131249][T17987] CR2: 00007f456d901db8 CR3: 00000000208fc000 CR4: 00000000001426f0
[ 1853.139386][T17987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000006254
[ 1853.151090][T17987] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1853.159239][T17987] Kernel panic - not syncing: Fatal exception
[ 1853.167308][T17987] Kernel Offset: disabled
[ 1853.171651][T17987] Rebooting in 86400 seconds..