ab, interval 1, probability 0, space 0, times 0 [ 1431.438440] CPU: 1 PID: 32305 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1431.446385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.455764] Call Trace: [ 1431.458374] dump_stack+0x142/0x197 [ 1431.462025] should_fail.cold+0x10f/0x159 [ 1431.466199] should_failslab+0xdb/0x130 [ 1431.470200] kmem_cache_alloc_node_trace+0x280/0x770 [ 1431.475329] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1431.480800] __kmalloc_node_track_caller+0x3d/0x80 [ 1431.485753] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1431.490437] __alloc_skb+0xcf/0x500 [ 1431.494083] ? skb_scrub_packet+0x4b0/0x4b0 [ 1431.498422] ? if_nlmsg_size+0x38f/0x810 [ 1431.502503] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1431.507105] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1431.511883] rtmsg_ifinfo+0x6f/0x90 [ 1431.515526] netdev_state_change+0xd3/0xe0 [ 1431.519775] ? dev_valid_name+0x1b0/0x1b0 [ 1431.523938] ? set_operstate+0x11a/0x150 [ 1431.528013] do_setlink+0x2415/0x2d50 [ 1431.531836] ? rtnl_register+0x50/0x50 01:29:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed5f9e2943cfb3fc, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x5f26de1bab5e7152) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) [ 1431.535735] ? trace_hardirqs_on+0x10/0x10 [ 1431.539982] ? save_trace+0x290/0x290 [ 1431.543783] ? is_bpf_text_address+0x7f/0x120 [ 1431.543800] ? __lock_acquire+0x5f7/0x4620 [ 1431.543809] ? __lock_acquire+0x5f7/0x4620 [ 1431.543820] ? __lock_acquire+0x5f7/0x4620 [ 1431.556778] ? trace_hardirqs_on+0x10/0x10 [ 1431.556793] ? validate_nla+0x201/0x5f0 [ 1431.556805] ? nla_parse+0x186/0x240 [ 1431.572950] rtnl_newlink+0xbe4/0x1700 [ 1431.576857] ? rtnl_link_unregister+0x200/0x200 [ 1431.581535] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1431.586233] ? lock_acquire+0x16f/0x430 [ 1431.590218] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1431.590659] protocol 88fb is buggy, dev hsr_slave_0 [ 1431.594664] ? rtnl_link_unregister+0x200/0x200 [ 1431.600188] protocol 88fb is buggy, dev hsr_slave_1 [ 1431.604337] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1431.604354] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1431.618159] ? netlink_deliver_tap+0x93/0x8f0 [ 1431.622675] netlink_rcv_skb+0x14f/0x3c0 [ 1431.626750] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1431.631348] ? lock_downgrade+0x740/0x740 [ 1431.635503] ? netlink_ack+0x9a0/0x9a0 [ 1431.639412] ? netlink_deliver_tap+0xba/0x8f0 [ 1431.643929] rtnetlink_rcv+0x1d/0x30 [ 1431.647656] netlink_unicast+0x45d/0x640 [ 1431.651732] ? netlink_attachskb+0x6a0/0x6a0 [ 1431.656152] ? security_netlink_send+0x81/0xb0 [ 1431.660778] netlink_sendmsg+0x7c4/0xc60 [ 1431.664858] ? netlink_unicast+0x640/0x640 [ 1431.669110] ? security_socket_sendmsg+0x89/0xb0 [ 1431.673877] ? netlink_unicast+0x640/0x640 [ 1431.678130] sock_sendmsg+0xce/0x110 [ 1431.681859] ___sys_sendmsg+0x70a/0x840 [ 1431.685849] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1431.690614] ? __fget+0x210/0x370 [ 1431.694083] ? find_held_lock+0x35/0x130 [ 1431.698154] ? __fget+0x210/0x370 [ 1431.701620] ? lock_downgrade+0x740/0x740 [ 1431.705782] ? __fget+0x237/0x370 [ 1431.709247] ? __fget_light+0x172/0x1f0 [ 1431.713227] ? __fdget+0x1b/0x20 [ 1431.716600] ? sockfd_lookup_light+0xb4/0x160 [ 1431.721107] __sys_sendmsg+0xb9/0x140 [ 1431.724917] ? SyS_shutdown+0x170/0x170 [ 1431.728911] SyS_sendmsg+0x2d/0x50 [ 1431.732460] ? __sys_sendmsg+0x140/0x140 [ 1431.736534] do_syscall_64+0x1e8/0x640 [ 1431.740434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1431.745300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.750503] RIP: 0033:0x45a639 [ 1431.753699] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1431.761425] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1431.768709] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1431.775989] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 01:29:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x0, 0x3}, 0x3}}], 0x30) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x200) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x9d, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r9, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "dc1d54e7641beb38089f0e220e5edb2656270a0adebb9653f9040bf0d60e3af6b32427b5e67c8cdf24321be0aeea1ccadcf7764dda5108ef3de9e548d063615835cb5a1be972938273709fb96c738bfe20735c851421652d688f8e4f592d0995e54dac979b265d4728f428c080e52f925ad7f01da579d10faab42de4b5aafe3c08d4751293854e5f1d25492a618ee41fd2c4d1568d54d44ebfceff8450414efaceaa9ec29fcdb8a871f512bc898e32b665ec1786c072a2121f2652d985852df3ed3daa9619cd0e39f00e8855ac0a1e2f80254b5ac0e9c2339f9b929d11117cc8579eb67af894e334a861f9272403a31398cce99035ec27d069df011fc27ef9f2", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}, r10}}, 0x120) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r10, 0x2}}, 0x18) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) [ 1431.783266] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1431.790541] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:28 executing program 4 (fault-call:1 fault-nth:9): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed5f9e2943cfb3fc, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x5f26de1bab5e7152) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) [ 1432.047310] FAULT_INJECTION: forcing a failure. [ 1432.047310] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.095059] CPU: 1 PID: 32326 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1432.103097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.112460] Call Trace: [ 1432.115068] dump_stack+0x142/0x197 [ 1432.118723] should_fail.cold+0x10f/0x159 [ 1432.122892] should_failslab+0xdb/0x130 [ 1432.126904] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1432.131945] __kmalloc_node_track_caller+0x3d/0x80 [ 1432.136890] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1432.141601] pskb_expand_head+0x116/0xc10 [ 1432.145777] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1432.150109] ? kasan_kmalloc+0xce/0xf0 [ 1432.154018] netlink_trim+0x1c1/0x230 [ 1432.157839] netlink_broadcast_filtered+0x5c/0x9f0 [ 1432.162793] ? skb_scrub_packet+0x4b0/0x4b0 [ 1432.167132] nlmsg_notify+0x7c/0x190 [ 1432.170865] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1432.175653] rtmsg_ifinfo+0x6f/0x90 [ 1432.179298] netdev_state_change+0xd3/0xe0 [ 1432.183548] ? dev_valid_name+0x1b0/0x1b0 [ 1432.187712] ? set_operstate+0x11a/0x150 [ 1432.191790] do_setlink+0x2415/0x2d50 [ 1432.195610] ? rtnl_register+0x50/0x50 [ 1432.199512] ? trace_hardirqs_on+0x10/0x10 [ 1432.203760] ? save_trace+0x290/0x290 [ 1432.207578] ? is_bpf_text_address+0x7f/0x120 [ 1432.212090] ? __lock_acquire+0x5f7/0x4620 [ 1432.216338] ? __lock_acquire+0x5f7/0x4620 [ 1432.220588] ? __lock_acquire+0x5f7/0x4620 [ 1432.224842] ? trace_hardirqs_on+0x10/0x10 [ 1432.229089] ? validate_nla+0x201/0x5f0 [ 1432.233078] ? nla_parse+0x186/0x240 [ 1432.236802] rtnl_newlink+0xbe4/0x1700 [ 1432.240713] ? rtnl_link_unregister+0x200/0x200 [ 1432.245397] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1432.250110] ? lock_acquire+0x16f/0x430 [ 1432.254100] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1432.258568] ? rtnl_link_unregister+0x200/0x200 [ 1432.263253] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1432.267505] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1432.272111] ? netlink_deliver_tap+0x93/0x8f0 [ 1432.276645] netlink_rcv_skb+0x14f/0x3c0 [ 1432.280720] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1432.285315] ? lock_downgrade+0x740/0x740 [ 1432.289566] ? netlink_ack+0x9a0/0x9a0 [ 1432.293468] ? netlink_deliver_tap+0xba/0x8f0 [ 1432.297986] rtnetlink_rcv+0x1d/0x30 [ 1432.301731] netlink_unicast+0x45d/0x640 [ 1432.305903] ? netlink_attachskb+0x6a0/0x6a0 [ 1432.310333] ? security_netlink_send+0x81/0xb0 [ 1432.314930] netlink_sendmsg+0x7c4/0xc60 [ 1432.319017] ? netlink_unicast+0x640/0x640 [ 1432.323273] ? security_socket_sendmsg+0x89/0xb0 [ 1432.328041] ? netlink_unicast+0x640/0x640 [ 1432.332290] sock_sendmsg+0xce/0x110 [ 1432.336044] ___sys_sendmsg+0x70a/0x840 [ 1432.340036] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1432.344810] ? __fget+0x210/0x370 [ 1432.348282] ? find_held_lock+0x35/0x130 [ 1432.352355] ? __fget+0x210/0x370 [ 1432.355826] ? lock_downgrade+0x740/0x740 [ 1432.360027] ? __fget+0x237/0x370 [ 1432.363498] ? __fget_light+0x172/0x1f0 [ 1432.367483] ? __fdget+0x1b/0x20 [ 1432.370861] ? sockfd_lookup_light+0xb4/0x160 [ 1432.375384] __sys_sendmsg+0xb9/0x140 [ 1432.379201] ? SyS_shutdown+0x170/0x170 [ 1432.383200] SyS_sendmsg+0x2d/0x50 [ 1432.386752] ? __sys_sendmsg+0x140/0x140 [ 1432.390827] do_syscall_64+0x1e8/0x640 [ 1432.394725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1432.399608] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1432.404808] RIP: 0033:0x45a639 [ 1432.408008] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1432.415814] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1432.423096] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1432.430381] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1432.437660] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 01:29:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1432.445056] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002880)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000b784b59d6f83c2010162327d7c4efc62d3ce0026f0fad9e2292ad1e2576699db0cc3fed23d79e40f610542b0feca8761e11319f0452ed38e136a614ae51fa26127977d48fedeb9ac034336c1d4cd969f0aa418e25730b4217fcb250cf9a89eee1703c16abd8f78d96235e3f23bbc44dca4d70a8c8669905c676fe28ef0fe1f1b1209f2bc9ff81e2403e7e07741597165070a652b7a04261f1ea2aade9909d620", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x24c4, 0x38, 0x5, 0x400, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x8}, [@nested={0x280, 0x32, [@typed={0xe0, 0x86, @binary="5c89e4a4dfe5f3ba6c68426cb290cbd875cf54c7417171af9de0ae26275cd924431d328ba3a96948a7a80fa84279d175bdda1ebabc65ebf9593f4b0d458509208e7608b87cd5c00d74e658b19515eeb5ab3c5039e391fd20c76d97b5eb615367b9a72bea45fda13d8b0307821d8af81ec6fe6fc3050168ed7d0d75a0cd25c9d05f60ace37aa1f7ee8aeda833da67f09c9dad4f3b939b034fad082d089baaceec02f15b75fa52caee6a2600e5960fac8b60df36485f9bd9d407c3bb879b235da6d7ca58351d8403bfa12514d455ef85ec00788257ee406cd8e4"}, @typed={0x4, 0x6b}, @typed={0x8, 0x6a, @fd=r1}, @generic="9e2def64e7b2c47fdd3c0d7dd3495322626f3ebca1da4ab5a3180e5e3eb685c33dd35165811838e7b90ecfe72440743219d1fb3a6e65663e938eb19370", @typed={0x8, 0x3b, @str='em0\x00'}, @generic="51effcd472387e8b67d265410ed83cb566613dde4242527dc442f5ddedd4bb81810f12bcb7f7d0cb238dd10053c379255e917ccaecdfc3daa40ae821a306d2d9f162666ed45c4badeb636fc8a94a65198c4af685e2919a3c8bfb9d70c8485939b3cb5d9101d02e805d4777f3221b5748ed7a7353d89fc66c21df6c4da245cebf3815a0ee176169039fa7ce5a758e517cdbc42b45150eef40002d711c72f2f3b856ccf4913ba3df3be93ef13ca53a6dc81174492652354587d888a6eeea9f1162401fed1d93d7ddee520fddc199e4a028aeb39fd8ce0bb222b1", @generic="472231e9e8b478b84b109549e5f364c79aaa6fba16f7817c4e7f363dfb1b885d84e803239b432a3ae66dd7547bcdc0b5a72057b9d899a5ecdf25370206c1449c9e14e0f0e3c8bdc0f38941dfa115af0fd4ed8a28b41ac955f18d15e752", @typed={0x14, 0x27, @ipv6=@remote}]}, @nested={0x130, 0x11, [@generic="0a9911aab7aea7ab9fb6daf8aee21492b86a7f968092a06e95a026abef91317baf3283b844d7615658905447e77ff245116f54039e68443ad179766453fbff", @typed={0x4, 0x3c}, @generic="0ac38fde", @generic="d6e11d0c18796b28f810c8f5c0c0749c06c7f0c7ed3d8e09a8295262313a31a66fe7ac200977b4c80ede8ff1601c1111fd2b3a4a6c8d22128df0447e6949986d7b12ef9792ce9956e883d0e5609f5f6de0580b64d2c3b4ac3cdaad7388c8745d0a6e360a757016730ba7bd4f463fdbd9e257294b548a18faaafcc325f4a10cfbfc152a9cc6114cbb655caafd539676a7069012590a5a1788cfbedebc11ca9ce7349b512bfb7a4e", @generic="527572d37a2f90546f95c335c30b92866c63195c890e7e2ae6253706894039bcba50471fcbbc74c3d5f2eb5ae31b89dd65edfc3042", @typed={0x8, 0x78, @pid=r3}]}, @typed={0x8, 0x4e, @str='\x00'}, @typed={0x4, 0x4d}, @generic="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", @generic="1c6e86233bb2a02bbc52605af079031c0a8a0aa2e5a0ca560dde8c030d9b0003928def5d6da4e204012449a48e3aa316102b7f121abe6513a8c5fbeab952ba125e46b6e9062c9f1afbc3046c92e793909762259a96b4101e419ee94bb327a7c40fdf268de84211404519865ea035646e8f9612ce13aa013c07f1bcf3f2414fdedc84bd2400c6110eecde45ff6f0fb241b252308f60125318541a3f50fe1a3ef3b041a48d49dbfaada617e7c1c4f826f08d47e3326e5c6c8486d58eb2da10cd8dd127e97462ac888b1ca459184cad3e3a11ae347b8a06c2428860b27a95343674064de77db8448526aae592b5929e05c8de", @generic="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"]}, 0x24c4}, 0x1, 0x0, 0x0, 0x9b30a0e92216514a}, 0x20000440) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000002800)=0x1a, 0x4) r4 = syz_open_dev$mice(&(0x7f0000002700)='/dev/input/mice\x00', 0x0, 0x141100) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000002740)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) getpeername$unix(r7, &(0x7f0000002980), &(0x7f0000000000)=0x6e) write$apparmor_exec(r5, &(0x7f0000002840)={'stack ', '\x00'}, 0x7) 01:29:29 executing program 4 (fault-call:1 fault-nth:10): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed5f9e2943cfb3fc, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x5f26de1bab5e7152) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) [ 1432.571535] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1432.587300] FAULT_INJECTION: forcing a failure. [ 1432.587300] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.601194] CPU: 1 PID: 32339 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1432.609134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.618502] Call Trace: [ 1432.621112] dump_stack+0x142/0x197 [ 1432.624792] should_fail.cold+0x10f/0x159 [ 1432.628967] should_failslab+0xdb/0x130 [ 1432.632965] kmem_cache_alloc_node_trace+0x280/0x770 [ 1432.638086] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1432.643554] __kmalloc_node_track_caller+0x3d/0x80 [ 1432.648507] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1432.653196] __alloc_skb+0xcf/0x500 [ 1432.657011] ? skb_scrub_packet+0x4b0/0x4b0 [ 1432.661371] ? if_nlmsg_size+0x38f/0x810 [ 1432.665475] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1432.670074] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1432.674846] rtmsg_ifinfo+0x6f/0x90 [ 1432.678494] netdev_state_change+0xd3/0xe0 [ 1432.682747] ? dev_valid_name+0x1b0/0x1b0 [ 1432.686912] ? set_operstate+0x11a/0x150 [ 1432.690991] do_setlink+0x2415/0x2d50 [ 1432.694811] ? __lock_acquire+0x5f7/0x4620 [ 1432.699060] ? rtnl_register+0x50/0x50 [ 1432.702969] ? trace_hardirqs_on+0x10/0x10 [ 1432.707225] ? trace_hardirqs_on+0x10/0x10 [ 1432.711473] ? is_bpf_text_address+0x7f/0x120 [ 1432.715985] ? save_trace+0x290/0x290 [ 1432.719800] ? __lock_acquire+0x5f7/0x4620 [ 1432.724044] ? __lock_is_held+0xb6/0x140 [ 1432.728116] ? find_held_lock+0x35/0x130 [ 1432.732188] ? save_trace+0x290/0x290 [ 1432.736033] ? __update_load_avg_se.isra.0+0x3ba/0x530 [ 1432.741333] ? mark_held_locks+0xb1/0x100 [ 1432.745493] ? retint_kernel+0x2d/0x2d [ 1432.749394] ? validate_nla+0x201/0x5f0 [ 1432.753472] ? nla_parse+0x186/0x240 [ 1432.757220] rtnl_newlink+0xbe4/0x1700 [ 1432.761129] ? rtnl_link_unregister+0x200/0x200 [ 1432.765811] ? finish_task_switch+0x178/0x650 [ 1432.770927] ? finish_task_switch+0x14d/0x650 [ 1432.775437] ? __mutex_lock+0x951/0x1470 [ 1432.779523] ? lock_downgrade+0x740/0x740 [ 1432.783711] ? rtnl_link_unregister+0x200/0x200 [ 1432.788391] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1432.792650] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1432.797254] ? netlink_deliver_tap+0x93/0x8f0 [ 1432.801771] netlink_rcv_skb+0x14f/0x3c0 [ 1432.805845] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1432.810443] ? lock_downgrade+0x740/0x740 [ 1432.814710] ? netlink_ack+0x9a0/0x9a0 [ 1432.818618] ? netlink_deliver_tap+0xba/0x8f0 [ 1432.823165] rtnetlink_rcv+0x1d/0x30 [ 1432.826893] netlink_unicast+0x45d/0x640 [ 1432.830969] ? netlink_attachskb+0x6a0/0x6a0 [ 1432.835389] ? security_netlink_send+0x81/0xb0 [ 1432.840423] netlink_sendmsg+0x7c4/0xc60 [ 1432.844502] ? netlink_unicast+0x640/0x640 [ 1432.848754] ? security_socket_sendmsg+0x89/0xb0 [ 1432.853521] ? netlink_unicast+0x640/0x640 [ 1432.857768] sock_sendmsg+0xce/0x110 [ 1432.861497] ___sys_sendmsg+0x70a/0x840 [ 1432.865483] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1432.870281] ? __fget+0x210/0x370 [ 1432.873754] ? find_held_lock+0x35/0x130 [ 1432.877829] ? __fget+0x210/0x370 [ 1432.881297] ? lock_downgrade+0x740/0x740 [ 1432.885462] ? __fget+0x237/0x370 [ 1432.888932] ? __fget_light+0x172/0x1f0 [ 1432.892928] ? __fdget+0x1b/0x20 [ 1432.896317] ? sockfd_lookup_light+0xb4/0x160 [ 1432.900824] __sys_sendmsg+0xb9/0x140 [ 1432.904637] ? SyS_shutdown+0x170/0x170 [ 1432.908639] SyS_sendmsg+0x2d/0x50 [ 1432.912190] ? __sys_sendmsg+0x140/0x140 [ 1432.919308] do_syscall_64+0x1e8/0x640 [ 1432.923210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1432.928080] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1432.933277] RIP: 0033:0x45a639 [ 1432.936470] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1432.944192] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1432.951474] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1432.958756] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1432.966036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1432.973343] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1433.052257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1336 sclass=netlink_route_socket pig=32349 comm=syz-executor.5 01:29:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x200) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000380)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r9, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000700)=""/167) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x2}}, 0x18) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) 01:29:30 executing program 4 (fault-call:1 fault-nth:11): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xef1, r1}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80, 0x0) write$input_event(r3, &(0x7f0000000140)={{}, 0x12, 0x2, 0x6}, 0x18) ioctl$SG_EMULATED_HOST(r2, 0xc0347c03, &(0x7f0000000000)) [ 1433.280139] protocol 88fb is buggy, dev hsr_slave_0 [ 1433.285423] protocol 88fb is buggy, dev hsr_slave_1 [ 1433.288474] FAULT_INJECTION: forcing a failure. [ 1433.288474] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.348949] CPU: 1 PID: 32359 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1433.356926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.366320] Call Trace: [ 1433.368926] dump_stack+0x142/0x197 [ 1433.372572] should_fail.cold+0x10f/0x159 [ 1433.376737] should_failslab+0xdb/0x130 [ 1433.380724] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1433.385757] __kmalloc_node_track_caller+0x3d/0x80 [ 1433.390700] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1433.395387] pskb_expand_head+0x116/0xc10 [ 1433.399556] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1433.403886] ? kasan_kmalloc+0xce/0xf0 [ 1433.407788] netlink_trim+0x1c1/0x230 [ 1433.411608] netlink_broadcast_filtered+0x5c/0x9f0 [ 1433.416685] ? skb_scrub_packet+0x4b0/0x4b0 [ 1433.421033] nlmsg_notify+0x7c/0x190 [ 1433.424757] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1433.429523] rtmsg_ifinfo+0x6f/0x90 [ 1433.433164] netdev_state_change+0xd3/0xe0 [ 1433.437416] ? dev_valid_name+0x1b0/0x1b0 [ 1433.441580] ? set_operstate+0x11a/0x150 [ 1433.445652] do_setlink+0x2415/0x2d50 [ 1433.449468] ? rtnl_register+0x50/0x50 [ 1433.453391] ? trace_hardirqs_on+0x10/0x10 [ 1433.457641] ? save_trace+0x290/0x290 [ 1433.461455] ? is_bpf_text_address+0x7f/0x120 [ 1433.465971] ? __lock_acquire+0x5f7/0x4620 [ 1433.470244] ? __lock_acquire+0x5f7/0x4620 [ 1433.474497] ? __lock_acquire+0x5f7/0x4620 [ 1433.478747] ? trace_hardirqs_on+0x10/0x10 [ 1433.482990] ? validate_nla+0x201/0x5f0 [ 1433.486975] ? nla_parse+0x186/0x240 [ 1433.490697] rtnl_newlink+0xbe4/0x1700 [ 1433.494605] ? rtnl_link_unregister+0x200/0x200 [ 1433.499288] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1433.503983] ? lock_acquire+0x16f/0x430 [ 1433.507973] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1433.512422] ? rtnl_link_unregister+0x200/0x200 [ 1433.517128] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1433.521403] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1433.526001] ? netlink_deliver_tap+0x93/0x8f0 [ 1433.530516] netlink_rcv_skb+0x14f/0x3c0 [ 1433.534599] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1433.539194] ? lock_downgrade+0x740/0x740 [ 1433.543350] ? netlink_ack+0x9a0/0x9a0 [ 1433.547253] ? netlink_deliver_tap+0xba/0x8f0 [ 1433.551761] rtnetlink_rcv+0x1d/0x30 [ 1433.555498] netlink_unicast+0x45d/0x640 [ 1433.559575] ? netlink_attachskb+0x6a0/0x6a0 [ 1433.563990] ? security_netlink_send+0x81/0xb0 [ 1433.568585] netlink_sendmsg+0x7c4/0xc60 [ 1433.572661] ? netlink_unicast+0x640/0x640 [ 1433.576901] ? security_socket_sendmsg+0x89/0xb0 [ 1433.581667] ? netlink_unicast+0x640/0x640 [ 1433.585907] sock_sendmsg+0xce/0x110 [ 1433.589645] ___sys_sendmsg+0x70a/0x840 [ 1433.593749] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1433.598515] ? __fget+0x210/0x370 [ 1433.601985] ? find_held_lock+0x35/0x130 [ 1433.606058] ? __fget+0x210/0x370 [ 1433.609524] ? lock_downgrade+0x740/0x740 [ 1433.613685] ? __fget+0x237/0x370 [ 1433.617149] ? __fget_light+0x172/0x1f0 [ 1433.621131] ? __fdget+0x1b/0x20 [ 1433.624499] ? sockfd_lookup_light+0xb4/0x160 [ 1433.629002] __sys_sendmsg+0xb9/0x140 [ 1433.632811] ? SyS_shutdown+0x170/0x170 [ 1433.636807] SyS_sendmsg+0x2d/0x50 [ 1433.640359] ? __sys_sendmsg+0x140/0x140 [ 1433.644426] do_syscall_64+0x1e8/0x640 [ 1433.648317] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1433.653174] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1433.658373] RIP: 0033:0x45a639 [ 1433.661565] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1433.669284] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1433.670120] protocol 88fb is buggy, dev hsr_slave_0 [ 1433.676678] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1433.676685] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 01:29:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:30 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) dup2(r1, r1) 01:29:30 executing program 4 (fault-call:1 fault-nth:12): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1433.676691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1433.676696] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1433.696403] protocol 88fb is buggy, dev hsr_slave_1 [ 1433.779268] FAULT_INJECTION: forcing a failure. [ 1433.779268] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.791871] CPU: 1 PID: 32370 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1433.799791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.809156] Call Trace: [ 1433.811767] dump_stack+0x142/0x197 [ 1433.815419] should_fail.cold+0x10f/0x159 [ 1433.819590] should_failslab+0xdb/0x130 [ 1433.823580] kmem_cache_alloc_node+0x287/0x780 [ 1433.828184] __alloc_skb+0x9c/0x500 [ 1433.831827] ? skb_scrub_packet+0x4b0/0x4b0 [ 1433.836156] ? if_nlmsg_size+0x38f/0x810 [ 1433.840229] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1433.844822] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1433.849587] rtmsg_ifinfo+0x6f/0x90 [ 1433.853229] netdev_state_change+0xd3/0xe0 [ 1433.857478] ? dev_valid_name+0x1b0/0x1b0 [ 1433.861637] ? set_operstate+0x11a/0x150 [ 1433.865705] do_setlink+0x2415/0x2d50 [ 1433.869518] ? __lock_acquire+0x5f7/0x4620 [ 1433.873760] ? rtnl_register+0x50/0x50 [ 1433.877657] ? trace_hardirqs_on+0x10/0x10 [ 1433.881904] ? trace_hardirqs_on+0x10/0x10 [ 1433.886147] ? is_bpf_text_address+0x7f/0x120 [ 1433.890647] ? save_trace+0x290/0x290 [ 1433.894467] ? __lock_acquire+0x5f7/0x4620 [ 1433.898711] ? __lock_is_held+0xb6/0x140 [ 1433.902778] ? save_trace+0x290/0x290 [ 1433.906584] ? save_trace+0x290/0x290 [ 1433.910398] ? trace_hardirqs_on+0x10/0x10 [ 1433.914645] ? validate_nla+0x201/0x5f0 [ 1433.918625] ? nla_parse+0x186/0x240 [ 1433.922357] rtnl_newlink+0xbe4/0x1700 [ 1433.926266] ? rtnl_link_unregister+0x200/0x200 [ 1433.930940] ? finish_task_switch+0x178/0x650 [ 1433.935442] ? finish_task_switch+0x14d/0x650 [ 1433.939942] ? __mutex_lock+0x951/0x1470 [ 1433.944024] ? lock_downgrade+0x740/0x740 [ 1433.948208] ? rtnl_link_unregister+0x200/0x200 [ 1433.952881] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1433.957124] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1433.961717] ? netlink_deliver_tap+0x93/0x8f0 [ 1433.966223] netlink_rcv_skb+0x14f/0x3c0 [ 1433.970292] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1433.974881] ? lock_downgrade+0x740/0x740 [ 1433.979116] ? netlink_ack+0x9a0/0x9a0 [ 1433.983006] ? netlink_deliver_tap+0xba/0x8f0 [ 1433.987503] rtnetlink_rcv+0x1d/0x30 [ 1433.991218] netlink_unicast+0x45d/0x640 [ 1433.995292] ? netlink_attachskb+0x6a0/0x6a0 [ 1433.999712] ? security_netlink_send+0x81/0xb0 [ 1434.004302] netlink_sendmsg+0x7c4/0xc60 [ 1434.008378] ? netlink_unicast+0x640/0x640 [ 1434.012623] ? security_socket_sendmsg+0x89/0xb0 [ 1434.017429] ? netlink_unicast+0x640/0x640 [ 1434.021671] sock_sendmsg+0xce/0x110 [ 1434.025395] ___sys_sendmsg+0x70a/0x840 [ 1434.029485] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1434.034251] ? __fget+0x210/0x370 [ 1434.037713] ? find_held_lock+0x35/0x130 [ 1434.041782] ? __fget+0x210/0x370 [ 1434.045242] ? lock_downgrade+0x740/0x740 [ 1434.049409] ? __fget+0x237/0x370 [ 1434.052870] ? __fget_light+0x172/0x1f0 [ 1434.057025] ? __fdget+0x1b/0x20 [ 1434.060397] ? sockfd_lookup_light+0xb4/0x160 [ 1434.064901] __sys_sendmsg+0xb9/0x140 [ 1434.068708] ? SyS_shutdown+0x170/0x170 [ 1434.072702] SyS_sendmsg+0x2d/0x50 [ 1434.076245] ? __sys_sendmsg+0x140/0x140 [ 1434.080313] do_syscall_64+0x1e8/0x640 [ 1434.084202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1434.089077] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1434.094270] RIP: 0033:0x45a639 [ 1434.097459] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1434.105260] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1434.112532] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1434.119809] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 01:29:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x400000, 0x7fffffff, 0x0, 0x0, 0x3f}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x200) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x9d, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r10, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}, r11}}, 0x120) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r11, 0x2}}, 0x18) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) [ 1434.127092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1434.134368] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:31 executing program 4 (fault-call:1 fault-nth:13): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2100, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0xffffffff, 0x2) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r13, &(0x7f0000000100)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r17, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001700)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001800)=0xe8) r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001840)='/selinux/enforce\x00', 0x800, 0x0) r20 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/mls\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@newlink={0x20c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xffffffffffffffe1, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x74, 0x1, {0x1, 0x4, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x89c1db35c36079e3, 0x2, 0x0, r20, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000000c0)='GPL\x00', 0xfff, 0xdd, &(0x7f0000000200)=""/221, 0x41000, 0x2, [], r7, 0x2, r8, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xd, 0x8000, 0xf8d}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0xc, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x200}, [@map={0x18, 0x9, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0x7, 0x8, 0x5, 0xffffffffffffffe0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0xfffff13b, 0x44, &(0x7f0000000380)=""/68, 0x40f00, 0x4, [], 0x0, 0x2, r10, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x8, 0x3, 0x48}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0x15, 0x1, &(0x7f0000000480)=@raw=[@generic={0x40, 0x5, 0xb, 0x7, 0x910b}], &(0x7f00000004c0)='GPL\x00', 0xfff, 0xc3, &(0x7f0000000500)=""/195, 0x41000, 0x0, [], r16, 0x16, r17, 0x8, &(0x7f0000000600)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x9, 0x7}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0x11, 0x6, &(0x7f0000000680)=@raw=[@exit, @ldst={0x2, 0x1, 0x0, 0x7, 0xf, 0x40, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xa, 0xbb8666a8d5ea14d5, 0x6, 0x8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, @exit], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x1, [], r18, 0x11, r19, 0x8, &(0x7f0000001880)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x5, 0x7, 0x9, 0x1}, 0x10}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 01:29:31 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() r2 = getpid() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x0, 0x5, [0x258, 0x20000], [0xc1]}) rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, r2, 0x388, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = gettid() ptrace$peek(0x1, r7, &(0x7f0000000180)) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000380)="0699d88bafebbe6dbb7abb730c63ca0fc552e351e32f65ec99c58e87bfb725820d7d8b50f8058b10b8c3f3724cad03589daa2106f0cb0014ef667367b250fc7c1552dd0875426f1fad2760e490ffd55a164ff3980bef98578e5d7f32f8d97fb62b109366d136fc3ac5eecb5980e4066f14c3f08c9dd7206204c2ca4c2a78e1cb19b365ef4aa81980cf21bedb4125f2c0891f600a1751c75cff2e76844e0f9298b2e9db7fce51452a06841b93101b0118864d7fe61ffa0afe05a2631b349f251ad07c2a367d63197125", 0xc9, 0x20044004, &(0x7f0000000080)={0x11, 0x1e7, r8, 0x1, 0x80, 0x6, @dev={[], 0x10}}, 0x14) r9 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0xffffffff, 0x2) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0xffffffff, 0x2) r16 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x8, 0x8000) r17 = openat$userio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/userio\x00', 0x20000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r19 = socket$inet_udp(0x2, 0x2, 0x0) close(r19) splice(r18, 0x0, r19, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r21 = socket$inet_udp(0x2, 0x2, 0x0) close(r21) splice(r20, 0x0, r21, 0x0, 0xffffffff, 0x2) r22 = accept4$nfc_llcp(r20, &(0x7f0000000640), &(0x7f00000006c0)=0x60, 0x80000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r24 = socket$inet_udp(0x2, 0x2, 0x0) close(r24) splice(r23, 0x0, r24, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r25, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r26, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r27 = getpid() sched_setattr(r27, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r28, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r29, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r30}) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r34 = socket$inet_udp(0x2, 0x2, 0x0) close(r34) splice(r33, 0x0, r34, 0x0, 0xffffffff, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r33, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xfffffffffffffda3) r36 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r36, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r37, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000900)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r40 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r39, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r40, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r41}) r42 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r42, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r43, 0x0) r44 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r46 = socket$inet_udp(0x2, 0x2, 0x0) close(r46) splice(r45, 0x0, r46, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r50 = socket$inet_udp(0x2, 0x2, 0x0) close(r50) splice(r49, 0x0, r50, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r52 = socket$inet_udp(0x2, 0x2, 0x0) close(r52) splice(r51, 0x0, r52, 0x0, 0xffffffff, 0x2) pipe(&(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r55 = socket$inet_udp(0x2, 0x2, 0x0) close(r55) splice(r54, 0x0, r55, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r57 = socket$inet_udp(0x2, 0x2, 0x0) close(r57) splice(r56, 0x0, r57, 0x0, 0xffffffff, 0x2) sendmsg$unix(r10, &(0x7f0000000b00)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000480)="a2eedc7df1c30414718ac3d2dbc2b5556b1f72a5b23b5cd209ac4e61c67143ac380359a0549065697174bf7b94fc255d2a2fdc6ac47042236730995e855f4c0c3d4971dd7282305015526008e9de0103a8cf0c36c85aadacf5627b65f06df155f3b8c5", 0x63}, {&(0x7f0000000500)="a79553dcbae8a720ac1e473ce0c716c204000d649b39c15d33b5d59c41ababbc6eda2b9c6683ce746cd790dc8eca3db7ce8f1c9cb3505f88cc10ab1c45661e8fd95a4df47c7aa56f40d96e62c3bad48cab4fcc2d854066e3ed252f5f4f3a8de61b3f8ead07f4fd008a067a6b9e7c2d476591806840c0f814d40961e2e6cee289665eb8224a44d257ead03c20f89bcd05fc790d6f36cf8b23a65c775c885a9a12", 0xa0}], 0x2, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r6, r4, r13, r5, r15, r16]}}, @rights={{0x2c, 0x1, 0x1, [r0, r17, r18, r22, r5, r23, r3]}}, @rights={{0x1c, 0x1, 0x1, [r6, r25, r26]}}, @cred={{0x1c, 0x1, 0x2, {r27, r30, r31}}}, @cred={{0x1c, 0x1, 0x2, {r32, r35, r37}}}, @cred={{0x1c, 0x1, 0x2, {r38, r41, r43}}}, @rights={{0x24, 0x1, 0x1, [r44, r46, r3, r3, r3]}}, @rights={{0x1c, 0x1, 0x1, [r47, r50, r4]}}, @rights={{0x2c, 0x1, 0x1, [r51, r53, r54, r4, r56, r9, 0xffffffffffffffff]}}], 0x170, 0x4000000}, 0x20040004) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r58, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCNXCL(r58, 0x540d) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) [ 1434.508666] FAULT_INJECTION: forcing a failure. [ 1434.508666] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.524690] CPU: 1 PID: 32387 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1434.532639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1434.537445] Unknown ioctl 1075883638 [ 1434.542002] Call Trace: [ 1434.542026] dump_stack+0x142/0x197 [ 1434.542044] should_fail.cold+0x10f/0x159 [ 1434.542060] should_failslab+0xdb/0x130 [ 1434.542070] kmem_cache_alloc_node+0x287/0x780 [ 1434.542089] __alloc_skb+0x9c/0x500 [ 1434.542099] ? skb_scrub_packet+0x4b0/0x4b0 [ 1434.542109] ? if_nlmsg_size+0x38f/0x810 [ 1434.542124] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1434.542138] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1434.542149] rtmsg_ifinfo+0x6f/0x90 [ 1434.542162] netdev_state_change+0xd3/0xe0 [ 1434.593770] ? dev_valid_name+0x1b0/0x1b0 [ 1434.597901] ? set_operstate+0x11a/0x150 [ 1434.601945] do_setlink+0x2415/0x2d50 [ 1434.605741] ? finish_task_switch+0x178/0x650 [ 1434.610222] ? rtnl_register+0x50/0x50 [ 1434.614116] ? __lock_acquire+0x5f7/0x4620 [ 1434.618334] ? _raw_spin_unlock_irq+0x28/0x90 [ 1434.622810] ? trace_hardirqs_on_caller+0x400/0x590 [ 1434.627823] ? trace_hardirqs_on+0x10/0x10 [ 1434.632041] ? save_trace+0x290/0x290 [ 1434.635822] ? __schedule+0x7c0/0x1cd0 [ 1434.639692] ? rcu_read_unlock_special+0x639/0xd40 [ 1434.644603] ? find_held_lock+0x35/0x130 [ 1434.648646] ? rcu_read_unlock_special+0x639/0xd40 [ 1434.653561] ? validate_nla+0x201/0x5f0 [ 1434.657528] ? nla_parse+0x186/0x240 [ 1434.661224] rtnl_newlink+0xbe4/0x1700 [ 1434.665223] ? rtnl_link_unregister+0x200/0x200 [ 1434.669875] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1434.674546] ? lock_acquire+0x16f/0x430 [ 1434.678500] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1434.682912] ? rtnl_link_unregister+0x200/0x200 [ 1434.687571] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1434.691788] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1434.696365] ? netlink_deliver_tap+0x93/0x8f0 [ 1434.700846] netlink_rcv_skb+0x14f/0x3c0 [ 1434.704888] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1434.709451] ? lock_downgrade+0x740/0x740 [ 1434.713581] ? netlink_ack+0x9a0/0x9a0 [ 1434.717452] ? netlink_deliver_tap+0xba/0x8f0 [ 1434.721941] rtnetlink_rcv+0x1d/0x30 [ 1434.725637] netlink_unicast+0x45d/0x640 [ 1434.729683] ? netlink_attachskb+0x6a0/0x6a0 [ 1434.734077] ? security_netlink_send+0x81/0xb0 [ 1434.738641] netlink_sendmsg+0x7c4/0xc60 [ 1434.742687] ? netlink_unicast+0x640/0x640 [ 1434.746905] ? security_socket_sendmsg+0x89/0xb0 [ 1434.751641] ? netlink_unicast+0x640/0x640 [ 1434.755857] sock_sendmsg+0xce/0x110 [ 1434.759578] ___sys_sendmsg+0x70a/0x840 [ 1434.763539] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1434.768280] ? __fget+0x210/0x370 [ 1434.771717] ? find_held_lock+0x35/0x130 [ 1434.775762] ? __fget+0x210/0x370 [ 1434.779200] ? lock_downgrade+0x740/0x740 [ 1434.783349] ? __fget+0x237/0x370 [ 1434.786798] ? __fget_light+0x172/0x1f0 [ 1434.790759] ? __fdget+0x1b/0x20 [ 1434.794108] ? sockfd_lookup_light+0xb4/0x160 [ 1434.798588] __sys_sendmsg+0xb9/0x140 [ 1434.802383] ? SyS_shutdown+0x170/0x170 [ 1434.806358] SyS_sendmsg+0x2d/0x50 [ 1434.809880] ? __sys_sendmsg+0x140/0x140 [ 1434.813922] do_syscall_64+0x1e8/0x640 [ 1434.817792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1434.822622] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1434.827795] RIP: 0033:0x45a639 [ 1434.830971] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1434.838661] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1434.845923] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1434.853185] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 01:29:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1434.860439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1434.867692] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:32 executing program 4 (fault-call:1 fault-nth:14): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1435.044919] netlink: 484 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1435.062666] FAULT_INJECTION: forcing a failure. [ 1435.062666] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.096162] CPU: 1 PID: 32403 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1435.104124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.113494] Call Trace: [ 1435.116201] dump_stack+0x142/0x197 [ 1435.119858] should_fail.cold+0x10f/0x159 [ 1435.124031] should_failslab+0xdb/0x130 [ 1435.128025] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1435.133066] __kmalloc_node_track_caller+0x3d/0x80 [ 1435.138016] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1435.142707] pskb_expand_head+0x116/0xc10 [ 1435.146871] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1435.151210] ? kasan_kmalloc+0xce/0xf0 [ 1435.155126] netlink_trim+0x1c1/0x230 [ 1435.158946] netlink_broadcast_filtered+0x5c/0x9f0 [ 1435.164514] ? skb_scrub_packet+0x4b0/0x4b0 [ 1435.168944] nlmsg_notify+0x7c/0x190 [ 1435.172681] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1435.177458] rtmsg_ifinfo+0x6f/0x90 [ 1435.181107] netdev_state_change+0xd3/0xe0 [ 1435.185359] ? dev_valid_name+0x1b0/0x1b0 [ 1435.189516] ? set_operstate+0x11a/0x150 [ 1435.193589] do_setlink+0x2415/0x2d50 [ 1435.197406] ? __lock_acquire+0x5f7/0x4620 [ 1435.201656] ? rtnl_register+0x50/0x50 [ 1435.205555] ? trace_hardirqs_on+0x10/0x10 [ 1435.209806] ? trace_hardirqs_on+0x10/0x10 [ 1435.214051] ? is_bpf_text_address+0x7f/0x120 [ 1435.218580] ? save_trace+0x290/0x290 [ 1435.222398] ? __lock_acquire+0x5f7/0x4620 [ 1435.226644] ? __lock_is_held+0xb6/0x140 [ 1435.230712] ? find_held_lock+0x35/0x130 [ 1435.234784] ? save_trace+0x290/0x290 [ 1435.238594] ? __update_load_avg_se.isra.0+0x3ba/0x530 [ 1435.243889] ? trace_hardirqs_on+0x10/0x10 [ 1435.248135] ? validate_nla+0x201/0x5f0 [ 1435.252127] ? nla_parse+0x186/0x240 [ 1435.255859] rtnl_newlink+0xbe4/0x1700 [ 1435.259774] ? rtnl_link_unregister+0x200/0x200 [ 1435.264460] ? finish_task_switch+0x178/0x650 [ 1435.268976] ? finish_task_switch+0x14d/0x650 [ 1435.273485] ? __mutex_lock+0x951/0x1470 [ 1435.277573] ? lock_downgrade+0x740/0x740 [ 1435.281763] ? rtnl_link_unregister+0x200/0x200 [ 1435.286468] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1435.290722] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1435.295327] ? netlink_deliver_tap+0x93/0x8f0 [ 1435.299843] netlink_rcv_skb+0x14f/0x3c0 [ 1435.303928] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1435.308527] ? lock_downgrade+0x740/0x740 [ 1435.312688] ? netlink_ack+0x9a0/0x9a0 [ 1435.316589] ? netlink_deliver_tap+0xba/0x8f0 [ 1435.321103] rtnetlink_rcv+0x1d/0x30 [ 1435.324834] netlink_unicast+0x45d/0x640 [ 1435.328939] ? netlink_attachskb+0x6a0/0x6a0 [ 1435.333365] ? security_netlink_send+0x81/0xb0 [ 1435.337961] netlink_sendmsg+0x7c4/0xc60 [ 1435.342045] ? netlink_unicast+0x640/0x640 [ 1435.346301] ? security_socket_sendmsg+0x89/0xb0 [ 1435.351071] ? netlink_unicast+0x640/0x640 [ 1435.355316] sock_sendmsg+0xce/0x110 [ 1435.359042] ___sys_sendmsg+0x70a/0x840 [ 1435.363030] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1435.367797] ? __fget+0x210/0x370 [ 1435.371270] ? find_held_lock+0x35/0x130 [ 1435.375365] ? __fget+0x210/0x370 [ 1435.378839] ? lock_downgrade+0x740/0x740 [ 1435.383005] ? __fget+0x237/0x370 [ 1435.386477] ? __fget_light+0x172/0x1f0 [ 1435.390466] ? __fdget+0x1b/0x20 [ 1435.393871] ? sockfd_lookup_light+0xb4/0x160 [ 1435.398375] __sys_sendmsg+0xb9/0x140 [ 1435.402188] ? SyS_shutdown+0x170/0x170 [ 1435.406190] SyS_sendmsg+0x2d/0x50 [ 1435.409745] ? __sys_sendmsg+0x140/0x140 [ 1435.413821] do_syscall_64+0x1e8/0x640 [ 1435.417719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1435.422585] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1435.427789] RIP: 0033:0x45a639 [ 1435.430983] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1435.438704] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1435.445987] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1435.453269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1435.460556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1435.467839] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1435.475932] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.481100] protocol 88fb is buggy, dev hsr_slave_1 01:29:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x800, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r3, 0xd, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) r6 = accept$packet(r4, 0x0, &(0x7f0000000340)) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000380)=0x82c, 0x4) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x10c, r3, 0xc, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5412}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa44f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4040}, 0xe71058db9b56ccda) 01:29:32 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() r2 = getpid() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x0, 0x5, [0x258, 0x20000], [0xc1]}) rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, r2, 0x388, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = gettid() ptrace$peek(0x1, r7, &(0x7f0000000180)) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000380)="0699d88bafebbe6dbb7abb730c63ca0fc552e351e32f65ec99c58e87bfb725820d7d8b50f8058b10b8c3f3724cad03589daa2106f0cb0014ef667367b250fc7c1552dd0875426f1fad2760e490ffd55a164ff3980bef98578e5d7f32f8d97fb62b109366d136fc3ac5eecb5980e4066f14c3f08c9dd7206204c2ca4c2a78e1cb19b365ef4aa81980cf21bedb4125f2c0891f600a1751c75cff2e76844e0f9298b2e9db7fce51452a06841b93101b0118864d7fe61ffa0afe05a2631b349f251ad07c2a367d63197125", 0xc9, 0x20044004, &(0x7f0000000080)={0x11, 0x1e7, r8, 0x1, 0x80, 0x6, @dev={[], 0x10}}, 0x14) r9 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0xffffffff, 0x2) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0xffffffff, 0x2) r16 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x8, 0x8000) r17 = openat$userio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/userio\x00', 0x20000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r19 = socket$inet_udp(0x2, 0x2, 0x0) close(r19) splice(r18, 0x0, r19, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r21 = socket$inet_udp(0x2, 0x2, 0x0) close(r21) splice(r20, 0x0, r21, 0x0, 0xffffffff, 0x2) r22 = accept4$nfc_llcp(r20, &(0x7f0000000640), &(0x7f00000006c0)=0x60, 0x80000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r24 = socket$inet_udp(0x2, 0x2, 0x0) close(r24) splice(r23, 0x0, r24, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r25, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r26, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r27 = getpid() sched_setattr(r27, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r28, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r29, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r30}) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r34 = socket$inet_udp(0x2, 0x2, 0x0) close(r34) splice(r33, 0x0, r34, 0x0, 0xffffffff, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r33, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xfffffffffffffda3) r36 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r36, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r37, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000900)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r40 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r39, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r40, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r41}) r42 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r42, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r43, 0x0) r44 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r46 = socket$inet_udp(0x2, 0x2, 0x0) close(r46) splice(r45, 0x0, r46, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r48 = socket$inet_udp(0x2, 0x2, 0x0) close(r48) splice(r47, 0x0, r48, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r50 = socket$inet_udp(0x2, 0x2, 0x0) close(r50) splice(r49, 0x0, r50, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r52 = socket$inet_udp(0x2, 0x2, 0x0) close(r52) splice(r51, 0x0, r52, 0x0, 0xffffffff, 0x2) pipe(&(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r55 = socket$inet_udp(0x2, 0x2, 0x0) close(r55) splice(r54, 0x0, r55, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r57 = socket$inet_udp(0x2, 0x2, 0x0) close(r57) splice(r56, 0x0, r57, 0x0, 0xffffffff, 0x2) sendmsg$unix(r10, &(0x7f0000000b00)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000480)="a2eedc7df1c30414718ac3d2dbc2b5556b1f72a5b23b5cd209ac4e61c67143ac380359a0549065697174bf7b94fc255d2a2fdc6ac47042236730995e855f4c0c3d4971dd7282305015526008e9de0103a8cf0c36c85aadacf5627b65f06df155f3b8c5", 0x63}, {&(0x7f0000000500)="a79553dcbae8a720ac1e473ce0c716c204000d649b39c15d33b5d59c41ababbc6eda2b9c6683ce746cd790dc8eca3db7ce8f1c9cb3505f88cc10ab1c45661e8fd95a4df47c7aa56f40d96e62c3bad48cab4fcc2d854066e3ed252f5f4f3a8de61b3f8ead07f4fd008a067a6b9e7c2d476591806840c0f814d40961e2e6cee289665eb8224a44d257ead03c20f89bcd05fc790d6f36cf8b23a65c775c885a9a12", 0xa0}], 0x2, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r6, r4, r13, r5, r15, r16]}}, @rights={{0x2c, 0x1, 0x1, [r0, r17, r18, r22, r5, r23, r3]}}, @rights={{0x1c, 0x1, 0x1, [r6, r25, r26]}}, @cred={{0x1c, 0x1, 0x2, {r27, r30, r31}}}, @cred={{0x1c, 0x1, 0x2, {r32, r35, r37}}}, @cred={{0x1c, 0x1, 0x2, {r38, r41, r43}}}, @rights={{0x24, 0x1, 0x1, [r44, r46, r3, r3, r3]}}, @rights={{0x1c, 0x1, 0x1, [r47, r50, r4]}}, @rights={{0x2c, 0x1, 0x1, [r51, r53, r54, r4, r56, r9, 0xffffffffffffffff]}}], 0x170, 0x4000000}, 0x20040004) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r58, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCNXCL(r58, 0x540d) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) 01:29:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8001, {}, {}, @connect={{}, {0x0, 0x2}}}], 0x30) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x200) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x2) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0xffffffff, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x9d, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r11, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}, r12}}, 0x120) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r12, 0x2}}, 0x18) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) 01:29:32 executing program 4 (fault-call:1 fault-nth:15): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r6 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r6, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@initdev, @rand_addr, @empty}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1435.852960] FAULT_INJECTION: forcing a failure. [ 1435.852960] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.874769] CPU: 1 PID: 32424 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1435.882732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.892108] Call Trace: [ 1435.894726] dump_stack+0x142/0x197 [ 1435.898393] should_fail.cold+0x10f/0x159 [ 1435.902565] should_failslab+0xdb/0x130 [ 1435.906559] kmem_cache_alloc_node+0x287/0x780 [ 1435.911168] __alloc_skb+0x9c/0x500 [ 1435.914813] ? skb_scrub_packet+0x4b0/0x4b0 [ 1435.919155] ? if_nlmsg_size+0x38f/0x810 [ 1435.923237] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1435.927843] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1435.932627] rtmsg_ifinfo+0x6f/0x90 [ 1435.936271] netdev_state_change+0xd3/0xe0 [ 1435.940521] ? dev_valid_name+0x1b0/0x1b0 [ 1435.944682] ? set_operstate+0x11a/0x150 [ 1435.948854] do_setlink+0x2415/0x2d50 [ 1435.952673] ? rtnl_register+0x50/0x50 [ 1435.956572] ? trace_hardirqs_on+0x10/0x10 [ 1435.960821] ? save_trace+0x290/0x290 [ 1435.964646] ? is_bpf_text_address+0x7f/0x120 [ 1435.969197] ? __lock_acquire+0x5f7/0x4620 [ 1435.973456] ? __lock_acquire+0x5f7/0x4620 [ 1435.977721] ? __lock_acquire+0x5f7/0x4620 [ 1435.981976] ? trace_hardirqs_on+0x10/0x10 [ 1435.986228] ? validate_nla+0x201/0x5f0 [ 1435.990224] ? nla_parse+0x186/0x240 [ 1435.993953] rtnl_newlink+0xbe4/0x1700 [ 1435.997863] ? rtnl_link_unregister+0x200/0x200 [ 1436.002546] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1436.007249] ? lock_acquire+0x16f/0x430 [ 1436.011238] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1436.015805] ? rtnl_link_unregister+0x200/0x200 [ 1436.020493] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1436.024747] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1436.029351] ? netlink_deliver_tap+0x93/0x8f0 [ 1436.033876] netlink_rcv_skb+0x14f/0x3c0 [ 1436.037958] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1436.042560] ? lock_downgrade+0x740/0x740 [ 1436.046722] ? netlink_ack+0x9a0/0x9a0 [ 1436.050631] ? netlink_deliver_tap+0xba/0x8f0 [ 1436.055145] rtnetlink_rcv+0x1d/0x30 [ 1436.058870] netlink_unicast+0x45d/0x640 [ 1436.062961] ? netlink_attachskb+0x6a0/0x6a0 [ 1436.067389] ? security_netlink_send+0x81/0xb0 [ 1436.071989] netlink_sendmsg+0x7c4/0xc60 [ 1436.076074] ? netlink_unicast+0x640/0x640 [ 1436.080328] ? security_socket_sendmsg+0x89/0xb0 [ 1436.085142] ? netlink_unicast+0x640/0x640 [ 1436.089403] sock_sendmsg+0xce/0x110 [ 1436.093141] ___sys_sendmsg+0x70a/0x840 [ 1436.097133] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1436.101905] ? __fget+0x210/0x370 [ 1436.105375] ? find_held_lock+0x35/0x130 [ 1436.109446] ? __fget+0x210/0x370 [ 1436.112920] ? lock_downgrade+0x740/0x740 [ 1436.117087] ? __fget+0x237/0x370 [ 1436.120559] ? __fget_light+0x172/0x1f0 [ 1436.124554] ? __fdget+0x1b/0x20 [ 1436.127940] ? sockfd_lookup_light+0xb4/0x160 [ 1436.132453] __sys_sendmsg+0xb9/0x140 [ 1436.136279] ? SyS_shutdown+0x170/0x170 [ 1436.140278] SyS_sendmsg+0x2d/0x50 [ 1436.143830] ? __sys_sendmsg+0x140/0x140 [ 1436.147910] do_syscall_64+0x1e8/0x640 [ 1436.151806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1436.156674] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1436.161882] RIP: 0033:0x45a639 [ 1436.165074] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.172813] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1436.180116] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1436.187398] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1436.194679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1436.202077] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1436.220897] Unknown ioctl 1075883638 01:29:33 executing program 4 (fault-call:1 fault-nth:16): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1436.437624] FAULT_INJECTION: forcing a failure. [ 1436.437624] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.453342] CPU: 1 PID: 32439 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1436.461289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1436.470657] Call Trace: [ 1436.473266] dump_stack+0x142/0x197 [ 1436.476937] should_fail.cold+0x10f/0x159 [ 1436.481103] should_failslab+0xdb/0x130 01:29:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000180)=""/221) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f0000000200)=""/255) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x2}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) [ 1436.485093] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1436.490133] __kmalloc_node_track_caller+0x3d/0x80 [ 1436.495079] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1436.499772] pskb_expand_head+0x116/0xc10 [ 1436.503965] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1436.508293] ? kasan_kmalloc+0xce/0xf0 [ 1436.512195] netlink_trim+0x1c1/0x230 [ 1436.516012] netlink_broadcast_filtered+0x5c/0x9f0 [ 1436.520963] ? skb_scrub_packet+0x4b0/0x4b0 [ 1436.525301] nlmsg_notify+0x7c/0x190 [ 1436.529030] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1436.533814] rtmsg_ifinfo+0x6f/0x90 [ 1436.537477] netdev_state_change+0xd3/0xe0 [ 1436.541739] ? dev_valid_name+0x1b0/0x1b0 [ 1436.545904] ? set_operstate+0x11a/0x150 [ 1436.549981] do_setlink+0x2415/0x2d50 [ 1436.553806] ? rtnl_register+0x50/0x50 [ 1436.557708] ? trace_hardirqs_on+0x10/0x10 [ 1436.561957] ? save_trace+0x290/0x290 [ 1436.565775] ? is_bpf_text_address+0x7f/0x120 [ 1436.570294] ? __lock_acquire+0x5f7/0x4620 [ 1436.574545] ? __lock_acquire+0x5f7/0x4620 [ 1436.578807] ? __lock_acquire+0x5f7/0x4620 [ 1436.583042] ? trace_hardirqs_on+0x10/0x10 [ 1436.587272] ? validate_nla+0x201/0x5f0 [ 1436.591237] ? nla_parse+0x186/0x240 [ 1436.594943] rtnl_newlink+0xbe4/0x1700 [ 1436.598830] ? rtnl_link_unregister+0x200/0x200 [ 1436.603500] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1436.608323] ? lock_acquire+0x16f/0x430 [ 1436.612356] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1436.616824] ? rtnl_link_unregister+0x200/0x200 [ 1436.621500] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1436.625749] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1436.630326] ? netlink_deliver_tap+0x93/0x8f0 [ 1436.634824] netlink_rcv_skb+0x14f/0x3c0 [ 1436.638875] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1436.643446] ? lock_downgrade+0x740/0x740 [ 1436.647579] ? netlink_ack+0x9a0/0x9a0 [ 1436.651460] ? netlink_deliver_tap+0xba/0x8f0 [ 1436.655945] rtnetlink_rcv+0x1d/0x30 [ 1436.659659] netlink_unicast+0x45d/0x640 [ 1436.663723] ? netlink_attachskb+0x6a0/0x6a0 [ 1436.668122] ? security_netlink_send+0x81/0xb0 [ 1436.672693] netlink_sendmsg+0x7c4/0xc60 [ 1436.676768] ? netlink_unicast+0x640/0x640 [ 1436.681003] ? security_socket_sendmsg+0x89/0xb0 [ 1436.685755] ? netlink_unicast+0x640/0x640 [ 1436.689977] sock_sendmsg+0xce/0x110 [ 1436.693693] ___sys_sendmsg+0x70a/0x840 [ 1436.697660] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1436.702406] ? __fget+0x210/0x370 [ 1436.705850] ? find_held_lock+0x35/0x130 [ 1436.709897] ? __fget+0x210/0x370 [ 1436.713343] ? lock_downgrade+0x740/0x740 [ 1436.717481] ? __fget+0x237/0x370 [ 1436.720928] ? __fget_light+0x172/0x1f0 [ 1436.724888] ? __fdget+0x1b/0x20 [ 1436.728254] ? sockfd_lookup_light+0xb4/0x160 [ 1436.732739] __sys_sendmsg+0xb9/0x140 [ 1436.736528] ? SyS_shutdown+0x170/0x170 [ 1436.740503] SyS_sendmsg+0x2d/0x50 [ 1436.744037] ? __sys_sendmsg+0x140/0x140 [ 1436.748086] do_syscall_64+0x1e8/0x640 [ 1436.751958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1436.756794] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1436.761972] RIP: 0033:0x45a639 [ 1436.765146] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.772842] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1436.780098] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1436.787356] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1436.794611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1436.801952] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x400000, 0x7fffffff, 0x0, 0x0, 0x3f}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x200) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x9d, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r10, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}, r11}}, 0x120) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r11, 0x2}}, 0x18) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) 01:29:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r6 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r6, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblc\x00', 0x32}, 0x2c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 01:29:34 executing program 4 (fault-call:1 fault-nth:17): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1437.249559] FAULT_INJECTION: forcing a failure. [ 1437.249559] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.291470] CPU: 1 PID: 32462 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1437.299428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1437.308814] Call Trace: [ 1437.311422] dump_stack+0x142/0x197 [ 1437.315083] should_fail.cold+0x10f/0x159 [ 1437.319260] should_failslab+0xdb/0x130 [ 1437.323257] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1437.326121] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xb9c/0xc90 [ 1437.328292] __kmalloc_node_track_caller+0x3d/0x80 [ 1437.328307] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1437.328322] pskb_expand_head+0x116/0xc10 [ 1437.351788] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1437.356128] ? kasan_kmalloc+0xce/0xf0 [ 1437.360033] netlink_trim+0x1c1/0x230 [ 1437.363859] netlink_broadcast_filtered+0x5c/0x9f0 [ 1437.368836] ? skb_scrub_packet+0x4b0/0x4b0 [ 1437.373176] nlmsg_notify+0x7c/0x190 [ 1437.376907] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1437.381675] rtmsg_ifinfo+0x6f/0x90 [ 1437.385316] netdev_state_change+0xd3/0xe0 [ 1437.389564] ? dev_valid_name+0x1b0/0x1b0 [ 1437.393725] ? set_operstate+0x11a/0x150 [ 1437.397799] do_setlink+0x2415/0x2d50 [ 1437.401621] ? rtnl_register+0x50/0x50 [ 1437.405522] ? trace_hardirqs_on+0x10/0x10 [ 1437.409774] ? save_trace+0x290/0x290 [ 1437.413590] ? is_bpf_text_address+0x7f/0x120 [ 1437.418107] ? __lock_acquire+0x5f7/0x4620 [ 1437.422383] ? __lock_acquire+0x5f7/0x4620 [ 1437.426636] ? __lock_acquire+0x5f7/0x4620 [ 1437.430917] ? trace_hardirqs_on+0x10/0x10 [ 1437.435165] ? validate_nla+0x201/0x5f0 [ 1437.439415] ? nla_parse+0x186/0x240 [ 1437.443150] rtnl_newlink+0xbe4/0x1700 [ 1437.447061] ? rtnl_link_unregister+0x200/0x200 [ 1437.451826] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1437.456519] ? lock_acquire+0x16f/0x430 [ 1437.460504] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1437.464974] ? rtnl_link_unregister+0x200/0x200 [ 1437.469651] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1437.473910] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1437.478504] ? netlink_deliver_tap+0x93/0x8f0 [ 1437.483020] netlink_rcv_skb+0x14f/0x3c0 [ 1437.487100] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1437.491700] ? lock_downgrade+0x740/0x740 [ 1437.495866] ? netlink_ack+0x9a0/0x9a0 [ 1437.499777] ? netlink_deliver_tap+0xba/0x8f0 [ 1437.504294] rtnetlink_rcv+0x1d/0x30 [ 1437.508027] netlink_unicast+0x45d/0x640 [ 1437.512106] ? netlink_attachskb+0x6a0/0x6a0 [ 1437.516530] ? security_netlink_send+0x81/0xb0 [ 1437.521127] netlink_sendmsg+0x7c4/0xc60 [ 1437.525208] ? netlink_unicast+0x640/0x640 [ 1437.529462] ? security_socket_sendmsg+0x89/0xb0 [ 1437.534240] ? netlink_unicast+0x640/0x640 [ 1437.538487] sock_sendmsg+0xce/0x110 [ 1437.542222] ___sys_sendmsg+0x70a/0x840 [ 1437.546247] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1437.551018] ? __fget+0x210/0x370 [ 1437.554484] ? find_held_lock+0x35/0x130 [ 1437.558553] ? __fget+0x210/0x370 [ 1437.562023] ? lock_downgrade+0x740/0x740 [ 1437.566184] ? __fget+0x237/0x370 [ 1437.569643] ? __fget_light+0x172/0x1f0 [ 1437.573623] ? __fdget+0x1b/0x20 [ 1437.576994] ? sockfd_lookup_light+0xb4/0x160 [ 1437.581498] __sys_sendmsg+0xb9/0x140 [ 1437.585309] ? SyS_shutdown+0x170/0x170 [ 1437.589302] SyS_sendmsg+0x2d/0x50 [ 1437.592851] ? __sys_sendmsg+0x140/0x140 [ 1437.596921] do_syscall_64+0x1e8/0x640 [ 1437.600816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1437.605674] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1437.610875] RIP: 0033:0x45a639 [ 1437.614070] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.621788] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1437.629070] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 01:29:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000200)=""/109) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000100)={0x3, "4736768cd804c110f5177fa66bab59bf24eb7400c9d2aa31124c89c86207aeaa", 0x7, 0x1}) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0x9, {0x51, 0x3ff, 0x5, 0x8}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'security.', '\x00'}) 01:29:34 executing program 4 (fault-call:1 fault-nth:18): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1437.636353] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1437.643632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1437.650913] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1437.658543] net_ratelimit: 2 callbacks suppressed [ 1437.658549] protocol 88fb is buggy, dev hsr_slave_0 [ 1437.668518] protocol 88fb is buggy, dev hsr_slave_1 01:29:34 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x3c, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000580)=""/151) keyctl$get_persistent(0x16, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x2) ioctl$PPPIOCDISCONN(r1, 0x7439) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0xaaaaacf, &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x1000000000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10000}, {0xa, 0x4e20, 0x1, @remote}, 0x1f, [0x6, 0x81, 0x8, 0x304, 0x4, 0x1, 0x6, 0x7fffffff]}, 0x5c) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r6 = openat$cgroup(r5, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x8, 0x3, 0x1, {0xb8, 0x2, 0x9, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) r9 = openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000006c0)={0x1, 0x80000000, 0x7, 0x0, 0x0, [{r6, 0x0, 0x8}, {r3, 0x0, 0x25c}, {0xffffffffffffffff, 0x0, 0x8001}, {r9, 0x0, 0x4}, {r10, 0x0, 0x1}, {r0, 0x0, 0x6}, {r11, 0x0, 0x2}]}) socket(0x80000000000000a, 0x0, 0x0) [ 1437.773084] FAULT_INJECTION: forcing a failure. [ 1437.773084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1437.784956] CPU: 1 PID: 32473 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1437.792849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1437.802214] Call Trace: [ 1437.804824] dump_stack+0x142/0x197 [ 1437.808470] should_fail.cold+0x10f/0x159 [ 1437.812723] ? inet6_fill_ifla6_attrs+0x1981/0x1ef0 [ 1437.817757] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1437.822444] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1437.827468] ? __local_bh_enable_ip+0x99/0x1a0 [ 1437.830465] protocol 88fb is buggy, dev hsr_slave_0 [ 1437.832069] ? trace_hardirqs_on+0xd/0x10 [ 1437.832080] ? __local_bh_enable_ip+0x99/0x1a0 [ 1437.832093] cache_grow_begin+0x80/0x400 [ 1437.832106] kmem_cache_alloc_node_trace+0x697/0x770 [ 1437.837400] protocol 88fb is buggy, dev hsr_slave_1 [ 1437.841403] __kmalloc_node_track_caller+0x3d/0x80 [ 1437.841418] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1437.841429] pskb_expand_head+0x116/0xc10 [ 1437.841439] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1437.841447] ? kasan_kmalloc+0xce/0xf0 [ 1437.841462] netlink_trim+0x1c1/0x230 [ 1437.841473] netlink_broadcast_filtered+0x5c/0x9f0 [ 1437.841485] ? skb_scrub_packet+0x4b0/0x4b0 [ 1437.841501] nlmsg_notify+0x7c/0x190 [ 1437.898867] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1437.903637] rtmsg_ifinfo+0x6f/0x90 [ 1437.907276] netdev_state_change+0xd3/0xe0 [ 1437.911538] ? dev_valid_name+0x1b0/0x1b0 [ 1437.915688] ? set_operstate+0x11a/0x150 [ 1437.919746] do_setlink+0x2415/0x2d50 [ 1437.923550] ? rtnl_register+0x50/0x50 [ 1437.927448] ? trace_hardirqs_on+0x10/0x10 [ 1437.927462] ? save_trace+0x290/0x290 [ 1437.927476] ? is_bpf_text_address+0x7f/0x120 [ 1437.935536] ? __lock_acquire+0x5f7/0x4620 [ 1437.935547] ? __lock_acquire+0x5f7/0x4620 [ 1437.935558] ? __lock_acquire+0x5f7/0x4620 [ 1437.935572] ? trace_hardirqs_on+0x10/0x10 [ 1437.935585] ? validate_nla+0x201/0x5f0 [ 1437.935605] ? nla_parse+0x186/0x240 [ 1437.964693] rtnl_newlink+0xbe4/0x1700 [ 1437.968607] ? rtnl_link_unregister+0x200/0x200 [ 1437.973286] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1437.977984] ? lock_acquire+0x16f/0x430 [ 1437.981970] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1437.986418] ? rtnl_link_unregister+0x200/0x200 [ 1437.991096] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1437.995366] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1437.999968] ? netlink_deliver_tap+0x93/0x8f0 [ 1438.004489] netlink_rcv_skb+0x14f/0x3c0 [ 1438.008684] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1438.013287] ? lock_downgrade+0x740/0x740 [ 1438.017448] ? netlink_ack+0x9a0/0x9a0 [ 1438.021367] ? netlink_deliver_tap+0xba/0x8f0 [ 1438.025880] rtnetlink_rcv+0x1d/0x30 [ 1438.029610] netlink_unicast+0x45d/0x640 [ 1438.033688] ? netlink_attachskb+0x6a0/0x6a0 [ 1438.038110] ? security_netlink_send+0x81/0xb0 [ 1438.042715] netlink_sendmsg+0x7c4/0xc60 [ 1438.046792] ? netlink_unicast+0x640/0x640 [ 1438.051039] ? security_socket_sendmsg+0x89/0xb0 [ 1438.055810] ? netlink_unicast+0x640/0x640 [ 1438.060055] sock_sendmsg+0xce/0x110 [ 1438.063784] ___sys_sendmsg+0x70a/0x840 [ 1438.067774] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1438.072537] ? __fget+0x210/0x370 [ 1438.076011] ? find_held_lock+0x35/0x130 [ 1438.080087] ? __fget+0x210/0x370 [ 1438.083559] ? lock_downgrade+0x740/0x740 [ 1438.087719] ? __fget+0x237/0x370 [ 1438.091188] ? __fget_light+0x172/0x1f0 [ 1438.095177] ? __fdget+0x1b/0x20 [ 1438.098551] ? sockfd_lookup_light+0xb4/0x160 [ 1438.103063] __sys_sendmsg+0xb9/0x140 [ 1438.106881] ? SyS_shutdown+0x170/0x170 [ 1438.110874] SyS_sendmsg+0x2d/0x50 [ 1438.114419] ? __sys_sendmsg+0x140/0x140 [ 1438.118489] do_syscall_64+0x1e8/0x640 [ 1438.122383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1438.127238] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1438.132435] RIP: 0033:0x45a639 [ 1438.135627] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.143371] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1438.150652] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1438.158040] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1438.165325] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 01:29:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r6 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r6, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:35 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x7, [0x8, 0x2, 0x7, 0xffff, 0x3, 0x9, 0xfffb]}, 0x12) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x24, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @multicast1}, @gre_common_policy=[@IFLA_GRE_OFLAGS={0x8, 0x3, 0x2}], @gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_OKEY={0x8}]]}}}, @IFLA_ADDRESS={0xc, 0xa, @dev}]}, 0x60}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 1438.172631] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:35 executing program 4 (fault-call:1 fault-nth:19): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1438.280284] FAULT_INJECTION: forcing a failure. [ 1438.280284] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.296223] CPU: 1 PID: 32495 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1438.304197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.313564] Call Trace: [ 1438.316174] dump_stack+0x142/0x197 [ 1438.319827] should_fail.cold+0x10f/0x159 [ 1438.324003] should_failslab+0xdb/0x130 [ 1438.328009] kmem_cache_alloc_node+0x287/0x780 [ 1438.332612] __alloc_skb+0x9c/0x500 [ 1438.336252] ? skb_scrub_packet+0x4b0/0x4b0 [ 1438.340591] ? if_nlmsg_size+0x38f/0x810 [ 1438.344850] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1438.349466] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1438.354243] rtmsg_ifinfo+0x6f/0x90 [ 1438.357894] netdev_state_change+0xd3/0xe0 [ 1438.362149] ? dev_valid_name+0x1b0/0x1b0 [ 1438.366319] ? set_operstate+0x11a/0x150 [ 1438.370401] do_setlink+0x2415/0x2d50 [ 1438.374222] ? rtnl_register+0x50/0x50 [ 1438.378123] ? trace_hardirqs_on+0x10/0x10 [ 1438.382375] ? save_trace+0x290/0x290 [ 1438.386326] ? is_bpf_text_address+0x7f/0x120 [ 1438.390849] ? __lock_acquire+0x5f7/0x4620 [ 1438.395211] ? __lock_acquire+0x5f7/0x4620 [ 1438.399467] ? __lock_acquire+0x5f7/0x4620 [ 1438.403727] ? trace_hardirqs_on+0x10/0x10 [ 1438.407979] ? validate_nla+0x201/0x5f0 [ 1438.411970] ? nla_parse+0x186/0x240 [ 1438.415700] rtnl_newlink+0xbe4/0x1700 [ 1438.419611] ? rtnl_link_unregister+0x200/0x200 [ 1438.424292] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1438.429007] ? lock_acquire+0x16f/0x430 [ 1438.432991] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1438.437444] ? rtnl_link_unregister+0x200/0x200 [ 1438.442121] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1438.446374] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1438.450998] ? netlink_deliver_tap+0x93/0x8f0 [ 1438.455519] netlink_rcv_skb+0x14f/0x3c0 [ 1438.459595] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1438.464196] ? lock_downgrade+0x740/0x740 [ 1438.468357] ? netlink_ack+0x9a0/0x9a0 [ 1438.472258] ? netlink_deliver_tap+0xba/0x8f0 [ 1438.476770] rtnetlink_rcv+0x1d/0x30 [ 1438.480496] netlink_unicast+0x45d/0x640 [ 1438.484576] ? netlink_attachskb+0x6a0/0x6a0 [ 1438.489000] ? security_netlink_send+0x81/0xb0 [ 1438.493607] netlink_sendmsg+0x7c4/0xc60 [ 1438.497688] ? netlink_unicast+0x640/0x640 [ 1438.501940] ? security_socket_sendmsg+0x89/0xb0 [ 1438.506714] ? netlink_unicast+0x640/0x640 [ 1438.510965] sock_sendmsg+0xce/0x110 [ 1438.514691] ___sys_sendmsg+0x70a/0x840 [ 1438.518679] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1438.523451] ? __fget+0x210/0x370 [ 1438.526917] ? find_held_lock+0x35/0x130 [ 1438.530989] ? __fget+0x210/0x370 [ 1438.534464] ? lock_downgrade+0x740/0x740 [ 1438.538628] ? __fget+0x237/0x370 [ 1438.542098] ? __fget_light+0x172/0x1f0 [ 1438.546079] ? __fdget+0x1b/0x20 [ 1438.549448] ? sockfd_lookup_light+0xb4/0x160 [ 1438.553958] __sys_sendmsg+0xb9/0x140 [ 1438.557769] ? SyS_shutdown+0x170/0x170 [ 1438.561762] SyS_sendmsg+0x2d/0x50 [ 1438.565308] ? __sys_sendmsg+0x140/0x140 [ 1438.569380] do_syscall_64+0x1e8/0x640 [ 1438.573277] ? trace_hardirqs_off_thunk+0x1a/0x1c 01:29:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4e00000010000108004e71ea0000000000a31800000000f72fed75928aadd4045652ff71c0c041014ac2797f6ef0ad0d647371375e412ee4a57ec480440953bba01c02393a18b9f2e6d8f0c0c527dc209a49dc080fa8cf6eab3d00ce3d8821deac35d82c1b51e72ad44bd7f6f03665188defb74834e1cbb9efa2d4", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:29:35 executing program 4 (fault-call:1 fault-nth:20): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1438.578135] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1438.583330] RIP: 0033:0x45a639 [ 1438.586527] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.594243] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1438.601527] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1438.608807] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1438.616091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1438.623461] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:35 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)={0x19, 0x7, 0x1, {{0xc, 'GPLkeyring[]'}, 0x8}}, 0x19) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="eb4c53831d5716255f380ebc465e000000000000000008001b00000000000820100005000000"], 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) mknodat(r4, &(0x7f0000000100)='./file0\x00', 0x8000, 0x9) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 01:29:35 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x3c, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000580)=""/151) keyctl$get_persistent(0x16, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x2) ioctl$PPPIOCDISCONN(r1, 0x7439) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0xaaaaacf, &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x1000000000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10000}, {0xa, 0x4e20, 0x1, @remote}, 0x1f, [0x6, 0x81, 0x8, 0x304, 0x4, 0x1, 0x6, 0x7fffffff]}, 0x5c) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r6 = openat$cgroup(r5, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x8, 0x3, 0x1, {0xb8, 0x2, 0x9, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) r9 = openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000006c0)={0x1, 0x80000000, 0x7, 0x0, 0x0, [{r6, 0x0, 0x8}, {r3, 0x0, 0x25c}, {0xffffffffffffffff, 0x0, 0x8001}, {r9, 0x0, 0x4}, {r10, 0x0, 0x1}, {r0, 0x0, 0x6}, {r11, 0x0, 0x2}]}) socket(0x80000000000000a, 0x0, 0x0) [ 1438.735776] FAULT_INJECTION: forcing a failure. [ 1438.735776] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.775338] CPU: 1 PID: 32505 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1438.783286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.792649] Call Trace: [ 1438.795256] dump_stack+0x142/0x197 [ 1438.798898] should_fail.cold+0x10f/0x159 [ 1438.803089] should_failslab+0xdb/0x130 [ 1438.807078] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1438.812108] __kmalloc_node_track_caller+0x3d/0x80 [ 1438.817049] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1438.821722] pskb_expand_head+0x116/0xc10 [ 1438.825880] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1438.830205] ? kasan_kmalloc+0xce/0xf0 [ 1438.834093] netlink_trim+0x1c1/0x230 [ 1438.837902] netlink_broadcast_filtered+0x5c/0x9f0 [ 1438.842870] ? skb_scrub_packet+0x4b0/0x4b0 [ 1438.847197] nlmsg_notify+0x7c/0x190 [ 1438.850916] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1438.855670] rtmsg_ifinfo+0x6f/0x90 [ 1438.859294] netdev_state_change+0xd3/0xe0 [ 1438.863533] ? dev_valid_name+0x1b0/0x1b0 [ 1438.867686] ? set_operstate+0x11a/0x150 [ 1438.871754] do_setlink+0x2415/0x2d50 [ 1438.875565] ? rtnl_register+0x50/0x50 [ 1438.879458] ? trace_hardirqs_on+0x10/0x10 [ 1438.883704] ? save_trace+0x290/0x290 [ 1438.887517] ? is_bpf_text_address+0x7f/0x120 [ 1438.892021] ? __lock_acquire+0x5f7/0x4620 [ 1438.896264] ? __lock_acquire+0x5f7/0x4620 [ 1438.900511] ? __lock_acquire+0x5f7/0x4620 [ 1438.904757] ? trace_hardirqs_on+0x10/0x10 [ 1438.909001] ? validate_nla+0x201/0x5f0 [ 1438.912991] ? nla_parse+0x186/0x240 [ 1438.916714] rtnl_newlink+0xbe4/0x1700 [ 1438.920618] ? rtnl_link_unregister+0x200/0x200 [ 1438.925289] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1438.929979] ? lock_acquire+0x16f/0x430 [ 1438.933972] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1438.938415] ? rtnl_link_unregister+0x200/0x200 [ 1438.943093] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1438.947346] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1438.951948] ? netlink_deliver_tap+0x93/0x8f0 [ 1438.956545] netlink_rcv_skb+0x14f/0x3c0 [ 1438.960621] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1438.965216] ? lock_downgrade+0x740/0x740 [ 1438.969373] ? netlink_ack+0x9a0/0x9a0 [ 1438.973269] ? netlink_deliver_tap+0xba/0x8f0 [ 1438.977777] rtnetlink_rcv+0x1d/0x30 [ 1438.981504] netlink_unicast+0x45d/0x640 [ 1438.985584] ? netlink_attachskb+0x6a0/0x6a0 [ 1438.990004] ? security_netlink_send+0x81/0xb0 [ 1438.994591] netlink_sendmsg+0x7c4/0xc60 [ 1438.998668] ? netlink_unicast+0x640/0x640 [ 1439.002919] ? security_socket_sendmsg+0x89/0xb0 [ 1439.007686] ? netlink_unicast+0x640/0x640 [ 1439.011918] sock_sendmsg+0xce/0x110 [ 1439.011929] ___sys_sendmsg+0x70a/0x840 [ 1439.011939] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1439.011949] ? __fget+0x210/0x370 [ 1439.011962] ? find_held_lock+0x35/0x130 [ 1439.011969] ? __fget+0x210/0x370 [ 1439.011983] ? lock_downgrade+0x740/0x740 [ 1439.011996] ? __fget+0x237/0x370 [ 1439.012009] ? __fget_light+0x172/0x1f0 [ 1439.012019] ? __fdget+0x1b/0x20 [ 1439.012028] ? sockfd_lookup_light+0xb4/0x160 [ 1439.012038] __sys_sendmsg+0xb9/0x140 [ 1439.012047] ? SyS_shutdown+0x170/0x170 [ 1439.012070] SyS_sendmsg+0x2d/0x50 [ 1439.012080] ? __sys_sendmsg+0x140/0x140 [ 1439.019762] do_syscall_64+0x1e8/0x640 [ 1439.019769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1439.019786] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1439.084341] RIP: 0033:0x45a639 [ 1439.087534] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1439.095250] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1439.102529] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1439.109810] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1439.117090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1439.124370] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1439.168677] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:29:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:36 executing program 4 (fault-call:1 fault-nth:21): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1439.278118] FAULT_INJECTION: forcing a failure. [ 1439.278118] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.303099] CPU: 1 PID: 32526 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1439.311047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1439.320413] Call Trace: [ 1439.323020] dump_stack+0x142/0x197 [ 1439.326674] should_fail.cold+0x10f/0x159 [ 1439.330847] should_failslab+0xdb/0x130 [ 1439.334836] kmem_cache_alloc_node_trace+0x280/0x770 [ 1439.339959] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1439.345427] __kmalloc_node_track_caller+0x3d/0x80 [ 1439.350407] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1439.355097] __alloc_skb+0xcf/0x500 [ 1439.358737] ? skb_scrub_packet+0x4b0/0x4b0 [ 1439.363065] ? if_nlmsg_size+0x38f/0x810 [ 1439.367137] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1439.371729] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1439.376491] rtmsg_ifinfo+0x6f/0x90 [ 1439.380128] netdev_state_change+0xd3/0xe0 [ 1439.384371] ? dev_valid_name+0x1b0/0x1b0 [ 1439.388532] ? set_operstate+0x11a/0x150 [ 1439.392597] do_setlink+0x2415/0x2d50 [ 1439.396411] ? rtnl_register+0x50/0x50 [ 1439.400309] ? trace_hardirqs_on+0x10/0x10 [ 1439.404552] ? save_trace+0x290/0x290 [ 1439.408364] ? is_bpf_text_address+0x7f/0x120 [ 1439.412876] ? __lock_acquire+0x5f7/0x4620 [ 1439.417125] ? __lock_acquire+0x5f7/0x4620 [ 1439.421370] ? __lock_acquire+0x5f7/0x4620 [ 1439.425619] ? trace_hardirqs_on+0x10/0x10 [ 1439.429866] ? validate_nla+0x201/0x5f0 [ 1439.433855] ? nla_parse+0x186/0x240 [ 1439.437584] rtnl_newlink+0xbe4/0x1700 [ 1439.441493] ? rtnl_link_unregister+0x200/0x200 [ 1439.446167] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1439.450864] ? lock_acquire+0x16f/0x430 [ 1439.454843] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1439.459284] ? rtnl_link_unregister+0x200/0x200 [ 1439.463964] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1439.468212] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1439.472801] ? netlink_deliver_tap+0x93/0x8f0 [ 1439.477314] netlink_rcv_skb+0x14f/0x3c0 [ 1439.481384] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1439.485985] ? lock_downgrade+0x740/0x740 [ 1439.490146] ? netlink_ack+0x9a0/0x9a0 [ 1439.494040] ? netlink_deliver_tap+0xba/0x8f0 [ 1439.498547] rtnetlink_rcv+0x1d/0x30 [ 1439.502274] netlink_unicast+0x45d/0x640 [ 1439.506350] ? netlink_attachskb+0x6a0/0x6a0 [ 1439.510771] ? security_netlink_send+0x81/0xb0 [ 1439.515359] netlink_sendmsg+0x7c4/0xc60 [ 1439.519443] ? netlink_unicast+0x640/0x640 [ 1439.523689] ? security_socket_sendmsg+0x89/0xb0 [ 1439.528458] ? netlink_unicast+0x640/0x640 [ 1439.532702] sock_sendmsg+0xce/0x110 [ 1439.536429] ___sys_sendmsg+0x70a/0x840 [ 1439.540427] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1439.545189] ? __fget+0x210/0x370 [ 1439.548650] ? find_held_lock+0x35/0x130 [ 1439.552718] ? __fget+0x210/0x370 [ 1439.556186] ? lock_downgrade+0x740/0x740 [ 1439.560343] ? __fget+0x237/0x370 [ 1439.563803] ? __fget_light+0x172/0x1f0 [ 1439.567784] ? __fdget+0x1b/0x20 [ 1439.571159] ? sockfd_lookup_light+0xb4/0x160 [ 1439.575683] __sys_sendmsg+0xb9/0x140 [ 1439.579490] ? SyS_shutdown+0x170/0x170 [ 1439.583485] SyS_sendmsg+0x2d/0x50 [ 1439.587032] ? __sys_sendmsg+0x140/0x140 [ 1439.591104] do_syscall_64+0x1e8/0x640 [ 1439.594994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1439.599847] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1439.605126] RIP: 0033:0x45a639 [ 1439.608345] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1439.616065] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 01:29:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000809c6bacf07d0efcaa0919789c94e2b22f0860fd274de035f47c3f05df16eab1180b6a2aeb366251c157ca0a171b0d24191328bfddbef4e7a5958d785e7d920bc9713ef22aaa90603284f1f4abfb3aff1d79de0031b6398dec8bba863aba8becc2792693ae2ab6e72d2e4ede3069f4c781a9db99e7dc92c6656465146a2bdf136b739077df30d7503e40d8bc0b25ecc610ec3ad1098e4089b4d530d3c77b3cf6897f31b795edd9cab04b6883960c362cce316a8c67b394c601ccfa0207e7a3449b5e23cc8ce4e890641409a4717ea3af9cdd776a9350712556e7", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x508171952c7cb6a0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x2, 0x4000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) [ 1439.623344] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1439.630621] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1439.637901] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1439.645185] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:36 executing program 4 (fault-call:1 fault-nth:22): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:36 executing program 1: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x2, 0x110080) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup(r0) read$FUSE(r4, &(0x7f0000003140), 0x5e3) [ 1439.716240] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1439.736383] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1439.760110] protocol 88fb is buggy, dev hsr_slave_0 [ 1439.765276] protocol 88fb is buggy, dev hsr_slave_1 [ 1439.799395] FAULT_INJECTION: forcing a failure. [ 1439.799395] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.829548] CPU: 0 PID: 32536 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1439.837494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1439.846858] Call Trace: [ 1439.849462] dump_stack+0x142/0x197 [ 1439.853106] should_fail.cold+0x10f/0x159 [ 1439.857272] should_failslab+0xdb/0x130 [ 1439.861265] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1439.866310] __kmalloc_node_track_caller+0x3d/0x80 [ 1439.871260] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1439.875953] pskb_expand_head+0x116/0xc10 [ 1439.880115] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1439.884448] ? kasan_kmalloc+0xce/0xf0 [ 1439.888352] netlink_trim+0x1c1/0x230 [ 1439.892171] netlink_broadcast_filtered+0x5c/0x9f0 [ 1439.897118] ? skb_scrub_packet+0x4b0/0x4b0 [ 1439.901459] nlmsg_notify+0x7c/0x190 [ 1439.905194] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1439.909967] rtmsg_ifinfo+0x6f/0x90 [ 1439.913613] netdev_state_change+0xd3/0xe0 [ 1439.917888] ? dev_valid_name+0x1b0/0x1b0 [ 1439.922064] ? set_operstate+0x11a/0x150 [ 1439.926140] do_setlink+0x2415/0x2d50 [ 1439.929960] ? rtnl_register+0x50/0x50 [ 1439.933859] ? trace_hardirqs_on+0x10/0x10 [ 1439.938107] ? save_trace+0x290/0x290 [ 1439.941929] ? is_bpf_text_address+0x7f/0x120 [ 1439.946448] ? __lock_acquire+0x5f7/0x4620 [ 1439.950696] ? __lock_acquire+0x5f7/0x4620 [ 1439.954972] ? __lock_acquire+0x5f7/0x4620 [ 1439.959226] ? trace_hardirqs_on+0x10/0x10 [ 1439.963474] ? validate_nla+0x201/0x5f0 [ 1439.967466] ? nla_parse+0x186/0x240 [ 1439.971190] rtnl_newlink+0xbe4/0x1700 [ 1439.975095] ? rtnl_link_unregister+0x200/0x200 [ 1439.979774] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1439.984466] ? lock_acquire+0x16f/0x430 [ 1439.988453] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1439.992915] ? rtnl_link_unregister+0x200/0x200 [ 1439.997593] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1440.001842] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1440.006441] ? netlink_deliver_tap+0x93/0x8f0 [ 1440.010955] netlink_rcv_skb+0x14f/0x3c0 [ 1440.015034] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1440.019652] ? lock_downgrade+0x740/0x740 [ 1440.023817] ? netlink_ack+0x9a0/0x9a0 [ 1440.027718] ? netlink_deliver_tap+0xba/0x8f0 [ 1440.032228] rtnetlink_rcv+0x1d/0x30 [ 1440.035956] netlink_unicast+0x45d/0x640 [ 1440.040034] ? netlink_attachskb+0x6a0/0x6a0 [ 1440.044454] ? security_netlink_send+0x81/0xb0 [ 1440.049051] netlink_sendmsg+0x7c4/0xc60 [ 1440.053130] ? netlink_unicast+0x640/0x640 [ 1440.057724] ? security_socket_sendmsg+0x89/0xb0 [ 1440.062491] ? netlink_unicast+0x640/0x640 [ 1440.066737] sock_sendmsg+0xce/0x110 [ 1440.070462] ___sys_sendmsg+0x70a/0x840 [ 1440.074469] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1440.079235] ? __fget+0x210/0x370 [ 1440.082701] ? find_held_lock+0x35/0x130 [ 1440.086769] ? __fget+0x210/0x370 [ 1440.090235] ? lock_downgrade+0x740/0x740 [ 1440.094394] ? __fget+0x237/0x370 [ 1440.097866] ? __fget_light+0x172/0x1f0 [ 1440.101847] ? __fdget+0x1b/0x20 [ 1440.105222] ? sockfd_lookup_light+0xb4/0x160 [ 1440.109726] __sys_sendmsg+0xb9/0x140 [ 1440.113536] ? SyS_shutdown+0x170/0x170 [ 1440.117537] SyS_sendmsg+0x2d/0x50 [ 1440.121081] ? __sys_sendmsg+0x140/0x140 [ 1440.125152] do_syscall_64+0x1e8/0x640 [ 1440.129048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1440.133906] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1440.139098] RIP: 0033:0x45a639 [ 1440.142290] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1440.150043] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1440.157325] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1440.164606] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1440.171885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1440.179168] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1440.186760] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.191899] protocol 88fb is buggy, dev hsr_slave_1 01:29:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x1b}, 0x9}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x20000) fcntl$setlease(r3, 0x400, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', r9}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x74, 0x1e, 0x800, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x1, 0x8008}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_IFALIAS={0x14, 0x14, 'ip6tnl0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_BROADCAST={0xc, 0x2, @dev={[], 0xd}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8ca}, @IFLA_ADDRESS={0xc, 0x1, @broadcast}, @IFLA_TXQLEN={0x8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x74}}, 0x0) 01:29:37 executing program 4 (fault-call:1 fault-nth:23): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') fchdir(r0) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, {0x3, 0x20, 0x40, 0x4, 0xe6, 0x49}, 0x344, 0x2}, 0x0) [ 1440.317294] FAULT_INJECTION: forcing a failure. [ 1440.317294] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.341825] CPU: 0 PID: 32546 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1440.349767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.359137] Call Trace: [ 1440.361746] dump_stack+0x142/0x197 [ 1440.365402] should_fail.cold+0x10f/0x159 [ 1440.369578] should_failslab+0xdb/0x130 [ 1440.373574] kmem_cache_alloc_node+0x287/0x780 [ 1440.378176] __alloc_skb+0x9c/0x500 [ 1440.381823] ? skb_scrub_packet+0x4b0/0x4b0 [ 1440.386163] ? if_nlmsg_size+0x38f/0x810 [ 1440.390238] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1440.394839] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1440.399607] rtmsg_ifinfo+0x6f/0x90 [ 1440.403251] netdev_state_change+0xd3/0xe0 [ 1440.407495] ? dev_valid_name+0x1b0/0x1b0 [ 1440.411652] ? set_operstate+0x11a/0x150 [ 1440.415727] do_setlink+0x2415/0x2d50 [ 1440.419546] ? rtnl_register+0x50/0x50 [ 1440.423444] ? trace_hardirqs_on+0x10/0x10 [ 1440.427698] ? save_trace+0x290/0x290 [ 1440.431512] ? is_bpf_text_address+0x7f/0x120 [ 1440.436027] ? __lock_acquire+0x5f7/0x4620 [ 1440.440283] ? __lock_acquire+0x5f7/0x4620 [ 1440.444538] ? __lock_acquire+0x5f7/0x4620 [ 1440.448793] ? trace_hardirqs_on+0x10/0x10 [ 1440.453047] ? validate_nla+0x201/0x5f0 [ 1440.457038] ? nla_parse+0x186/0x240 [ 1440.460769] rtnl_newlink+0xbe4/0x1700 [ 1440.464678] ? rtnl_link_unregister+0x200/0x200 [ 1440.469361] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1440.474053] ? lock_acquire+0x16f/0x430 [ 1440.478130] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1440.482593] ? rtnl_link_unregister+0x200/0x200 [ 1440.487275] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1440.491525] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1440.496126] ? netlink_deliver_tap+0x93/0x8f0 [ 1440.500661] netlink_rcv_skb+0x14f/0x3c0 [ 1440.504738] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1440.509336] ? lock_downgrade+0x740/0x740 [ 1440.513499] ? netlink_ack+0x9a0/0x9a0 [ 1440.517409] ? netlink_deliver_tap+0xba/0x8f0 [ 1440.522014] rtnetlink_rcv+0x1d/0x30 [ 1440.525747] netlink_unicast+0x45d/0x640 [ 1440.529857] ? netlink_attachskb+0x6a0/0x6a0 [ 1440.534286] ? security_netlink_send+0x81/0xb0 [ 1440.538917] netlink_sendmsg+0x7c4/0xc60 [ 1440.543000] ? netlink_unicast+0x640/0x640 [ 1440.547249] ? security_socket_sendmsg+0x89/0xb0 [ 1440.552025] ? netlink_unicast+0x640/0x640 [ 1440.556273] sock_sendmsg+0xce/0x110 [ 1440.560000] ___sys_sendmsg+0x70a/0x840 [ 1440.563992] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1440.568763] ? __fget+0x210/0x370 [ 1440.572231] ? find_held_lock+0x35/0x130 [ 1440.576304] ? __fget+0x210/0x370 [ 1440.579869] ? lock_downgrade+0x740/0x740 [ 1440.584029] ? __fget+0x237/0x370 [ 1440.587495] ? __fget_light+0x172/0x1f0 [ 1440.591478] ? __fdget+0x1b/0x20 [ 1440.594861] ? sockfd_lookup_light+0xb4/0x160 [ 1440.599373] __sys_sendmsg+0xb9/0x140 [ 1440.603187] ? SyS_shutdown+0x170/0x170 [ 1440.607188] SyS_sendmsg+0x2d/0x50 [ 1440.610735] ? __sys_sendmsg+0x140/0x140 [ 1440.614807] do_syscall_64+0x1e8/0x640 [ 1440.618733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1440.623593] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1440.628792] RIP: 0033:0x45a639 [ 1440.631988] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1440.639707] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1440.646987] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1440.654278] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1440.661561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 01:29:37 executing program 4 (fault-call:1 fault-nth:24): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1440.668849] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4800, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000380)={0x0, 0x0, 0x3f}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000003c0)={0x0, r2, 0x3}) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_elf32(r8, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"/5720], 0x1658) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x6) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r7, r9, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r10 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r10, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1440.888132] FAULT_INJECTION: forcing a failure. [ 1440.888132] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.904187] CPU: 1 PID: 32561 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1440.912124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.921493] Call Trace: [ 1440.924102] dump_stack+0x142/0x197 [ 1440.927760] should_fail.cold+0x10f/0x159 [ 1440.931930] should_failslab+0xdb/0x130 [ 1440.936093] kmem_cache_alloc_node+0x287/0x780 [ 1440.940696] __alloc_skb+0x9c/0x500 [ 1440.944339] ? skb_scrub_packet+0x4b0/0x4b0 [ 1440.948675] ? if_nlmsg_size+0x38f/0x810 [ 1440.952755] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1440.957358] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1440.962129] rtmsg_ifinfo+0x6f/0x90 [ 1440.965771] netdev_state_change+0xd3/0xe0 [ 1440.970018] ? dev_valid_name+0x1b0/0x1b0 [ 1440.974177] ? set_operstate+0x11a/0x150 [ 1440.978249] do_setlink+0x2415/0x2d50 [ 1440.982072] ? rtnl_register+0x50/0x50 [ 1440.985970] ? trace_hardirqs_on+0x10/0x10 [ 1440.990219] ? save_trace+0x290/0x290 [ 1440.994030] ? is_bpf_text_address+0x7f/0x120 [ 1440.998538] ? __lock_acquire+0x5f7/0x4620 [ 1441.002787] ? __lock_acquire+0x5f7/0x4620 [ 1441.007036] ? __lock_acquire+0x5f7/0x4620 [ 1441.011290] ? trace_hardirqs_on+0x10/0x10 [ 1441.015543] ? validate_nla+0x201/0x5f0 [ 1441.019536] ? nla_parse+0x186/0x240 [ 1441.023267] rtnl_newlink+0xbe4/0x1700 [ 1441.027175] ? rtnl_link_unregister+0x200/0x200 [ 1441.031993] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1441.036693] ? lock_acquire+0x16f/0x430 [ 1441.040677] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1441.045137] ? rtnl_link_unregister+0x200/0x200 [ 1441.049831] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1441.054084] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1441.058686] ? netlink_deliver_tap+0x93/0x8f0 [ 1441.063203] netlink_rcv_skb+0x14f/0x3c0 [ 1441.067284] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1441.071884] ? lock_downgrade+0x740/0x740 [ 1441.076048] ? netlink_ack+0x9a0/0x9a0 [ 1441.079957] ? netlink_deliver_tap+0xba/0x8f0 [ 1441.084475] rtnetlink_rcv+0x1d/0x30 [ 1441.088208] netlink_unicast+0x45d/0x640 [ 1441.092289] ? netlink_attachskb+0x6a0/0x6a0 [ 1441.096715] ? security_netlink_send+0x81/0xb0 [ 1441.101313] netlink_sendmsg+0x7c4/0xc60 [ 1441.105407] ? netlink_unicast+0x640/0x640 [ 1441.109662] ? security_socket_sendmsg+0x89/0xb0 [ 1441.114432] ? netlink_unicast+0x640/0x640 [ 1441.118681] sock_sendmsg+0xce/0x110 [ 1441.122408] ___sys_sendmsg+0x70a/0x840 [ 1441.126399] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1441.131178] ? __fget+0x210/0x370 [ 1441.134647] ? find_held_lock+0x35/0x130 [ 1441.138718] ? __fget+0x210/0x370 [ 1441.142191] ? lock_downgrade+0x740/0x740 [ 1441.146355] ? __fget+0x237/0x370 [ 1441.149822] ? __fget_light+0x172/0x1f0 [ 1441.153807] ? __fdget+0x1b/0x20 [ 1441.157178] ? sockfd_lookup_light+0xb4/0x160 [ 1441.161679] __sys_sendmsg+0xb9/0x140 [ 1441.165497] ? SyS_shutdown+0x170/0x170 [ 1441.169482] SyS_sendmsg+0x2d/0x50 [ 1441.173016] ? __sys_sendmsg+0x140/0x140 [ 1441.177079] do_syscall_64+0x1e8/0x640 [ 1441.180962] ? trace_hardirqs_off_thunk+0x1a/0x1c 01:29:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1441.185815] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1441.191007] RIP: 0033:0x45a639 [ 1441.194201] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.202075] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1441.209356] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1441.217160] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1441.224442] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1441.231726] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ptrace$peekuser(0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x81, 0x8000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) close(0xffffffffffffffff) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, 0x0) fcntl$setpipe(r0, 0x407, 0x100000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000200)='/dev/loo<#\x00', 0x6, 0xf2080) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000340)=@v1={0x1000000, [{0x0, 0x3}]}, 0xc, 0x1) close(r10) 01:29:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x8) 01:29:38 executing program 4 (fault-call:1 fault-nth:25): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000020010759c623ca379a370263300010c007693b016e55a627ae07ffd555a61b208e75128d771d6e63fbbdf7d98ced4607275", @ANYRES32=0x0, @ANYBLOB="0000000000000000080f1b00000000000800100005000000"], 0x30}}, 0x0) [ 1441.590212] FAULT_INJECTION: forcing a failure. [ 1441.590212] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.615729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29968 sclass=netlink_route_socket pig=32593 comm=syz-executor.5 [ 1441.636270] CPU: 1 PID: 32590 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1441.644220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1441.653591] Call Trace: [ 1441.656237] dump_stack+0x142/0x197 [ 1441.659887] should_fail.cold+0x10f/0x159 [ 1441.664057] should_failslab+0xdb/0x130 [ 1441.668049] kmem_cache_alloc_node_trace+0x280/0x770 [ 1441.673171] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1441.678637] __kmalloc_node_track_caller+0x3d/0x80 [ 1441.683620] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1441.688308] __alloc_skb+0xcf/0x500 [ 1441.692554] ? skb_scrub_packet+0x4b0/0x4b0 [ 1441.696883] ? if_nlmsg_size+0x38f/0x810 [ 1441.700958] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1441.705553] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1441.710323] rtmsg_ifinfo+0x6f/0x90 [ 1441.713963] netdev_state_change+0xd3/0xe0 [ 1441.718209] ? dev_valid_name+0x1b0/0x1b0 [ 1441.722370] ? set_operstate+0x11a/0x150 [ 1441.726447] do_setlink+0x2415/0x2d50 [ 1441.730261] ? rtnl_register+0x50/0x50 [ 1441.734164] ? trace_hardirqs_on+0x10/0x10 [ 1441.738501] ? save_trace+0x290/0x290 [ 1441.742315] ? is_bpf_text_address+0x7f/0x120 [ 1441.746823] ? __lock_acquire+0x5f7/0x4620 [ 1441.751066] ? __lock_acquire+0x5f7/0x4620 [ 1441.755315] ? __lock_acquire+0x5f7/0x4620 [ 1441.759590] ? trace_hardirqs_on+0x10/0x10 [ 1441.763842] ? validate_nla+0x201/0x5f0 [ 1441.767834] ? nla_parse+0x186/0x240 [ 1441.771561] rtnl_newlink+0xbe4/0x1700 [ 1441.775496] ? rtnl_link_unregister+0x200/0x200 [ 1441.780177] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1441.784870] ? lock_acquire+0x16f/0x430 [ 1441.788857] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1441.793363] ? ieee80211_if_fmt_min_discovery_timeout+0x48/0x70 [ 1441.799446] ? rtnl_link_unregister+0x200/0x200 [ 1441.804128] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1441.808381] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1441.812978] ? netlink_deliver_tap+0x93/0x8f0 [ 1441.817490] netlink_rcv_skb+0x14f/0x3c0 [ 1441.821562] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1441.826178] ? lock_downgrade+0x740/0x740 [ 1441.830335] ? netlink_ack+0x9a0/0x9a0 [ 1441.834235] ? netlink_deliver_tap+0xba/0x8f0 [ 1441.838744] rtnetlink_rcv+0x1d/0x30 [ 1441.842471] netlink_unicast+0x45d/0x640 [ 1441.846547] ? netlink_attachskb+0x6a0/0x6a0 [ 1441.850971] ? security_netlink_send+0x81/0xb0 [ 1441.855569] netlink_sendmsg+0x7c4/0xc60 [ 1441.859654] ? netlink_unicast+0x640/0x640 [ 1441.863989] ? security_socket_sendmsg+0x89/0xb0 [ 1441.868757] ? netlink_unicast+0x640/0x640 [ 1441.873004] sock_sendmsg+0xce/0x110 [ 1441.876732] ___sys_sendmsg+0x70a/0x840 [ 1441.880720] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1441.885494] ? __fget+0x210/0x370 [ 1441.888958] ? find_held_lock+0x35/0x130 [ 1441.893030] ? __fget+0x210/0x370 [ 1441.896504] ? lock_downgrade+0x740/0x740 [ 1441.900666] ? __fget+0x237/0x370 [ 1441.904134] ? __fget_light+0x172/0x1f0 [ 1441.908115] ? __fdget+0x1b/0x20 [ 1441.911489] ? sockfd_lookup_light+0xb4/0x160 [ 1441.915990] __sys_sendmsg+0xb9/0x140 [ 1441.919803] ? SyS_shutdown+0x170/0x170 [ 1441.923804] SyS_sendmsg+0x2d/0x50 [ 1441.927356] ? __sys_sendmsg+0x140/0x140 [ 1441.931430] do_syscall_64+0x1e8/0x640 [ 1441.935480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1441.940344] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1441.945545] RIP: 0033:0x45a639 [ 1441.948752] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.956472] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1441.963749] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1441.971022] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1441.978301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1441.985586] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1441.993178] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.998280] protocol 88fb is buggy, dev hsr_slave_1 01:29:39 executing program 4 (fault-call:1 fault-nth:26): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x1) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x80000000, 0x2, "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"}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r8 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r8, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1442.094859] FAULT_INJECTION: forcing a failure. [ 1442.094859] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.151859] CPU: 1 PID: 32598 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1442.159812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.169177] Call Trace: [ 1442.171784] dump_stack+0x142/0x197 [ 1442.175436] should_fail.cold+0x10f/0x159 [ 1442.179608] should_failslab+0xdb/0x130 [ 1442.183597] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1442.188639] __kmalloc_node_track_caller+0x3d/0x80 [ 1442.193586] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1442.198272] pskb_expand_head+0x116/0xc10 01:29:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1442.202433] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1442.206868] ? kasan_kmalloc+0xce/0xf0 [ 1442.210772] netlink_trim+0x1c1/0x230 [ 1442.214602] netlink_broadcast_filtered+0x5c/0x9f0 [ 1442.219547] ? skb_scrub_packet+0x4b0/0x4b0 [ 1442.223877] nlmsg_notify+0x7c/0x190 [ 1442.227608] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1442.232374] rtmsg_ifinfo+0x6f/0x90 [ 1442.236010] netdev_state_change+0xd3/0xe0 [ 1442.240250] ? dev_valid_name+0x1b0/0x1b0 [ 1442.244397] ? set_operstate+0x11a/0x150 [ 1442.248455] do_setlink+0x2415/0x2d50 [ 1442.252265] ? rtnl_register+0x50/0x50 [ 1442.256155] ? trace_hardirqs_on+0x10/0x10 [ 1442.260396] ? save_trace+0x290/0x290 [ 1442.264207] ? is_bpf_text_address+0x7f/0x120 [ 1442.268712] ? __lock_acquire+0x5f7/0x4620 [ 1442.272953] ? __lock_acquire+0x5f7/0x4620 [ 1442.277303] ? __lock_acquire+0x5f7/0x4620 [ 1442.281555] ? trace_hardirqs_on+0x10/0x10 [ 1442.285801] ? validate_nla+0x201/0x5f0 [ 1442.289789] ? nla_parse+0x186/0x240 [ 1442.293613] rtnl_newlink+0xbe4/0x1700 [ 1442.297522] ? rtnl_link_unregister+0x200/0x200 [ 1442.302197] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1442.306888] ? lock_acquire+0x16f/0x430 [ 1442.310871] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1442.315319] ? rtnl_link_unregister+0x200/0x200 [ 1442.319996] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1442.324241] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1442.328838] ? netlink_deliver_tap+0x93/0x8f0 [ 1442.333350] netlink_rcv_skb+0x14f/0x3c0 [ 1442.337423] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1442.342142] ? lock_downgrade+0x740/0x740 [ 1442.346301] ? netlink_ack+0x9a0/0x9a0 [ 1442.350212] ? netlink_deliver_tap+0xba/0x8f0 [ 1442.354716] rtnetlink_rcv+0x1d/0x30 [ 1442.358435] netlink_unicast+0x45d/0x640 [ 1442.362636] ? netlink_attachskb+0x6a0/0x6a0 [ 1442.367057] ? security_netlink_send+0x81/0xb0 [ 1442.371649] netlink_sendmsg+0x7c4/0xc60 [ 1442.375727] ? netlink_unicast+0x640/0x640 [ 1442.379975] ? security_socket_sendmsg+0x89/0xb0 [ 1442.384736] ? netlink_unicast+0x640/0x640 [ 1442.388979] sock_sendmsg+0xce/0x110 [ 1442.392698] ___sys_sendmsg+0x70a/0x840 [ 1442.396701] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1442.401469] ? __fget+0x210/0x370 [ 1442.404924] ? find_held_lock+0x35/0x130 [ 1442.409430] ? __fget+0x210/0x370 [ 1442.412891] ? lock_downgrade+0x740/0x740 [ 1442.417048] ? __fget+0x237/0x370 [ 1442.420512] ? __fget_light+0x172/0x1f0 [ 1442.424487] ? __fdget+0x1b/0x20 [ 1442.427856] ? sockfd_lookup_light+0xb4/0x160 [ 1442.432371] __sys_sendmsg+0xb9/0x140 [ 1442.436180] ? SyS_shutdown+0x170/0x170 [ 1442.440169] SyS_sendmsg+0x2d/0x50 [ 1442.443714] ? __sys_sendmsg+0x140/0x140 [ 1442.447785] do_syscall_64+0x1e8/0x640 [ 1442.451680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1442.456554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1442.461747] RIP: 0033:0x45a639 [ 1442.464940] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1442.472767] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1442.480044] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1442.487367] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1442.494644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1442.501919] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:39 executing program 4 (fault-call:1 fault-nth:27): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x8) 01:29:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x8) [ 1442.797602] FAULT_INJECTION: forcing a failure. [ 1442.797602] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.821671] CPU: 0 PID: 32617 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1442.829622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.838985] Call Trace: [ 1442.841589] dump_stack+0x142/0x197 [ 1442.845241] should_fail.cold+0x10f/0x159 [ 1442.849411] should_failslab+0xdb/0x130 [ 1442.853396] kmem_cache_alloc_node+0x287/0x780 [ 1442.857994] __alloc_skb+0x9c/0x500 [ 1442.861630] ? skb_scrub_packet+0x4b0/0x4b0 [ 1442.865992] ? if_nlmsg_size+0x38f/0x810 [ 1442.870068] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1442.874687] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1442.879454] rtmsg_ifinfo+0x6f/0x90 [ 1442.883090] netdev_state_change+0xd3/0xe0 [ 1442.887346] ? dev_valid_name+0x1b0/0x1b0 [ 1442.891501] ? set_operstate+0x11a/0x150 [ 1442.895588] do_setlink+0x2415/0x2d50 [ 1442.899401] ? rtnl_register+0x50/0x50 [ 1442.903302] ? trace_hardirqs_on+0x10/0x10 [ 1442.907552] ? save_trace+0x290/0x290 [ 1442.911364] ? is_bpf_text_address+0x7f/0x120 [ 1442.915871] ? __lock_acquire+0x5f7/0x4620 [ 1442.920116] ? __lock_acquire+0x5f7/0x4620 [ 1442.924369] ? __lock_acquire+0x5f7/0x4620 [ 1442.928622] ? trace_hardirqs_on+0x10/0x10 [ 1442.932871] ? validate_nla+0x201/0x5f0 [ 1442.936858] ? nla_parse+0x186/0x240 [ 1442.940589] rtnl_newlink+0xbe4/0x1700 [ 1442.944495] ? rtnl_link_unregister+0x200/0x200 [ 1442.949168] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1442.953860] ? lock_acquire+0x16f/0x430 [ 1442.957842] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1442.962297] ? rtnl_link_unregister+0x200/0x200 [ 1442.966976] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1442.971223] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1442.975904] ? netlink_deliver_tap+0x93/0x8f0 [ 1442.980414] netlink_rcv_skb+0x14f/0x3c0 [ 1442.984483] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1442.989075] ? lock_downgrade+0x740/0x740 [ 1442.993231] ? netlink_ack+0x9a0/0x9a0 [ 1442.997143] ? netlink_deliver_tap+0xba/0x8f0 [ 1443.001660] rtnetlink_rcv+0x1d/0x30 [ 1443.006781] netlink_unicast+0x45d/0x640 [ 1443.010860] ? netlink_attachskb+0x6a0/0x6a0 [ 1443.015284] ? security_netlink_send+0x81/0xb0 [ 1443.019881] netlink_sendmsg+0x7c4/0xc60 [ 1443.024081] ? netlink_unicast+0x640/0x640 [ 1443.028355] ? security_socket_sendmsg+0x89/0xb0 [ 1443.033562] ? netlink_unicast+0x640/0x640 [ 1443.037903] sock_sendmsg+0xce/0x110 [ 1443.041628] ___sys_sendmsg+0x70a/0x840 [ 1443.047178] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1443.051943] ? __fget+0x210/0x370 [ 1443.055404] ? find_held_lock+0x35/0x130 [ 1443.059477] ? __fget+0x210/0x370 [ 1443.062951] ? lock_downgrade+0x740/0x740 [ 1443.067113] ? __fget+0x237/0x370 [ 1443.070584] ? __fget_light+0x172/0x1f0 [ 1443.074564] ? __fdget+0x1b/0x20 [ 1443.077934] ? sockfd_lookup_light+0xb4/0x160 [ 1443.082432] __sys_sendmsg+0xb9/0x140 [ 1443.086235] ? SyS_shutdown+0x170/0x170 [ 1443.090236] SyS_sendmsg+0x2d/0x50 [ 1443.093778] ? __sys_sendmsg+0x140/0x140 [ 1443.097854] do_syscall_64+0x1e8/0x640 [ 1443.101756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1443.106616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1443.111812] RIP: 0033:0x45a639 [ 1443.115001] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1443.122715] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1443.129997] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1443.137275] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1443.144587] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1443.151864] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:40 executing program 3: prlimit64(0x0, 0x5, &(0x7f0000000280)={0x7, 0x200}, 0x0) r0 = getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000380)=0xfffffda0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000500)}], 0x1, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r4, r4}, &(0x7f0000000140)=""/83, 0x53, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_NMI(r3, 0xae9a) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff25}, 0x6}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r9, r10, 0x0, 0x50000000000443) 01:29:40 executing program 4 (fault-call:1 fault-nth:28): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1443.330437] FAULT_INJECTION: forcing a failure. [ 1443.330437] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.354958] CPU: 1 PID: 32628 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1443.362904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.372272] Call Trace: [ 1443.374883] dump_stack+0x142/0x197 [ 1443.378535] should_fail.cold+0x10f/0x159 [ 1443.382702] should_failslab+0xdb/0x130 [ 1443.386695] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1443.391738] __kmalloc_node_track_caller+0x3d/0x80 [ 1443.396687] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1443.401376] pskb_expand_head+0x116/0xc10 [ 1443.405798] ? rtnl_fill_vfinfo+0xbd0/0xbd0 [ 1443.410124] ? kasan_kmalloc+0xce/0xf0 [ 1443.414050] netlink_trim+0x1c1/0x230 [ 1443.417885] netlink_broadcast_filtered+0x5c/0x9f0 [ 1443.422830] ? skb_scrub_packet+0x4b0/0x4b0 [ 1443.427188] nlmsg_notify+0x7c/0x190 [ 1443.430921] rtmsg_ifinfo_event.part.0+0xa1/0xc0 [ 1443.435689] rtmsg_ifinfo+0x6f/0x90 [ 1443.439333] netdev_state_change+0xd3/0xe0 [ 1443.443571] ? dev_valid_name+0x1b0/0x1b0 [ 1443.447735] ? set_operstate+0x11a/0x150 [ 1443.451810] do_setlink+0x2415/0x2d50 [ 1443.455629] ? rtnl_register+0x50/0x50 [ 1443.459526] ? trace_hardirqs_on+0x10/0x10 [ 1443.463770] ? save_trace+0x290/0x290 [ 1443.467586] ? is_bpf_text_address+0x7f/0x120 [ 1443.472097] ? __lock_acquire+0x5f7/0x4620 [ 1443.476343] ? __lock_acquire+0x5f7/0x4620 [ 1443.480595] ? __lock_acquire+0x5f7/0x4620 [ 1443.484838] ? trace_hardirqs_on+0x10/0x10 [ 1443.489078] ? validate_nla+0x201/0x5f0 [ 1443.493067] ? nla_parse+0x186/0x240 [ 1443.496790] rtnl_newlink+0xbe4/0x1700 [ 1443.500697] ? rtnl_link_unregister+0x200/0x200 [ 1443.505370] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1443.510053] ? lock_acquire+0x16f/0x430 [ 1443.514033] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1443.518470] ? rtnl_link_unregister+0x200/0x200 [ 1443.523144] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1443.527385] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1443.531974] ? netlink_deliver_tap+0x93/0x8f0 [ 1443.536481] netlink_rcv_skb+0x14f/0x3c0 [ 1443.540549] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1443.545145] ? lock_downgrade+0x740/0x740 [ 1443.549297] ? netlink_ack+0x9a0/0x9a0 [ 1443.553198] ? netlink_deliver_tap+0xba/0x8f0 [ 1443.557706] rtnetlink_rcv+0x1d/0x30 [ 1443.561428] netlink_unicast+0x45d/0x640 [ 1443.565497] ? netlink_attachskb+0x6a0/0x6a0 [ 1443.569915] ? security_netlink_send+0x81/0xb0 [ 1443.574509] netlink_sendmsg+0x7c4/0xc60 [ 1443.578595] ? netlink_unicast+0x640/0x640 [ 1443.582846] ? security_socket_sendmsg+0x89/0xb0 [ 1443.587611] ? netlink_unicast+0x640/0x640 [ 1443.591852] sock_sendmsg+0xce/0x110 [ 1443.595581] ___sys_sendmsg+0x70a/0x840 [ 1443.599560] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1443.604322] ? __fget+0x210/0x370 [ 1443.607779] ? find_held_lock+0x35/0x130 [ 1443.611848] ? __fget+0x210/0x370 [ 1443.615316] ? lock_downgrade+0x740/0x740 [ 1443.619479] ? __fget+0x237/0x370 [ 1443.622945] ? __fget_light+0x172/0x1f0 [ 1443.626928] ? __fdget+0x1b/0x20 01:29:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000200)=""/207, 0xcf}], 0x3, &(0x7f0000000340)=""/22, 0x16}, 0x100) r3 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') sendfile(r3, r4, 0x0, 0x401) r5 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') ioctl$KVM_S390_UCAS_UNMAP(r6, 0x4018ae51, &(0x7f00000000c0)={0x8000, 0x7ff, 0x2}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0x31e63622, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0xc05, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc14020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r7, 0x10, 0x70bd2b, 0x25dfdbfd}, 0x123}, 0x1, 0x0, 0x0, 0xc056}, 0x4004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x20}}, 0x4048000) [ 1443.630303] ? sockfd_lookup_light+0xb4/0x160 [ 1443.634811] __sys_sendmsg+0xb9/0x140 [ 1443.638622] ? SyS_shutdown+0x170/0x170 [ 1443.642616] SyS_sendmsg+0x2d/0x50 [ 1443.646159] ? __sys_sendmsg+0x140/0x140 [ 1443.650227] do_syscall_64+0x1e8/0x640 [ 1443.654123] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1443.658986] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1443.664184] RIP: 0033:0x45a639 [ 1443.667376] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1443.675091] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1443.682372] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1443.689655] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1443.696931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1443.704231] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:40 executing program 4 (fault-call:1 fault-nth:29): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1443.958790] FAULT_INJECTION: forcing a failure. [ 1443.958790] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.987940] CPU: 1 PID: 32641 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1443.995881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.005244] Call Trace: [ 1444.007973] dump_stack+0x142/0x197 [ 1444.011629] should_fail.cold+0x10f/0x159 [ 1444.015800] should_failslab+0xdb/0x130 [ 1444.019791] kmem_cache_alloc_node_trace+0x280/0x770 [ 1444.024917] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1444.030386] __kmalloc_node_track_caller+0x3d/0x80 [ 1444.035355] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1444.040050] __alloc_skb+0xcf/0x500 [ 1444.043695] ? skb_scrub_packet+0x4b0/0x4b0 [ 1444.048031] ? if_nlmsg_size+0x38f/0x810 [ 1444.052110] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1444.056709] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1444.061481] rtmsg_ifinfo+0x6f/0x90 [ 1444.065253] netdev_state_change+0xd3/0xe0 [ 1444.069511] ? dev_valid_name+0x1b0/0x1b0 [ 1444.073676] ? set_operstate+0x11a/0x150 [ 1444.077754] do_setlink+0x2415/0x2d50 [ 1444.081576] ? rtnl_register+0x50/0x50 [ 1444.085475] ? trace_hardirqs_on+0x10/0x10 [ 1444.089731] ? save_trace+0x290/0x290 [ 1444.093547] ? is_bpf_text_address+0x7f/0x120 [ 1444.098060] ? __lock_acquire+0x5f7/0x4620 [ 1444.102325] ? __lock_acquire+0x5f7/0x4620 [ 1444.106560] ? __lock_acquire+0x5f7/0x4620 [ 1444.110782] ? trace_hardirqs_on+0x10/0x10 [ 1444.115007] ? validate_nla+0x201/0x5f0 [ 1444.118965] ? nla_parse+0x186/0x240 [ 1444.122668] rtnl_newlink+0xbe4/0x1700 [ 1444.126545] ? rtnl_link_unregister+0x200/0x200 [ 1444.131200] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1444.135953] ? lock_acquire+0x16f/0x430 [ 1444.139909] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1444.144332] ? rtnl_link_unregister+0x200/0x200 [ 1444.148984] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1444.153305] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1444.157872] ? netlink_deliver_tap+0x93/0x8f0 [ 1444.162376] netlink_rcv_skb+0x14f/0x3c0 [ 1444.166448] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1444.171031] ? lock_downgrade+0x740/0x740 [ 1444.175166] ? netlink_ack+0x9a0/0x9a0 [ 1444.179047] ? netlink_deliver_tap+0xba/0x8f0 [ 1444.183526] rtnetlink_rcv+0x1d/0x30 [ 1444.187223] netlink_unicast+0x45d/0x640 [ 1444.191273] ? netlink_attachskb+0x6a0/0x6a0 [ 1444.195681] ? security_netlink_send+0x81/0xb0 [ 1444.200249] netlink_sendmsg+0x7c4/0xc60 [ 1444.204296] ? netlink_unicast+0x640/0x640 [ 1444.208521] ? security_socket_sendmsg+0x89/0xb0 [ 1444.213263] ? netlink_unicast+0x640/0x640 [ 1444.217482] sock_sendmsg+0xce/0x110 [ 1444.221201] ___sys_sendmsg+0x70a/0x840 [ 1444.225181] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1444.229931] ? __fget+0x210/0x370 [ 1444.233370] ? find_held_lock+0x35/0x130 [ 1444.237425] ? __fget+0x210/0x370 [ 1444.240962] ? lock_downgrade+0x740/0x740 [ 1444.245098] ? __fget+0x237/0x370 [ 1444.248540] ? __fget_light+0x172/0x1f0 [ 1444.252498] ? __fdget+0x1b/0x20 [ 1444.255849] ? sockfd_lookup_light+0xb4/0x160 [ 1444.260328] __sys_sendmsg+0xb9/0x140 [ 1444.264114] ? SyS_shutdown+0x170/0x170 [ 1444.268083] SyS_sendmsg+0x2d/0x50 [ 1444.271606] ? __sys_sendmsg+0x140/0x140 [ 1444.275677] do_syscall_64+0x1e8/0x640 [ 1444.279548] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1444.284390] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1444.289572] RIP: 0033:0x45a639 [ 1444.292745] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1444.300435] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1444.307701] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1444.310117] net_ratelimit: 2 callbacks suppressed [ 1444.310122] protocol 88fb is buggy, dev hsr_slave_0 [ 1444.314954] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1444.314961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1444.319843] protocol 88fb is buggy, dev hsr_slave_1 [ 1444.324795] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1444.325076] protocol 88fb is buggy, dev hsr_slave_0 [ 1444.357191] protocol 88fb is buggy, dev hsr_slave_1 01:29:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) readv(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000380)=""/103, 0x67}], 0x2) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:41 executing program 4 (fault-call:1 fault-nth:30): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1444.529830] FAULT_INJECTION: forcing a failure. [ 1444.529830] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.543775] CPU: 0 PID: 32650 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1444.551708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.561075] Call Trace: [ 1444.563705] dump_stack+0x142/0x197 [ 1444.567349] ? vprintk_func+0x65/0x159 [ 1444.571258] should_fail.cold+0x10f/0x159 [ 1444.575430] should_failslab+0xdb/0x130 [ 1444.579426] kmem_cache_alloc_node_trace+0x280/0x770 [ 1444.584549] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1444.590020] __kmalloc_node_track_caller+0x3d/0x80 [ 1444.594968] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1444.599655] __alloc_skb+0xcf/0x500 [ 1444.603297] ? skb_scrub_packet+0x4b0/0x4b0 [ 1444.607626] ? if_nlmsg_size+0x38f/0x810 [ 1444.611700] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1444.616296] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1444.621067] rtmsg_ifinfo+0x6f/0x90 [ 1444.624711] netdev_state_change+0xd3/0xe0 [ 1444.628972] ? dev_valid_name+0x1b0/0x1b0 [ 1444.633128] ? set_operstate+0x11a/0x150 [ 1444.637197] do_setlink+0x2415/0x2d50 [ 1444.641013] ? rtnl_register+0x50/0x50 [ 1444.644913] ? trace_hardirqs_on+0x10/0x10 [ 1444.649155] ? save_trace+0x290/0x290 [ 1444.652973] ? is_bpf_text_address+0x7f/0x120 [ 1444.657487] ? __lock_acquire+0x5f7/0x4620 [ 1444.661737] ? __lock_acquire+0x5f7/0x4620 [ 1444.665990] ? __lock_acquire+0x5f7/0x4620 [ 1444.670245] ? trace_hardirqs_on+0x10/0x10 [ 1444.674497] ? validate_nla+0x201/0x5f0 [ 1444.678497] ? nla_parse+0x186/0x240 [ 1444.682226] rtnl_newlink+0xbe4/0x1700 [ 1444.686149] ? rtnl_link_unregister+0x200/0x200 [ 1444.690828] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1444.695518] ? lock_acquire+0x16f/0x430 [ 1444.699501] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1444.703955] ? rtnl_link_unregister+0x200/0x200 [ 1444.708638] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1444.712891] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1444.717490] ? netlink_deliver_tap+0x93/0x8f0 [ 1444.722004] netlink_rcv_skb+0x14f/0x3c0 [ 1444.726076] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1444.730671] ? lock_downgrade+0x740/0x740 [ 1444.734832] ? netlink_ack+0x9a0/0x9a0 [ 1444.738734] ? netlink_deliver_tap+0xba/0x8f0 [ 1444.743245] rtnetlink_rcv+0x1d/0x30 [ 1444.746970] netlink_unicast+0x45d/0x640 [ 1444.751056] ? netlink_attachskb+0x6a0/0x6a0 [ 1444.755478] ? security_netlink_send+0x81/0xb0 [ 1444.760070] netlink_sendmsg+0x7c4/0xc60 [ 1444.764147] ? netlink_unicast+0x640/0x640 [ 1444.768401] ? security_socket_sendmsg+0x89/0xb0 [ 1444.773190] ? netlink_unicast+0x640/0x640 [ 1444.777443] sock_sendmsg+0xce/0x110 [ 1444.781174] ___sys_sendmsg+0x70a/0x840 [ 1444.785168] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1444.789938] ? __fget+0x210/0x370 [ 1444.793401] ? find_held_lock+0x35/0x130 [ 1444.797495] ? __fget+0x210/0x370 [ 1444.800960] ? lock_downgrade+0x740/0x740 [ 1444.805122] ? __fget+0x237/0x370 [ 1444.808593] ? __fget_light+0x172/0x1f0 [ 1444.812581] ? __fdget+0x1b/0x20 [ 1444.815950] ? sockfd_lookup_light+0xb4/0x160 [ 1444.820458] __sys_sendmsg+0xb9/0x140 [ 1444.824269] ? SyS_shutdown+0x170/0x170 [ 1444.828263] SyS_sendmsg+0x2d/0x50 [ 1444.831813] ? __sys_sendmsg+0x140/0x140 [ 1444.835881] do_syscall_64+0x1e8/0x640 [ 1444.839776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1444.844635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1444.849835] RIP: 0033:0x45a639 [ 1444.853030] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1444.860748] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1444.868050] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 01:29:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003d1000010800"/21, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) [ 1444.875329] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1444.882608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1444.889976] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 01:29:42 executing program 4 (fault-call:1 fault-nth:31): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1444.977277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4157 sclass=netlink_route_socket pig=32665 comm=syz-executor.5 [ 1445.021715] FAULT_INJECTION: forcing a failure. [ 1445.021715] name failslab, interval 1, probability 0, space 0, times 0 01:29:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) syncfs(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x2) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x28}) r8 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0xd75bb0563d7977c4, 0x0, 0x3}}, 0x14) close(r8) splice(r5, 0x0, r8, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0x5, &(0x7f0000000100)=0x9, 0x4) close(r10) splice(r9, 0x0, r10, 0x0, 0xffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340002001200010800000000000000000000000079a1d57b4b645c3779b9327d32c34e63f0084beba5a3855701416d024d3f", @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYPTR], @ANYRES64=r8, @ANYRES16=r2], @ANYRESOCT=r9], 0x3}, 0x1, 0x0, 0x0, 0x400000c9}, 0x40) [ 1445.073957] CPU: 1 PID: 32666 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1445.081919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.091283] Call Trace: [ 1445.093897] dump_stack+0x142/0x197 [ 1445.097547] should_fail.cold+0x10f/0x159 [ 1445.101716] should_failslab+0xdb/0x130 [ 1445.105705] kmem_cache_alloc_node+0x287/0x780 [ 1445.110303] __alloc_skb+0x9c/0x500 [ 1445.113942] ? skb_scrub_packet+0x4b0/0x4b0 [ 1445.118295] ? if_nlmsg_size+0x38f/0x810 [ 1445.122507] rtmsg_ifinfo_build_skb+0x72/0x140 [ 1445.127134] rtmsg_ifinfo_event.part.0+0x35/0xc0 [ 1445.131911] rtmsg_ifinfo+0x6f/0x90 [ 1445.135557] netdev_state_change+0xd3/0xe0 [ 1445.139827] ? dev_valid_name+0x1b0/0x1b0 [ 1445.143991] ? set_operstate+0x11a/0x150 [ 1445.148070] do_setlink+0x2415/0x2d50 [ 1445.151891] ? rtnl_register+0x50/0x50 [ 1445.155790] ? trace_hardirqs_on+0x10/0x10 [ 1445.160037] ? save_trace+0x290/0x290 [ 1445.163853] ? is_bpf_text_address+0x7f/0x120 [ 1445.168369] ? __lock_acquire+0x5f7/0x4620 [ 1445.172883] ? __lock_acquire+0x5f7/0x4620 [ 1445.177157] ? __lock_acquire+0x5f7/0x4620 [ 1445.181407] ? trace_hardirqs_on+0x10/0x10 [ 1445.185779] ? validate_nla+0x201/0x5f0 [ 1445.189860] ? nla_parse+0x186/0x240 [ 1445.193590] rtnl_newlink+0xbe4/0x1700 [ 1445.197502] ? rtnl_link_unregister+0x200/0x200 [ 1445.202186] ? avc_has_perm_noaudit+0x2b2/0x420 [ 1445.206875] ? lock_acquire+0x16f/0x430 [ 1445.210866] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 1445.215326] ? rtnl_link_unregister+0x200/0x200 [ 1445.220002] rtnetlink_rcv_msg+0x3eb/0xb70 [ 1445.224251] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1445.228846] ? netlink_deliver_tap+0x93/0x8f0 [ 1445.233355] netlink_rcv_skb+0x14f/0x3c0 [ 1445.237429] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1445.242025] ? lock_downgrade+0x740/0x740 [ 1445.246186] ? netlink_ack+0x9a0/0x9a0 [ 1445.250088] ? netlink_deliver_tap+0xba/0x8f0 [ 1445.254598] rtnetlink_rcv+0x1d/0x30 [ 1445.258326] netlink_unicast+0x45d/0x640 [ 1445.262420] ? netlink_attachskb+0x6a0/0x6a0 [ 1445.266841] ? security_netlink_send+0x81/0xb0 [ 1445.271438] netlink_sendmsg+0x7c4/0xc60 [ 1445.275605] ? netlink_unicast+0x640/0x640 [ 1445.279857] ? security_socket_sendmsg+0x89/0xb0 [ 1445.284633] ? netlink_unicast+0x640/0x640 [ 1445.288889] sock_sendmsg+0xce/0x110 [ 1445.292617] ___sys_sendmsg+0x70a/0x840 [ 1445.296605] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1445.301373] ? __fget+0x210/0x370 [ 1445.304837] ? find_held_lock+0x35/0x130 [ 1445.308909] ? __fget+0x210/0x370 [ 1445.312378] ? lock_downgrade+0x740/0x740 [ 1445.316539] ? __fget+0x237/0x370 [ 1445.320000] ? __fget_light+0x172/0x1f0 [ 1445.323980] ? __fdget+0x1b/0x20 [ 1445.327351] ? sockfd_lookup_light+0xb4/0x160 [ 1445.331848] __sys_sendmsg+0xb9/0x140 [ 1445.335639] ? SyS_shutdown+0x170/0x170 [ 1445.339606] SyS_sendmsg+0x2d/0x50 [ 1445.343127] ? __sys_sendmsg+0x140/0x140 [ 1445.347172] do_syscall_64+0x1e8/0x640 [ 1445.351042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1445.355875] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1445.361046] RIP: 0033:0x45a639 [ 1445.364219] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.371911] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1445.379165] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1445.386429] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1445.393686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1445.400945] R13: 00000000004c8d75 R14: 00000000004df5e0 R15: 0000000000000004 [ 1445.970591] device bridge_slave_1 left promiscuous mode [ 1445.976216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.044200] device bridge_slave_0 left promiscuous mode [ 1446.050920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.187182] device hsr_slave_1 left promiscuous mode [ 1446.246651] device hsr_slave_0 left promiscuous mode [ 1446.313369] team0 (unregistering): Port device team_slave_1 removed [ 1446.327136] team0 (unregistering): Port device team_slave_0 removed [ 1446.341760] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1446.390137] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.390173] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.395259] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.413346] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1446.516333] bond0 (unregistering): Released all slaves [ 1448.470171] protocol 88fb is buggy, dev hsr_slave_0 [ 1448.470174] protocol 88fb is buggy, dev hsr_slave_0 [ 1448.470219] protocol 88fb is buggy, dev hsr_slave_1 [ 1448.670902] IPVS: ftp: loaded support on port[0] = 21 [ 1449.491552] chnl_net:caif_netlink_parms(): no params data found [ 1449.522648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.529050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.535980] device bridge_slave_0 entered promiscuous mode [ 1449.543235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.549630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.556863] device bridge_slave_1 entered promiscuous mode [ 1449.574052] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1449.583402] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1449.599218] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1449.606516] team0: Port device team_slave_0 added [ 1449.612000] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1449.618977] team0: Port device team_slave_1 added [ 1449.624392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1449.632082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1449.692399] device hsr_slave_0 entered promiscuous mode [ 1449.730395] device hsr_slave_1 entered promiscuous mode [ 1449.770931] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1449.777952] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1449.792714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.799073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.805756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.812170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.842825] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1449.848937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.857122] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1449.866243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1449.873441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.880738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.889896] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1449.896421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.905749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1449.913363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.919765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.928761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1449.936365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.942735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.958023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1449.965950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1449.980785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1449.988369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1449.996459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1450.005531] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1450.011829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1450.024355] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1450.031959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1450.038660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1450.048582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.120178] net_ratelimit: 1 callbacks suppressed [ 1450.120183] protocol 88fb is buggy, dev hsr_slave_0 [ 1450.130123] protocol 88fb is buggy, dev hsr_slave_1 [ 1450.240175] protocol 88fb is buggy, dev hsr_slave_0 [ 1450.245265] protocol 88fb is buggy, dev hsr_slave_1 [ 1450.360180] protocol 88fb is buggy, dev hsr_slave_0 [ 1450.365291] protocol 88fb is buggy, dev hsr_slave_1 [ 1450.480164] protocol 88fb is buggy, dev hsr_slave_0 [ 1450.485289] protocol 88fb is buggy, dev hsr_slave_1 [ 1450.490753] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1450.550214] protocol 88fb is buggy, dev hsr_slave_0 [ 1450.550218] protocol 88fb is buggy, dev hsr_slave_0 01:29:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000200)=""/207, 0xcf}], 0x3, &(0x7f0000000340)=""/22, 0x16}, 0x100) r3 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') sendfile(r3, r4, 0x0, 0x401) r5 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') ioctl$KVM_S390_UCAS_UNMAP(r6, 0x4018ae51, &(0x7f00000000c0)={0x8000, 0x7ff, 0x2}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0x31e63622, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0xc05, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc14020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r7, 0x10, 0x70bd2b, 0x25dfdbfd}, 0x123}, 0x1, 0x0, 0x0, 0xc056}, 0x4004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x20}}, 0x4048000) 01:29:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, 0x0, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000000c0)={0xfffffffa, 0x5, 0x7, 0x0, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) tee(r5, r5, 0x5, 0x3) shmctl$IPC_RMID(0x0, 0x0) sendfile(r7, r8, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r9 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r9, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0x1, &(0x7f0000000280)={0x9, 0x200008d}, 0x0) 01:29:48 executing program 4: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000061792a0400a000000008001b000000000008001000"], 0x30}}, 0x2004c040) 01:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) ioctl(r0, 0x3, &(0x7f0000000040)="2613503855ad9e04211227c536dd7bf2708f31378b1893ae2e0be7bbeea28e9d44c6739fb30882b3bf580cebb4cdbed9d0817af062de4abe256eac892f3a3b77a8cf8432e2aa09eec6386fd53751623a19e4acc8f2f42fd899df932d359fde292c7a4b31be78f7bc97cb1930586ac70df460effb3e066283fbccc07212554c9d6ea17b6062d27c316bb8be9416ee04692b087cad42ab7c9590dfb8a12085a1a9d2ae236115e3a6da1f6f6db6a4211d47f29ea2c88fb68c44") 01:29:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x81, 0x20}, 0xc) listen(r0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0000de", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, r2, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x9}]}}}}}}}}, 0x0) [ 1451.239782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.248418] bridge0: port 2(bridge_slave_1) entered disabled state 01:29:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) modify_ldt$read_default(0x2, &(0x7f00000002c0)=""/175, 0xaf) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000001, 0x410483) socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000f57668ffd600100001080000000000000000004948a23147fb01ca8cf7ed5a0e7d21c84d1b2fa87b8ebf35147cd9a85b748fc785be4e6d33c696a3fd9b5b42f3f1876f2c7edfb478a8b765b8bbcea45864d79c", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c000000003b20d3b8209f135b39", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008002c0002000000"], 0x3c}}, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/153) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x8, 0x4, 0x1, 0x0, 0x4, 0xff, 0x4, 0xffffffff, 0x1, 0x7, 0x0, 0xff, 0xffffff80, 0x8, 0x0, 0x10}}) [ 1451.298975] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1451.324327] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_getroute={0x1030, 0x1a, 0x308, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x3, 0xfd, 0x1, 0xfe, 0xe, 0x400}, [@RTA_METRICS={0x1004, 0x8, "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"}, @RTA_MARK={0x8, 0x10, 0x2}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x1030}}, 0x0) [ 1451.379883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26742 sclass=netlink_route_socket pig=32712 comm=syz-executor.4 01:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/route\x00') getsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0xfffffecc, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0xff82}}, 0x0) 01:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x9}}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) socket$l2tp(0x18, 0x1, 0x1) 01:29:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3008000010000108f8ffffffffff7e0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000207f84c1c5205a5778ba796115e6124630fcbf3ecd41f2a529be84f524538c455cda4a88c4eb3f39a2227631cf6ab5274226d5c70c6e3df8bd3d54095dd6dbb2e5781c5cc5e193063780c77e"], 0x30}}, 0x0) fcntl$setsig(r0, 0xa, 0x24) [ 1451.567288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15104 sclass=netlink_route_socket pig=32712 comm=syz-executor.4 [ 1451.589620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26742 sclass=netlink_route_socket pig=32723 comm=syz-executor.4 01:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_getparam(r1, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000100000000000000878d8102aad8c7a4c14e24d0379b4bbe512d7580c9a6d6a1decde9f01aa306048d0f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1451.682716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32736 comm=syz-executor.5 [ 1451.697859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32738 comm=syz-executor.5 01:29:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000020c0)=[{{&(0x7f0000001c00)=@hci, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c80)=""/57, 0x39}, {&(0x7f0000001cc0)=""/223, 0xdf}, {0x0}, {&(0x7f0000001e00)=""/68, 0x44}, {&(0x7f0000001e80)=""/106, 0x6a}, {&(0x7f0000001f00)=""/82, 0x52}, {&(0x7f0000001f80)=""/49, 0x31}], 0x7, &(0x7f0000002040)=""/70, 0x46}, 0xf4c8}], 0x1, 0x100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x800000100000004) creat(&(0x7f0000000580)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') sendfile(r4, r5, &(0x7f0000000040)=0x100060, 0xa808) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x2) r8 = dup2(r6, 0xffffffffffffffff) readv(r8, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000380)=""/249, 0xf9}, {&(0x7f0000000480)=""/27, 0x1b}], 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000140)='net/sockstat\x00') pwritev(r10, &(0x7f0000000180), 0x0, 0x0) getcwd(&(0x7f00000001c0)=""/23, 0x17) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000100), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) setsockopt$netrom_NETROM_N2(r11, 0x103, 0x3, &(0x7f0000000300)=0x9, 0x4) fstat(0xffffffffffffffff, &(0x7f00000000c0)) 01:29:49 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) 01:29:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000000c0), 0xff55) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) accept$netrom(r3, &(0x7f0000000400)={{0x3, @netrom}, [@rose, @netrom, @null, @bcast, @null, @rose, @default, @default]}, &(0x7f0000000180)=0x48) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x10000039, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000380)=0x14) connect$packet(r2, &(0x7f00000003c0)={0x11, 0x4, r9, 0x1, 0x7, 0x6, @random="faf0039abdfe"}, 0x14) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r10 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r10, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x5}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) 01:29:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, 0x0, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:49 executing program 0: r0 = socket$packet(0x11, 0x8000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1, 0x8de7d8f023d06bd7}, 0xfffffffffffffdf6) r1 = socket$packet(0x11, 0x8000000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0x4}, 0x12) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="390600000000000000000000000000000500000000000000000000000000000010040000000000005d76626f786e6574316574682c0e6f4000"], 0x39) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x17e, 0x0) 01:29:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x490500) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x4, 0x9, 0xf1, 0x40, 0x1, 0x0, 0x4, 0x5, 0x7, 0x1, 0x8, 0x74, 0x5}, {0x401, 0x9, 0x0, 0x52, 0x5, 0xa4, 0x8, 0x81, 0x5, 0x1, 0x7, 0xff, 0x8}, {0x4, 0x7f, 0x9, 0x6, 0x8, 0x2, 0x7, 0x2, 0x0, 0x2, 0x1f, 0x4, 0x81}], 0x9}) 01:29:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_getroute={0x0, 0x1a, 0x4, 0x70bd29, 0x25dfdbfc, {0x2, 0x2e, 0x20, 0x46, 0x0, 0x2, 0x35, 0x0, 0x2800}, ["", "", ""]}, 0xfffffffffffffe99}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x402000, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x1f, 0x1}) 01:29:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x541f, 0xfffffffffffffffe) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r3, 0xff}, &(0x7f0000000280)=0x8) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/19) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000340)={0x2, 0x2, 0x59, &(0x7f00000002c0)="771aa38ce326d4dfce95462e028757ef3353ba0725850d46be5f6800e79206f361499cf0b12e2b7c1125ba8223425c9486212c4ad4d3c1d6d43cea7ce381ff485abc67b95e07cfec6bfe49422c24738f5e2a738ea92d9627cd"}) 01:29:49 executing program 1: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @loopback}, {0x306, @remote}, 0x0, {0x2, 0x4e21, @broadcast}, 'veth1_to_bridge\x00'}) munmap(&(0x7f00000c6000/0x3000)=nil, 0x3000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) 01:29:49 executing program 4: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000200)=""/123) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20081000}, 0x0) 01:29:49 executing program 1: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @loopback}, {0x306, @remote}, 0x0, {0x2, 0x4e21, @broadcast}, 'veth1_to_bridge\x00'}) munmap(&(0x7f00000c6000/0x3000)=nil, 0x3000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) 01:29:49 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r0, 0x11, 0x0, 0x107fff) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 01:29:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, 0x0, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r8 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r8, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:50 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x400000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r4, 0x0, 0x3, &(0x7f0000000180)='+-\x00'}, 0x30) mq_notify(r2, &(0x7f0000000200)={0x0, 0x6, 0x1, @tid=r6}) io_setup(0x1, &(0x7f0000000140)=0x0) io_destroy(r7) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="34e7000000f8340000007f12b579fb64a18c15eeb87600b1cd06000000e20093750ecb8a56df78a949b7d0e21210ec7f906a6ebe5733da5a4d9f4391a8188b39771c4d9ece60d122c6491f4c34982098116ea91a378e3dcf1e167eb8fbfe2ba6212b43b90d1f1014c4e826ea1f4b95d3dfb4d47394562d56ac48dc41e26bc1050f844e67aa6bac835774181ee410130211c827155c5e2b029233e451876d8137c7aba835a7a2f39f15c900042dc7fe9fc815c254850000000000000000"], 0xe) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 01:29:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:50 executing program 4: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000100)=0x7, 0x4) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r4 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0xabf) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:29:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x900, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100c1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0xffffffff, 0x2) io_submit(r2, 0x3, &(0x7f0000001440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4b85d0a604e7b06b, 0x1f, r4, &(0x7f0000000200)="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", 0x1000, 0x2, 0x0, 0x2, r5}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0xfffd, r6, &(0x7f0000001200)="d9201fda6042f58a4d2399b98c9cea5821f2460f2e0516c57ddfc7091f361aef69bdf0a5e2b84b80a5ba6705a3feea60ecf05fd8ccba94b07ad5011104113428e9e515f0ca0b2c125738ab303fdf0d7453fa28dc01fef2b33a9110e813f0b07b21f1f6686bdab3fc5d69371526b2be95fe27a35ec3e8489c40732e9b2d4094dd4128881cee7ad2", 0x87, 0x0, 0x0, 0x0, r7}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x4, 0x9, r9, &(0x7f0000001300)="748b8c9c71f1bb6f86c9ed575975f20154e88ef7d48465010aee1bc64c1963a06e5a72094dd4fb7d3a10758e7caaa6f549f86e72afc142a5ebb7e8f3ab49b8da381ff8436f67659e368ee1ae399423a370369a1e116565ec605990bd0ce64cc1362b8f3864d6e4bb1dee9c18e481cddd1d6dee6f24991bce72c1ffb619a0af3c1453d922f7de4be621a4a135b0c125a12b20b3f7b290039370f3fa1301e2422b41745148169890eafb302fb568f2dfe3e68c78c872181d2818ea42666bbf9dc3e6ccbf48eb577de9cde8ad6f891c1dfab042f18afa", 0xd5, 0x7fff, 0x0, 0x6, r11}]) 01:29:50 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0x800000000e001, 0x0, &(0x7f0000000380), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x1080, 0x0) fchdir(r0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000040)={0x75, "4197a8ceeb70b8f7ea977d4eb734c11709c02167547ad5f1100a1d241f7c20a847b01952df4456d364f4635f916625ed81c968543eb444d1bb0e124c0d8c7fbcbc66c21fbcd8578a0797a775e2e30c5331de1d3ec9c6d5b625fcf7d2d6aa96167083ff574174a55a80d171a9aca702ff62b3dc8c16a0f0d48b6427f885fba340"}) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b035041291559f3ee3aacfb33c6af9680d512f4d8a5c51817c3ff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776f7894ee47382b8811e658a49a0eba9b9d6a05995f5ed199fcf8722be75fa42c080601d48e793d1429196b4d9182f7c46359a074285b251aca195af3b2887cc79d0cede7cc0b7e7f95c7d70472f7d3981e50042390a546375c8c1f1734a24583e1f8066319e93802eda50f3fb22ab8d6dc3d2afd102b"], 0xe6) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 01:29:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a290930206040000000001080009003900090035000c031400000019000b40efffffff030022dc1338d54404009b84136ef75afb83de4411000500c4", 0x49}], 0x1, 0x0, 0x19}, 0x0) close(r2) socket(0x10, 0x802, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r5, &(0x7f0000003540), 0x400000000000310, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) sendmsg$rds(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) [ 1453.752883] FAT-fs (loop0): bogus number of reserved sectors [ 1453.759001] FAT-fs (loop0): Can't find a valid FAT filesystem 01:29:50 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) ptrace$setsig(0x4203, 0x0, 0x1, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@mcast1, @in6}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='fuse\x00', 0x0, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba10800800", 0x1e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) getresgid(0x0, &(0x7f0000000600), 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) setregid(0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r7, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32=r0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="040001000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000800f83662baef5dcfe96b0f85f3a09a99e65a05494942c23b10c9667670132df295bf59a597c255de6e48773c429932a7dabe852d3d6649c3e05565c79fe74bb47f0999cf97271b0794928db972b6caa4b5f91596b99ab3bc7fdbae7417414ee84ba7a469e5b6321661c8344fe275ceada261ff0e1cc5fdd8da7e2a82f7b77ce59e9358a2752d983df844c787760000000000004299186c5f86f271a34e851ba4d43e57a7c1afa15a06dd56c05dda09051494679c557daa675047dab5e1a242b9623675c660c2b357d4827fa3ff36cd9c1e2b02c37c8111c399f328e96437dbf1ab3f657a3758300b444b95e9543ffaccefdba241994888d8f2e13cd47e6493f8b031d9dbde64344b8f7637344e394a544830aedb32347863a7052f50888711e162230b90c5d277cf6db9c13184c423a3ee513a480d5bb71faeadd66810fe02a0290ad4105cdc5613b61954bcf97068c0460ae695f957c78926ff6021d8563c2fecfafeb9c67baae2da08a5c3459f1f14aa080fa982ad7c61ec635d584a7a011d6d8877f144ffbfe09c1d6f677c74986dac3c62762993b5fe6e372e05192d71033f21ed5aaf635dbd92ab1d77a31e015615bfeb9e8997f0e70b45d0e9dc6a9e3caefe", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="10000000000000002000000000000000"], 0x7c, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=0x4, 0x4) setreuid(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:29:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1453.903146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=381 comm=syz-executor.0 01:29:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000000c0)=0x4) [ 1453.989414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=381 comm=syz-executor.0 [ 1454.010899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=381 comm=syz-executor.0 [ 1454.035760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=381 comm=syz-executor.0 [ 1454.048739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=381 comm=syz-executor.0 01:29:51 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x40) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180), 0x0) pipe(&(0x7f0000000140)) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 01:29:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r5}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r8}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r10, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r11, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r12, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r13, 0x0) r14 = getegid() getresgid(&(0x7f0000000140), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r16 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r16, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r17, 0x0) r18 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r19, 0x0) r20 = getegid() r21 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r21, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r22, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="02000100ac166961c93bf178d9be82a7175bc595e5b785035b0b9d3ae737e5eac350f76fbf3b6c7ef7208b46ceb8d8b6841ccd256b7c50bcf45b5aaa0fd8cf5b", @ANYRES32=r9, @ANYBLOB="040002000000000008000100", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r17, @ANYBLOB="08000400", @ANYRES32=r19, @ANYBLOB="08000200", @ANYRES32=r20, @ANYBLOB="08000400", @ANYRES32=r22, @ANYBLOB="1000b72d000000002000020000000000"], 0x7c, 0x347bc33f6bd30f24) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x62, &(0x7f0000000040)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffedb, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x900, 0x0, 0xfffdfffc, {0x0, 0x0, 0x0, 0x0, 0x42040}, [@IFLA_GROUP={0x2}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800000000000000000000000076734937c3b3eb07b845a2189c70f7eaab3312d9d6456d5c80d68dcfe8cc3abafcf61f6dfe1b696068aaac3e5dd86b809a", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:29:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0060ecff0000007613175937d0d7"], 0x30}}, 0x0) 01:29:51 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[]}}, 0x0) [ 1454.587086] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1454.622717] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:29:51 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) getsockname(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) fcntl$setpipe(r4, 0x407, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000000)={0x580000, 0x0, 0x1001000200000000, 0x0, 0xc00, 0x0, [0xff0f, 0x3800000]}) socket$netlink(0x10, 0x3, 0x0) r7 = creat(&(0x7f0000000240)='./bus\x00', 0xd4a53447cadaaab6) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f0000000280)=0x3) r8 = socket(0x10, 0x803, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000140), 0x4) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0xffffffff, 0x2) setsockopt$inet6_tcp_int(r9, 0x6, 0xa, &(0x7f00000002c0)=0xfffffffd, 0x4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) prctl$PR_SET_UNALIGN(0x6, 0x0) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x582c) 01:29:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@setlink={0x8c, 0x13, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xb99c78a326f00de4, 0x1400}, [@IFLA_GROUP={0x8, 0x1b, 0x400}, @IFLA_PORT_SELF={0x3c, 0x19, [@IFLA_PORT_REQUEST={0x8, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9de8ffb53ee0350745470871a8228c63"}, @IFLA_PORT_VF={0x8, 0x1, 0xd8b}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "37e0fc3c4906000000000000000000c7"}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x80000}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x22}, @IFLA_CARRIER={0x8, 0x21, 0x97}]}, 0x8c}}, 0x0) 01:29:51 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0x3, 0x0, 0x4, 0x400000, {0x77359400}, {0x3, 0xc, 0xbd, 0x20, 0x81, 0x5, "e8bb3d00"}, 0x87f, 0x4, @offset=0x4, 0x4}) 01:29:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000012000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:29:51 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100, 0x450201) ioctl$CAPI_INSTALLED(r0, 0x80024322) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:51 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r0, 0x8, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x0, 0x800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$binfmt_misc(r2, &(0x7f0000000040)={'syz0', "be6119b969508f533f4fa836b2b609529ca75224e6572571d50beb"}, 0x1f) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x200, 0x10000) ioctl$VT_DISALLOCATE(r3, 0x5608) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00bda34f9a0800100005500000ca919b682e9e6bc8fc3cbcdc292815ce060007c06ffdd28ed2fba2cd6c42c422732eeca6d82450b7c1f5bf1334a6a97014b55be51dd06af2377f6fb80b1667f794"], 0x30}}, 0x0) 01:29:52 executing program 1: writev(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x79, 0x22c1) accept4$bt_l2cap(r0, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getegid() request_key(0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000080)={0x6}) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x20000084) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) 01:29:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x8c000) r7 = socket(0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r11, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000240)={r11, @in6={{0xa, 0x4e24, 0x4, @empty, 0x435ff911}}, 0x100, 0x7}, &(0x7f0000000080)=0x90) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getmulticast={0x0, 0x3a, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0xfffffffffffffccf}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 01:29:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e7, 0x0, @perf_config_ext={0xffffffffffffff32, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x40800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@dev, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', r1}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x40403, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000540)={0x1, [0x0]}, &(0x7f0000000580)=0x6) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT], 0x1}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000003c0)={0x3, 0x5, 0x2, 0x7fffffff, 0x1003, 0x2000009, 0x1}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000680)=ANY=[]) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) open(&(0x7f0000000000)='.\x00', 0x200140, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') 01:29:52 executing program 1: r0 = socket$packet(0x11, 0x1bb0e5d6493f94f, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f00000001c0)) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x80000000, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r1, 0x0, r7, 0x0, 0xffffffff, 0x2) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x400, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_any='access=any'}, {@posixacl='posixacl'}, {@cache_mmap='cache=mmap'}, {@uname={'uname', 0x3d, '/(GPLmd5sum(lo+mime_type\xaaeth0'}}, {@afid={'afid', 0x3d, 0x7}}, {@noextend='noextend'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup'}}, {@smackfshat={'smackfshat'}}]}}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000200)=""/253, &(0x7f0000000300)=""/172, &(0x7f00000003c0)=""/87, 0x2800}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0xc) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) 01:29:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1455.712096] overlayfs: missing 'lowerdir' 01:29:52 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f00000028c0)='/dev/admmidi#\x00', 0x10001, 0x800800) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000002900)={0x0, 0x7e3, 0x0, 0x2, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) pwritev(r2, &(0x7f00000027c0)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000000c0)="5bb292f2db52f8", 0x7}, {&(0x7f0000001380)="bcce4b1c60c12ed7f648fd2235d2b70bcb2a9f018b452cb284af14e3d555b5d2cc501c78f206a732c2174c6240b6c104eadf78979b672aa27b9617da8902f79911b5", 0x42}, {&(0x7f0000001400)="6c0910398bc956a9f6092e508d3a610038a35ee4e0a2f8d25f6875496c6ac05bd193f307274bad8d85034cb6b67db7375358eb49", 0x34}, {&(0x7f0000001440)="858f38864a97ab1d93e6a1f824cf42c6db39fac4b89a78fd5f8e86dd8dfdf3d4cf1891dc4e4bb601422b1c9d3c08304d3849a47ca3f1f1960599a83e35115bdbb2083e97da2b16d617dcbc6fe1982bc1b3fc37122c9ead6584475c5975546bdffa0828f6fbaff7ddbf14993d9c242541e95c03e63604f0c17daed53f47ff5fb194398e11639842d49e78fd7cfeab2209d4cbea7b1d81faf1c12cd9acf51bc36acecfff12bda75508be6d3e0399a096138ee071b014ebc5ac533c8972c3573ea7df5fdb9fe54996742e86ed3c2a2761078cb4c395bf8da7d7ea3f0d287ff28fb58cc5", 0xe2}, {&(0x7f0000001540)="33d2957281e62f0af94d8157565feefd02bbbe351a0a6167c6ca882026a01780f628291fc69f90ae851009417e32db0518943149d48c8fd097f793c3750cee6d8011159bc81ac71da8656b27641deb77ee1ded6aeacda808a634fb880243562b6bf89a307df364dc86d27f5026ad825cc8752b10fa9ffc3e4482b3e7bfaee61251e96ee7accae50418d740fcc5a389c0bc69e2ffd2205fef1f6e18460962d72b78fe1ea5a1c8cad0fb84f929af2bebb99da583937144db6bef723585", 0xbc}, {&(0x7f00000026c0)="1ca24295b2b1f8c135b27921d7e1773d497700a86158528426008a796c270748c1cfc161dffd100a8e89455c8dd4e9a19e24359e7c8939802e057a596ec4f67f640ba90799181704707c14c58843d1c4da5b345dda9f336bde1edc23d60c292b3e197baec4dd4dcc79b4290a3fe22a8bf7f88ec4914a691a27c6609a0c3917449141c9c99d53e4c61b99eda189cda35d7ba7e1114d3f26fea7bfa037ca90da6757e2af78bffeddd4cf5454c1818c4ffa0da92330ed88693d433b69580e88acf81a08e60811b2f3c4cc800a5dece28466818b4f48fc6d8958e3f7eda7588da2f2d477bdab", 0xe4}, {&(0x7f0000001600)="5c67206da661ea8606c81c0f03b84ee0fddb2bd7360267470517d073bc604fe1257396b12532bc5f9883ca07c7dc0f0b6d15a191732affd772ec4055bfbdfa96eea84c4274d6700e3d4db2903e10b53d5709ee3bd9961be64d39e0f8d4167905372b510f4f25584014015efd6b3372", 0x6f}], 0x9, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000002880)=0x7, 0x4) shmctl$IPC_RMID(0x0, 0x0) sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r8 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r8, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@mpls_getroute={0x38, 0x1a, 0x800, 0x70bd2c, 0x25dfdbff, {0x1c, 0x14, 0xc0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x2c00}, [@RTA_VIA={0x14, 0x12, {0x11, "fe53ff226b727083ee5ca11d3c23"}}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf2506000000240007000c0003007a000000000000000c000300590e00000000000008000100090000001800020008000100060000000400040008000200070000002400060004000200080001000001000008000100ffffffff040002000800010001000000300006000400020008000100090000000800010002000000040002000400020004000100000000000000000004000200380007200c0004001f00000000000000080001003f00000008000100fdffffff0c00040008000000000000000c0003000000000000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x4) 01:29:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010e000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x40, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7ff}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000280)={0x36a, 0x7f, 0x8, 0x2}) 01:29:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000000000000000000000ff0700", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x800000, 0x45) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x2, 0x0, 0x5, 'queue1\x00', 0x2}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/\x00\b\xa011ux/enMor \x00\x05', 0xa41, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0xadc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={{r4, r5/1000+10000}, {0x0, 0x2710}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sched_setattr(r6, &(0x7f00000002c0)={0x30, 0x2, 0x1, 0x1000, 0x3ff, 0x8, 0x1, 0xa7}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1c358000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100026bd7000fbdbdf250200000008000600000000000c00020008000d0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008880}, 0x4000) 01:29:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) 01:29:52 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 01:29:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010800ca0fa0de549f00"/26, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:29:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200800, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x2, 0x4) 01:29:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0xffffffff, @rand_addr="4cab7d7da1f38468e35ce687ec7911d5", 0x3ff}}, 0x1, 0x9, [{{0xa, 0x4e20, 0x0, @local, 0x5}}, {{0xa, 0x4e24, 0x8, @rand_addr="801c6bbfa544c6a63ff82099745d6da0", 0x1}}, {{0xa, 0x4e24, 0x413, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, {{0xa, 0x4e21, 0x6ea, @mcast2, 0xffffffff}}, {{0xa, 0x4e23, 0xffff, @local, 0x9}}, {{0xa, 0x4e24, 0x3, @ipv4={[], [], @local}, 0x9}}, {{0xa, 0x4e22, 0x101, @local, 0x8}}, {{0xa, 0x4e23, 0x1ff, @ipv4={[], [], @multicast1}, 0x6}}, {{0xa, 0x4e23, 0x6, @empty, 0x9}}]}, 0x510) [ 1456.082885] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:29:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x88160d1afcc8ad72) 01:29:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc822, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x400000, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x1d9d0f791b60a80e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x32, 0x80, 0xa, 0x4, 0x1000, 0x7, 0x8001, 0x7}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pause() r3 = semget$private(0x0, 0x8, 0x0) semop(r3, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) semctl$GETZCNT(r3, 0x1, 0xf, &(0x7f0000000600)=""/4096) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0xffff, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000480)={0xa4}) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000040)={0x5, 0x0, 0x1, 0x2}) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0xffffffffffffff92) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x10c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xe4, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xd8, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_PROTO, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3c}, @tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x8, 0x11, 0x4e22}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x8, 0x5, 0x60}, @IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x10, 0x8}, @IFLA_IPTUN_TTL={0x8, 0x4, 0x81}, @IFLA_IPTUN_TTL={0x8, 0x4, 0x5}], @IFLA_IPTUN_LOCAL={0xfffffffffffffed3, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8, 0x12, 0x4e22}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}, @IFLA_IPTUN_LINK={0x8, 0x2, r5}, @IFLA_IPTUN_TTL={0x8, 0x4, 0xcb}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x26}, @IFLA_IPTUN_LINK={0x8, 0x2, r10}], @IFLA_IPTUN_PROTO={0x8}]}}}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x10c}}, 0x800) [ 1456.649921] bond0: Releasing backup interface bond_slave_1 01:29:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x6e5) dup3(r4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x2000)=nil) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) r7 = socket(0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="020000006e9cd2feea2c62311c0202fc92445a4062a49058da45a59209b4a6018b1e796f45cc76814d6cd33e812e83c586bd8cc3b39c57af0fe57b1d712ca25aa858247e4074a10738be1e2bb94a65d3ee74cd1f4826a2917c896d90b5fe0646c0e81de1ae09dd97d348e9eedf9f54bf2a9d655344ae7d9ff01e81fabb2379d9cb49171ff7198699a061794863ad3ef56850dc2e2f97e3549e20b6a76ff255491b82930b0aa4407e0a22247690d1bdb531", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r11, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={r11, 0x1}, 0x8) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x8) 01:29:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) [ 1456.737810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1456.741482] selinux_nlmsg_perm: 12 callbacks suppressed [ 1456.741491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=556 comm=syz-executor.5 [ 1456.790136] net_ratelimit: 9 callbacks suppressed [ 1456.790141] protocol 88fb is buggy, dev hsr_slave_0 [ 1456.797923] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1456.800299] protocol 88fb is buggy, dev hsr_slave_1 [ 1456.800307] protocol 88fb is buggy, dev hsr_slave_0 [ 1456.800345] protocol 88fb is buggy, dev hsr_slave_1 01:29:53 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000c9cf798d972ac89b44c7bd34f69712b855d2ad348244924759521b8574182e3f72a68d642b8cff73087d4daa109f0833cf2335fb03e1730b5e02abf12c44b80fefa8a1c5fe9ef6ec154aa79c534880021fa2222935da3fea9bf238396cac00aeff5b083373b595115ff354f48bcaae52cc4a307fa5d711a69d64adf155f3378b529c0f37c9ffea0858ff6979da5c39b55cec763a", @ANYRES32=0x0, @ANYBLOB="3b771d0000005fc05b000008001b0000b70a000800100005000000"], 0x30}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000002c0)) 01:29:54 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ipddp0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000142f0040fea2bc28000069dae77384dc0252a8d3744ce6d02be325acd441592525e34f4504120a627a5958e045e70e40a990dc40d751d5a9c51c9cdb53d92f7bdd33a5147351e2f1d469918fb53154813427d016590000000000000000"], 0x30}}, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x200400, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000100)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0xffffffff, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$packet(0x11, 0x3, 0x300) r19 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r18, &(0x7f0000000100)={0x11, 0x0, r20, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r21, 0x12080}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r22, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmsg$can_bcm(r22, &(0x7f00000006c0)={&(0x7f0000000400)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/214, 0xd6}], 0x1, &(0x7f00000005c0)=""/205, 0xcd}, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x314, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0xb0, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r13}, {0x1e8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xeee7}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xd0b}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r24}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xd2}}}]}}, {{0x8, 0x1, r25}, {0x50, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x7f, 0x15, 0xde, 0x6}, {0x0, 0xc0, 0x56, 0x3}, {0x3, 0x1f, 0x0, 0x8}]}}}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000100)={0x4}) [ 1457.294105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=556 comm=syz-executor.5 [ 1457.315527] bond0: Releasing backup interface bond_slave_1 01:29:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc822, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x400000, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x1d9d0f791b60a80e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x32, 0x80, 0xa, 0x4, 0x1000, 0x7, 0x8001, 0x7}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pause() r3 = semget$private(0x0, 0x8, 0x0) semop(r3, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) semctl$GETZCNT(r3, 0x1, 0xf, &(0x7f0000000600)=""/4096) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0xffff, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000480)={0xa4}) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000040)={0x5, 0x0, 0x1, 0x2}) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1457.694055] bond0: Releasing backup interface bond_slave_1 01:29:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r8 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r8, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x9, 0x2, 0x7, 0x3, 0x0, 0x80000000, 0x8404, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x75f, 0x101}, 0x80f8, 0x7, 0x5, 0x5, 0x8, 0x1, 0x831b}, r9, 0x9, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc822, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x400000, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x1d9d0f791b60a80e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x32, 0x80, 0xa, 0x4, 0x1000, 0x7, 0x8001, 0x7}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pause() r3 = semget$private(0x0, 0x8, 0x0) semop(r3, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) semctl$GETZCNT(r3, 0x1, 0xf, &(0x7f0000000600)=""/4096) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0xffff, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000480)={0xa4}) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000040)={0x5, 0x0, 0x1, 0x2}) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x10c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xe4, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xd8, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_PROTO, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3c}, @tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x8, 0x11, 0x4e22}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x8, 0x5, 0x60}, @IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x10, 0x8}, @IFLA_IPTUN_TTL={0x8, 0x4, 0x81}, @IFLA_IPTUN_TTL={0x8, 0x4, 0x5}], @IFLA_IPTUN_LOCAL={0xfffffffffffffed3, 0x2, @remote}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8, 0x12, 0x4e22}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}, @IFLA_IPTUN_LINK={0x8, 0x2, r5}, @IFLA_IPTUN_TTL={0x8, 0x4, 0xcb}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x26}, @IFLA_IPTUN_LINK={0x8, 0x2, r10}], @IFLA_IPTUN_PROTO={0x8}]}}}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x10c}}, 0x800) 01:29:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x0, 0x6f, 0xaf, 0x5}, {0x200, 0xfe, 0x7f, 0xfff}, {0x7, 0x1, 0x4, 0x7}, {0x0, 0x0, 0x1, 0x5}, {0x8, 0xd0, 0x9, 0xc3}, {0x8, 0xd8, 0x20, 0xffffffff}, {0xe879, 0x7, 0x0, 0x80000001}]}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002200000426bd7000fbdbdf2500800800"], 0x14}, 0x1, 0x0, 0x0, 0xaa9c798374e529c2}, 0x0) 01:29:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe89, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x584, 0x20000, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x8b}}, 0x0) [ 1458.236389] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:29:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4020}, [@IFLA_GROUP={0x8}, @IFLA_LINK={0x8, 0x5, 0x86}]}, 0x30}}, 0x0) 01:29:55 executing program 5: r0 = userfaultfd(0x40000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1458.328676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=663 comm=syz-executor.0 [ 1458.411294] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.0'. 01:29:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) write$UHID_INPUT2(r1, &(0x7f0000000080)={0xc, 0xa4, "a3b8ec2dbfe33fcffd74dbcbfed2d5f05afe0fd98ec54db11a3f53ce1f6e8e73b9ef0064ea4b1b358751edf87987375537fe3adf70b94f53f5c3b4a33f8c7febf434625030728ba2c7a175caa64c84be24202ea8356b540687628e6b410d50af5022311ab07baa06d56b5560f0722d01b3fbcc1bb51fd0c124284b4f83dd68740a8499dffbe19b3b53a6414c015e3ef5a00d2382dbff9d7401fdc245aa83a465a0caf678"}, 0xaa) 01:29:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) lstat(&(0x7f0000000180)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) timerfd_gettime(r5, &(0x7f0000000140)) 01:29:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) migrate_pages(r1, 0x8000, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x3) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000180)={0x80000000, 0x4, "cb27bd14d6f748d0b67954b5b17a39126082420de69f8bfa61caf81221e2b20d", 0x1, 0x401, 0x3f, 0x8, 0x8, 0x2, 0x2, 0x101, [0xfffd, 0x1, 0xffffffff, 0x2742]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x1}, 0x14}}, 0x8000) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r3, 0x0, r5, 0x0, 0x80000000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 01:29:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x5, 0x1, 0x0, 0x5, 0x0, 0x3e}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac5d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0xd496f4440ab93f6f, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0xbf7736f141d84f48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000200)={0xff, 0x0, 0x3015, 0x1, 0x3, {0x7, 0x200}}) r6 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-ce\x00'}, 0x52) r8 = accept4(r6, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r8, r9, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r10 = request_key(&(0x7f0000000100)='\x00\x00\xff\x7f\x00\xd5', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffff9) keyctl$update(0x2, r10, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, &(0x7f0000000080)=0x8) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000040)={0x0, 0x1}) 01:29:55 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="000000a2a90000004363afad9363e71cb5efa887196c1059200d7a3139e3a5b93b596c2e69df3d1e90a27c10a1ceb9fc3415ae529e99538e9f024291f8c770913cb79c0cf93b3c041f38f56e49"], 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) accept4$packet(r6, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000013c0)=0x14, 0x800) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0xffffffff, 0x2) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002680)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000002780)={@broadcast, @dev, 0x0}, &(0x7f00000027c0)=0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0xffffffff, 0x2) accept4$packet(r14, &(0x7f0000003900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003940)=0x14, 0x80000) r17 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000003980)='/dev/btrfs-control\x00', 0x800, 0x0) r18 = syz_open_dev$audion(&(0x7f0000003b40)='/dev/audio#\x00', 0x51a, 0x201006) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_dellink={0x314, 0x11, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x40000, 0x3}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5b}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_LINKINFO={0x4c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x3c, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x18, 0xfff}, @IFLA_BOND_NUM_PEER_NOTIF={0x8, 0x10, 0x47}, @IFLA_BOND_MODE={0x8, 0x1, 0x5}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x7}, @IFLA_BOND_PRIMARY={0x8, 0xb, r7}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2400}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_XDP={0x270, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x16, 0x9, &(0x7f0000001400)=@raw=[@call={0x85, 0x0, 0x0, 0x3a}, @generic={0x40, 0x6, 0xa, 0x5acf, 0xffffff81}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x3b}, @generic={0x1f, 0x2, 0xb, 0x1f31, 0xd84f}, @call={0x85, 0x0, 0x0, 0xb}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x10000}, @alu={0x7, 0x1, 0x6, 0x4, 0x4, 0x0, 0xfffffffffffffff0}], &(0x7f0000001480)='GPL\x00', 0x5, 0x1000, &(0x7f00000014c0)=""/4096, 0x100, 0x4, [], 0x0, 0xd, r10, 0x8, &(0x7f00000024c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000002500)={0x4, 0xe, 0x6, 0x81}, 0x10}}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x26dee581ee214e4d}, @IFLA_XDP_FD={0x74, 0x1, {0x8, 0x9, &(0x7f00000026c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @alu={0x7, 0x0, 0x7, 0x5, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}, @generic={0x89, 0x4, 0x7, 0x1, 0x1}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000002740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x7, [], r13, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000002800)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000002840)={0x3, 0x6, 0xfffffff8, 0xc4b}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0xb, 0x6, &(0x7f0000002880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x4b}, @func={0x85, 0x0, 0x1, 0x0, 0xb6}]}, &(0x7f00000028c0)='GPL\x00', 0x2, 0xfffffffffffffe32, &(0x7f0000002900)=""/4096, 0x40f00, 0x1, [], r16, 0x9, r17, 0x8, &(0x7f00000039c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000003a00)={0x1, 0xf, 0xffc00000, 0x200}, 0x10}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FD={0x74, 0x1, {0x9, 0x6, &(0x7f0000003a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x2d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000003a80)='GPL\x00', 0x3, 0x59, &(0x7f0000003ac0)=""/89, 0x40f00, 0x2, [], 0x0, 0xe, r18, 0x8, &(0x7f0000003b80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000003bc0)={0x5, 0xb, 0x55, 0xb9}, 0x10}}]}, @IFLA_PORT_SELF={0x18, 0x19, [@IFLA_PORT_PROFILE={0x8, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "61374e0f1da8f5b9173f2c4588626ee6"}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x20}]}, 0x314}}, 0x0) [ 1458.870110] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.870113] protocol 88fb is buggy, dev hsr_slave_0 [ 1458.870152] protocol 88fb is buggy, dev hsr_slave_1 [ 1458.875272] protocol 88fb is buggy, dev hsr_slave_1 01:29:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(0x0, &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="66baf80cb8eaf65b81ef66bafc0c66b8005866efb8001000000f23d00f21f835000000090f23f8366464660f38809d7b0000000f3acc4000ef0f01c4b9800000c00f3235000800000f30f0816715520000000f011d090000008fc97880f09a40cda22f0500", 0x60}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000000c0)={0x980000, 0x3ff, 0x2b4, [], &(0x7f0000000080)={0x0, 0x6, [], @p_u8=&(0x7f0000000040)=0x9}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffbb, 0x50, 0x0, 0xffe3) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000300)=ANY=[@ANYBLOB="70bf"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x20125, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) write$P9_RLERROR(r5, &(0x7f00000000c0)={0xf, 0x7, 0x2, {0x6, '.dead\x00'}}, 0xf) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept4(r4, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r7, r8, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r9 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r9, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 01:29:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1400000019000512ed0080647e6394f20100d200", 0x14}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="023308000000429818a15946abc6fe290b199a3167855d000000000000000000080017dee41bb439fbbd1189efca6667890f19d69525129c625940f1b16c2473722c0f449ead26b1a106efee7a13e3b8b5dd27a378d74971045be7c9832e36cb4b2ef5f5666c31", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r6, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e24, 0x1ff, @rand_addr="bc31a7e0670c1e56bb50ecc5502e5ca7"}}, 0xd844, 0x0, 0x800, 0xfb6, 0x20}, 0x98) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SIOCAX25CTLCON(r7, 0x89e8, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, 0x0, 0x80000001, 0x2, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @default]}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x2c2d0000, @empty, 0x9}}, 0xab02, 0x401, 0x0, 0x4, 0x11}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x42}, 0x8) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240)='xfs\x00', 0x0, 0x0) fchmod(r0, 0x2) 01:29:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) fsetxattr$security_smack_transmute(r5, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x100100000000) 01:29:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x9b}}, 0x0) 01:29:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x100000001, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) pread64(r1, &(0x7f0000000080)=""/211, 0xd3, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20440, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x7, {{0xa, 0x4e20, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x8a}}, 0x8000}}}, 0x88) 01:29:57 executing program 1: clone(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140), 0x80000) recvmmsg(r1, &(0x7f0000004700)=[{{&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/117, 0x75}], 0x1, &(0x7f0000000780)=""/80, 0x50}, 0x7}, {{&(0x7f0000003080)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=""/237, 0xed}, 0x55}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001d80)=""/15, 0xf}, {&(0x7f0000001dc0)=""/62, 0x3e}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/115, 0x73}, {&(0x7f0000004880)=""/35, 0x23}, {&(0x7f0000002ec0)=""/236, 0xec}], 0x6}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003040)=""/7, 0x7}, {&(0x7f0000003140)=""/73, 0x49}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f0000003300), 0x0, &(0x7f0000003340)=""/77, 0x4d}, 0x4}, {{&(0x7f00000033c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004640)=[{&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/7, 0x7}, {&(0x7f00000048c0)=""/148, 0x94}, {&(0x7f0000004540)=""/196, 0xc4}], 0x4, &(0x7f0000004680)=""/81, 0x51}, 0xbd}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="719c3087b4ab1824a1fb8ed82f3a213b6a885cb4b6241bf2b735b08502c09c588d6b852a3e8e555f6bcd427b0000000000009d94d5f68b9b1d4eaa02eba8c1a48848c974b30bcec1f072157e938d8fb283cad2e1922a26cbb0212363fd32ac73b159d87fdd078f", 0x41395788) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x40000, 0x0) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000640)={0xfff, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x2b7690619edfd135, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x1800) perf_event_open(&(0x7f0000000540)={0x22b7d6ec3bad3369, 0x70, 0x3, 0x0, 0x6, 0x9, 0x0, 0x439f, 0x1000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x8}, 0x12000, 0x3, 0x36, 0x0, 0x1c, 0xffff}, r0, 0x0, r6, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0x2, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r5, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000480)=0x10) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x80012, r8, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x40}, 0x8) socket$inet6(0xa, 0x80002, 0x0) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4f36213db16b5b49}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x33}, 0x0, @in6=@mcast2, 0x3505, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r10, &(0x7f0000007e00), 0x400000000000058, 0x0) 01:29:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(0x0, &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x40, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8b388bbb99a96b30, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000f8000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0], @ANYBLOB="000000000000000008001b0000000000080010000500000073ae1a9da9adc5d7dad4622274063ab85184df91871eb85d0e7b10ada502d070dd7341afb930c664dbdd4f695af33f5951df73c0e07e89e76875363dc12a2987647c5c0f7272455db5c2e6e61abe5aa03a2c2b3bcb3ecfd3a0705bd783e88542c06c479e7445f873b91f7164bafc3c1be1b724ee944555c7989393e03f5364d94fae1f6ef74b0b548b8e455c02dc70ecd346a9f28c6f0bdc2db955b110ac6fd68d41980b1e81538d85ea97d6c9be313e134df7021d3c3457ac15e1"], 0x30}}, 0x0) [ 1460.107292] block nbd0: Attempted send on invalid socket [ 1460.113520] print_req_error: I/O error, dev nbd0, sector 0 [ 1460.121224] XFS (nbd0): SB validate failed with error -5. [ 1460.200678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=788 comm=syz-executor.4 [ 1460.287837] Unknown ioctl 1074795139 01:29:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x1, 0x0, &(0x7f0000000100), 0x0) connect(0xffffffffffffffff, &(0x7f0000985ff8)=@un=@abs, 0x8) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@v2={0x0, 0x3, 0x4, 0x80}, 0xa, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 01:29:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000380)="dc08727f1b40bd48f86d90844d95810e791a838cd319a3be25f0ca0046e267fc1ca0beab92eab3147218ce661e8fc94275557b12856f9f17262b10e673f7352624474a67294123cb0ffac2360fdd", 0x4e) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r6, r7, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r8 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r8, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:29:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:29:57 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x439) 01:29:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x4c, 0x21, 0x114, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x80, 0x9, 0x56, 0x0, 0x0, 0x5, 0x10005}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ipddp0\x00'}, @FRA_DST={0xffffff7b, 0x1, @broadcast}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_FLOW={0x8, 0xb, 0x7f}]}, 0x4c}}, 0x0) 01:29:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001480)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, 0x0, "51bd6247e9de77312051174ae4736b288d7bcbf8b2198440e2944850054c6fc7c4fc94bb8eaf1068d65036397d0bf1cd00c1ad175e3210004d06d5539901d84c29136aed0e238ca0757aa414ef989c43"}, 0xd8) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x28, 0x6, 0x0, @empty, @mcast2, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f3e60e8530d5e8a4538f13f2309d46bc"}]}}}}}}}}, 0x0) [ 1460.933420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=819 comm=syz-executor.5 [ 1460.950108] protocol 88fb is buggy, dev hsr_slave_0 [ 1460.950118] protocol 88fb is buggy, dev hsr_slave_0 01:29:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(0x0, &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:58 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) connect$x25(r0, &(0x7f00000002c0)={0x9, @remote={[], 0x0}}, 0x12) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) bind$x25(r2, &(0x7f0000000000)={0x9, @remote={[], 0x0}}, 0x12) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0dd35f074a587877e887573cdd0080000000000007", @ANYRES32=0x0, @ANYBLOB="0000eb197194bc00dd214a4f5d035808f39aac92000008001b000000007f0000000000000000"], 0x30}}, 0x0) 01:29:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="befe81204ab0729f07000effff1000018ab900"/28, @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:29:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb04cf000000004000588171001000720155c4af96311d39962100001600381001000900ff030100029ebd6ce1f8ff0e4ec61030cf4b0794004087"], 0x45) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 1461.134892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22602 sclass=netlink_route_socket pig=833 comm=syz-executor.5 [ 1461.144209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45130 sclass=netlink_route_socket pig=838 comm=syz-executor.4 [ 1461.177276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22602 sclass=netlink_route_socket pig=842 comm=syz-executor.5 01:29:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:29:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x101000, 0x0) r2 = socket(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r6, 0x4) fchdir(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r6, &(0x7f0000000200)=0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) timer_create(0x64cb900de352b56f, &(0x7f0000000040)={0x0, 0xf, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) r10 = accept4(r8, 0x0, &(0x7f0000000240), 0x80000) ioctl$sock_ifreq(r10, 0x891d, &(0x7f0000000280)={'sit0\x00', @ifru_addrs=@l2={0x1f, 0x0, {0xf7, 0x3, 0x94, 0x2d, 0x8, 0x3f}, 0xff, 0x1}}) timer_gettime(r7, &(0x7f00000000c0)) 01:29:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) r3 = socket(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="f2000000ab24e3df4c4088a1475b688b08da00"/32, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r7, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r7, 0x9}, 0x8) [ 1461.433486] input: syz1 as /devices/virtual/input/input12 01:29:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r4, r5, 0x0, 0x50000000000440) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r6 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x2, @rand_addr="9715673da0ad706bc1f900cf5f13d2aa", 0xd4}}}, 0x84) keyctl$update(0x2, r6, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 01:29:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffffce, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYRES64=0x0], 0x3}}, 0x0) 01:29:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000002400270500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000e00686673630000000008000200000000005a7173a9dfe90f4520e45270920686da853f36b333a16d2d6596232b1188f7091fcd71d536b1618163adaac1aed71eacff999ae13ce0980b49263f9a6fcc27ca1eb725b0568697facc37952ca064a3fbd9531102032f5f3857476012ca6cfbcbe948d540d5cc59587c572a6df6b219ecc652743b18507e184a00a4b27fbe50f16fd7b04bc61d1e"], 0x38}}, 0x0) [ 1461.544726] input: syz1 as /devices/virtual/input/input13 01:29:58 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x2) accept4$packet(r0, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001340)=0x14, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x30}}, 0x0) 01:29:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:29:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x1, 0x4, 0x1, 0x1}, 0x6) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:29:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x291000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) getpeername(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x80) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) open(&(0x7f0000000100)='./file0\x00', 0x100, 0x340) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 01:29:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', 0x0, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:58 executing program 1: syz_open_dev$sndseq(0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) 01:29:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:29:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1461.933570] input: syz1 as /devices/virtual/input/input14 01:29:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) 01:29:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:29:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:29:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r9}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r12, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r13}) mount$9p_tcp(&(0x7f0000000380)='127.0.0.1\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x6042, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e20,dfltuid=', @ANYRESHEX=r9, @ANYBLOB=',dfltgid=', @ANYRESHEX=r10, @ANYBLOB=',posixacl,fowner>', @ANYRESDEC=r13, @ANYBLOB='-\x00']) r14 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r14, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:29:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000016a32f86c1fe24ca00fbdbdf25025410048c000000000000000400000008000b00530800000800020000003698"], 0x30}}, 0x0) [ 1462.434490] input: syz1 as /devices/virtual/input/input15 [ 1462.496977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12195 sclass=netlink_route_socket pig=931 comm=syz-executor.5 01:29:59 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x400002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getnetconf={0x14, 0x52, 0x400, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x20044081) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x1}}, 0x0) 01:29:59 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:29:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:29:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', 0x0, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:29:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)={0x548, 0x2, 0x3, 0x42c, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x6}, [@nested={0xfffffffffffffd81, 0xb1, [@generic="c258955cb7ac047674e742360126b609230a99b9799df9f7db714033454c0197025c3600322d10c075b46edc84107d9db34321b5b4a54939a6fda96f07e52283b53f28ac039c5d1252ad0eb4f48140c354841b56b238d177bb6904446a3e3f9b4e57af726d4546388f3aa350c55cad6483bc3d79311b6643b2d4b41dc8e7f5507ed697c669a0a97b3155f257b517cd915b825c6958e770e0a74a7e47d860daf44f3f8f186ba2189aeeab8cb532a8f05fb8377d39081a42cc835fc59d213294820b6b27fc5eac1aa4cdfe8408b3eff5c2573e00ac531236e954b0107185", @typed={0xc, 0x78, @u64=0xfffffffffffffffa}, @generic="4f919495ccc157b41d622845c40d542dbd725ea66a1062ad52ab3fe6b5865e0125549b0dc310e44c8a07745a081700a5cb466b076fda1aee46fba1743237eb10f978ee54acd7c28aa2bc231c4dc7f51bc7592c7fe3db0961cc4789de0a1300f04d43714106404a5002e5c6faf5af52276ea07d252c0fe54467cfaee4360b1fcab54247326268eddd7c2bc72109c4069e6f3d0f658aeffa78d4519a2b797c368a97d63d2b76f9a5315ad455661bd6c4b080be7483ba949de724421c944d7da1e50e0c2edb05", @generic="4a67ff201bf81e620d18344fb129b97f6d14616dc036a126d0a9cc2bdea020ccdbc6ed365448a1093cad47aa2e6f8522035370fef726e6153bf43fdf95bc524687d7396315726816b2cc0691999952479aa4b797deb7c92c79a79b5d7a818ef87989fe98f40bf9bf8d9a84f08f85ae213ab2be8a83edb9de567d9e459c769db2fc4e41eb7b9a97074a7211c7591b85ddaea6d35a0cb39cced43284dfa125104b3c2650bd07787124c367341adf1a1f3828385e4460efcd0c3eabaa9a17b3480db09c04001095866c3d5970276dc73718228d14", @typed={0x8, 0x16, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @typed={0x0, 0x38, @str='^\x00'}, @typed={0x14, 0x7d, @ipv6=@empty}, @typed={0x38, 0x78, @binary="8c5a02dc9053707efb4cedf41402113c250831fd4e047cd8e5a15dfe2816541540ea16f1ee509111e39edd4a3d8cd1cf04"}, @generic="f20738830d0080a7a0b615693ee839244d3d5ae130d6349b54289aff7147d70ad3edbd6261e4d276e44fd706d3358db0fc4728eb92e143a0427eb26783bc3ff9bd51c5112631397775ddb8f2e43485288567c9c6335683c6d206d0db510886abc79c5cf21d96650cbfeadc44399549bab0e79a69d5b1fe856877365f1c373587d88243bfb1ce7c6c3851803efca68e4f33539a31af4608788791d37c2ced40fa896c49512eaf9f6fc52a4fba7800912f984e77e6171984f3451159b215bf54f69291737fc35340cc950f1accfbafe2cc3c09ac857de206231ac0092d06e856e0785a532536da2fe9a93750a2cbe1404321848512440880", @generic="88e60b4126a2c41012aff6f106204a9fbc31b69dcffad67bb708264dd86d3f0816f5c37f1c11133e412d44265241a1988e1496e9a64b02fdb1240ca18164dd40b16c9f26de41ca7179ca7a9c3354d67a7a57e668e7ed16bb8117ebfa77e3d9424dccf984a2215e564c63d47eeea3e86054554a27c1944e", @generic="8c363654f5f8b1d3253ef87a2f536dcb1071f36ba1498db5"]}, 0x548}, 0x1, 0x0, 0x0, 0x81000}, 0x4) 01:29:59 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:29:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r3 = getuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, [], 0x14}, 0x4e24, 0x81, 0x4e20, 0x5, 0x2, 0x60, 0x20, 0x88, r2, r3}, {0xbb5, 0x7f, 0x1, 0x3f, 0x5, 0x81, 0x50011f16, 0x6685}, {0x400, 0x7fff, 0x8, 0x6}, 0x80, 0x6e6bbd, 0x1, 0x1, 0x7, 0x1}, {{@in6=@rand_addr="15e7a3a73fbf4a887d6f88a7a6a4d399", 0x4d2, 0xa3d9caa6bbd43ff5}, 0xa, @in6=@remote, 0x3506, 0x2, 0x0, 0x1, 0x2, 0x0, 0x7ff}}, 0xe8) bind$netrom(r1, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) socketpair(0x5, 0x800, 0x19, &(0x7f0000000800)={0xffffffffffffffff}) connect$pppoe(r4, &(0x7f0000000840)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1462.804190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pig=950 comm=syz-executor.4 [ 1462.827769] input: syz1 as /devices/virtual/input/input16 [ 1462.877517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pig=958 comm=syz-executor.4 01:30:00 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x80) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000be5cdec80800fe00"/20, @ANYRESHEX, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x3}}, 0x0) [ 1463.030129] net_ratelimit: 2 callbacks suppressed [ 1463.030134] protocol 88fb is buggy, dev hsr_slave_0 [ 1463.030138] protocol 88fb is buggy, dev hsr_slave_0 [ 1463.030178] protocol 88fb is buggy, dev hsr_slave_1 [ 1463.035191] protocol 88fb is buggy, dev hsr_slave_1 01:30:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r2, r1) 01:30:00 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x6, 0xd4, 0x3, @broadcast, 'netpci0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0xfe53) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x5) 01:30:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:00 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1463.358226] input: syz1 as /devices/virtual/input/input17 01:30:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', 0x0, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:00 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010fa0108defffff8bffff06ee2b7ef5199d91ac99e", @ANYBLOB="0a4d19cc6e11f91bf23e87e6e728985280c668045cd8d6f139259761674c2ecc5294d3ab5b93ba635f197a08f495e14f36f269e6d0f9b2b11d68af6429ea0caba980a2f76659b2fee73844d840ff4e65add5a3e23841da8755084bfbfad67ffd178134e20849b72b35ee5ed75e68ef12e87d695e03c838a423d3947e01a6b31f31a776562a19a37ba3d0436ab71ce4ea7dca815aecb752634f62", @ANYBLOB="e20a000000000000"], 0x3}}, 0x0) 01:30:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r2, r1) 01:30:00 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0xffffffffffffffc4}}, 0x20) [ 1463.622758] input: syz1 as /devices/virtual/input/input18 01:30:00 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x20}}, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10, 0x100000) 01:30:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r2, r1) 01:30:01 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x3, 0x0, [{0x1, 0x31, &(0x7f0000000040)=""/49}, {0xf000, 0x90, &(0x7f0000000200)=""/144}, {0x4, 0x1d, &(0x7f0000000080)=""/29}]}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) flock(r0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000002c0)={0x100, 0x6, 0x0, 0xe31}, 0x10) ioctl$TCXONC(r3, 0x540a, 0x7) 01:30:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) sync_file_range(r4, 0x4, 0x0, 0x4) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000080cc17a00050009"], 0x30}}, 0x0) [ 1464.179479] input: syz1 as /devices/virtual/input/input19 [ 1464.208642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:30:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) r7 = socket(0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="150000007a68940de86a90b6cd2574262c5944d2f37f5a52e0f58142652412c683df9c75b66062fc8148f71c3f42759941eb3793ee92567514ee9079d0cd24f55461e19fab3739b1d6927ea560a054560b07bfdc573b9a6f97fc42653034db37d1131893e7ad2c2bb36101b9ab5d6a9ef75203b62b53d203dc3cafa0ab5d26", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r11, 0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r11, @ANYBLOB="33649f00e760c55943a6d41957a5e9281feb16b0b7dc70b8819ed6bb3df0b997b803051704a49ed1245331b73ba67811e751884704dd338dc42bbec13bae5d00ccd4f5b5f3924d134d191c37960b74667489e899ce545943ecdd056ff6e9217fe1408d783a4136d6b3580e9c125ac795d76c28581f29ced9e89d0df178ddc30c0600966084b9c5d4fe1a963b5c531d4fa245c5e3"], 0xa7) r12 = accept4(r4, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r12, r13, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r14 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r14, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:01 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r1, &(0x7f0000000080)="06470032281b8a682d5e6a9fd7dbec1a0fe1d9fbce8f182aa2ed5d88485c560e7c6814081abe807e099610224555f25ae41634e15221be6a1637f4ef54fea0fe5022dad24463ae89db2bf6f5b87abac707166cf74d25c1c43dfa9419254dc7116ac6a1a3b37081b81ff42491bbaba40e2b1809666030d40d695c5f8f7de35725bbb76c049df90226cd7ea1dc2a8f11f3943d4a4965d9b5c1dc9fd2bdc44a8894ad08a290a2d8a6cfea7cd69f68020e51e88dcb9c715482e0881e166676c4af87ae1f91f7b40b8f961be9032d38d67224a0e29fa6c76732f8ca66e8cd4cdcaa18ba974a926e2eabfcd7a0b2f556", &(0x7f0000000200)=""/188, 0x4}, 0x20) 01:30:01 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x9) socket$netlink(0x10, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x1040, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000100001080400"/20, @ANYRES32=0x0, @ANYBLOB="000000001000000074001200100001006970366772657461700000006000020008000e000200000008000f0000040000080003000100000008000200010000000800040001000008000000000000008c23575147c5cbef8efbe0c7e66e8dab382c98616ab93ba03da9839988a7db3e23f31b19ee7532e33003696ce6379ac0895519dd4a17812eef51192f8a4f804c09b84ae2890acce415103c188058c156abcdef9b0b5802a841faacd6d0f53e814dc851b9731a1868fd5d045cce2c48db64991ed431114f5e62", @ANYRES32=0x0, @ANYBLOB="1400070000000000000000000000000000000000ddfd080044000000e2ff09000000000008001700000000000800100005000000"], 0x9c}}, 0x0) 01:30:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x42, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x10000, @loopback, 0xfffffc01}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x1}, @in6={0xa, 0x4e22, 0x0, @empty, 0x6}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x84) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8f6, 0x2) recvmsg(r2, &(0x7f0000001740)={&(0x7f0000000200)=@caif=@dgm, 0x80, &(0x7f0000001600)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/190, 0xbe}, {&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001440)=""/160, 0xa0}, {&(0x7f0000001500)=""/59, 0x3b}, {&(0x7f0000001540)=""/189, 0xbd}], 0x6, &(0x7f0000001680)=""/141, 0x8d}, 0x0) 01:30:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30371e0000df4d62b2098da2899fa16b752a5000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) [ 1464.473114] input: syz1 as /devices/virtual/input/input20 01:30:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 01:30:01 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x2) ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f0000000080)) [ 1464.566795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57088 sclass=netlink_route_socket pig=1084 comm=syz-executor.5 01:30:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) [ 1464.803720] input: syz1 as /devices/virtual/input/input21 [ 1465.110179] protocol 88fb is buggy, dev hsr_slave_0 [ 1465.115381] protocol 88fb is buggy, dev hsr_slave_1 [ 1465.120140] protocol 88fb is buggy, dev hsr_slave_0 [ 1465.125506] protocol 88fb is buggy, dev hsr_slave_1 01:30:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) fcntl$notify(r0, 0x402, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0xae, "0c5894cd8397e97ef5e2319bb87bd12d6615e76ae0993fcc6793c8b6606d0fc954c0ffe871d0165eb0f12b953e76a55966dbe19015621fe057b78ba36f2bda47015a9335044741445f0405f41edadb23d850c2a58fc2679de5cfac035ceb5b6a39c6a4d25b7381cd4abc19e516ad82db30fd84bf414f99e5e3215aef21856e3b36a3badd3c6d4743dce08fe4eeeadec4f7b8e9440122823a8dc175e93dea1e743e516dda406ed8d29a0ee881c93f"}, &(0x7f0000000200)=0xd2) 01:30:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 01:30:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:02 executing program 4: r0 = request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='keyring\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x0, 0x4, 0x0, 0x1ff}, 0x1000, 0x31, 'id1\x00', 'timer0\x00', 0x0, 0x100000000000000, 0x0, 0x2, 0x7fffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xc71fa125624f2531) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4403, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x200, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x6, 0x1000}, 0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="202aae63c7d1ee67d105b10000001e00200028bdaf7e458aa4bd248c7b50b8bd935b4401819b28489df377772358aebba525aaf6021ecadca44781f258c3e3563367f1a65effc92bda8e74b8b67ad882101302006418aaa43713cba0c6d37d7d157c585c4d5b8af503", @ANYRES32=r3, @ANYBLOB="0800000000100000"], 0x20}}, 0x0) 01:30:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000000c0)={0x80000001, 0x10001, 0x6, 0x6, 0x6}) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r8 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r8, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 01:30:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={0x0, 0x3, 0xffff, 0x7fff, 'syz0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCRSACCEPT(r1, 0x89e3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r4}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x100, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r8, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x6, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0xffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, r9, 0x0, 0x5, &(0x7f0000000200)='syz0\x00', 0xffffffffffffffff}, 0x30) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x800, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='cdg\x00', 0x4) 01:30:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 1465.387225] input: syz1 as /devices/virtual/input/input22 [ 1465.415922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53703 sclass=netlink_route_socket pig=1134 comm=syz-executor.4 01:30:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r2, r1) 01:30:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 01:30:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 1465.655691] input: syz1 as /devices/virtual/input/input23 01:30:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 01:30:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r2, r1) 01:30:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="410000ae00000000610f000004bbde2a3d9f656103cf3f828467df"], 0x3}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000) 01:30:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_delroute={0x2c, 0x19, 0xd00, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x640b11eeac3d9919, 0x7, 0xfe, 0x3, 0xc8, 0x1, 0x200}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 01:30:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcc}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1d8, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20000, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) r11 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x6, 0x200000) splice(r9, 0x0, r11, 0x0, 0x8, 0x1) ioctl$DRM_IOCTL_IRQ_BUSID(r9, 0xc0106403, &(0x7f0000000340)={0x10001, 0x3, 0x1, 0xffffffff}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) r12 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, 0x0, 0x0) keyctl$update(0x2, r12, &(0x7f0000000440)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0x2933d210a86d83c5) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 1466.243358] input: syz1 as /devices/virtual/input/input24 01:30:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 01:30:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r2, r1) 01:30:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000007000000004000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:30:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000100001080400000000000000000000003e357ddb087fd074de6ed3882dd034f0a4af868e9ca0f07f6fc46eaa431c82de40cc511ac140f988d870ee3a89fca73576a1f1370148a6a63e976cbc3769e5f9aee22a", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local, 'eql\x00'}}, 0x1e) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendmsg$nfc_llcp(r8, &(0x7f00000007c0)={&(0x7f0000000480)={0x27, 0x0, 0x2, 0x6, 0xfe, 0x50, "f8d44bab22fea7b1cadb4dcd21cad48334bc561ef73b135ce9467e3e6d0fb2a0534cf937fd940ada49bbc3c04401ee721418f54ff2c1008755e42c13380234", 0x8}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000500)="767ccbd7ecaac58d7c255ecdef12957e9234d51aa5e2249cab9e253436d57be739df71c6615eeb303dc55ab123626793d17dec8aee5fc093089178b6679295fe558c0c2a6999c646cf7f8be790ea3212baeb5e86f846fca08ca9b9dfdbd50d4804202ea329684f2b60999841c3a1738ba15178492904cfbc4b466a8a6c133beb5f95b993531aaa2bd051609737c00405c45dfc7ed67d577c49fbefebd09d07135f71fde43c15f2b9d4f7d3b42603c4369c9349ccacd64bee531cdf3368e008c127e71319febf6f099e94d200e9ba6761807bfec3adf2172412823021b411bc55392dec8a63058eebd5ccace7432a3d96c4389e", 0xf3}, {&(0x7f0000000600)="d1f482a680dd87103d7d1ec5c2dd2eae8e0f47dc866f1adeaab69ccd8607f209510042d9a6e6fc97920b24c385002dab908eeab0544ef767e90eb5c775b44a459a4d0c07a84b65f0", 0x48}, {&(0x7f0000000680)="a1d37c3d026fba1b", 0x8}, {&(0x7f00000006c0)="758c0490932cc4844615eb88cd56c1451109b074b9f0754fc21085670cdb2b3245afac328e148bc1e6e4b0342234c0e879a8bfc552397fb870f5155db5", 0x3d}], 0x4, &(0x7f0000000740)={0x80, 0x88, 0x7, "d4cc6dda103735dc67f3a8e4331f554d8c6c07e5a24fc583c1ff48d204f8d4e0e1dd8dbedbba583660b89c357dc0b2fa12d0cfc3854c7c873a87466b68eb4043040fc13aa52b55678c2274f5ae08933970195071797f84897e7baad81c37afd0180591be15d78ae9497a663ec7541d"}, 0x80, 0x20040064}, 0x20044055) r9 = dup3(r6, r7, 0x0) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r10, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000380)={r10, 0x9}, &(0x7f00000003c0)=0x8) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00E\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fddbdf25050000001c000900080001000800000008000100090000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x24004000) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x2) statx(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x1, &(0x7f0000000200)) 01:30:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) [ 1466.603388] input: syz1 as /devices/virtual/input/input25 [ 1466.613403] audit: type=1400 audit(1574645403.642:241): avc: denied { create } for pid=1210 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 [ 1466.689309] audit: type=1400 audit(1574645403.682:242): avc: denied { write } for pid=1210 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 01:30:04 executing program 5: socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f0000000080)=0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) r6 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x100, 0x4) write$P9_RXATTRCREATE(r6, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@delneigh={0x1c, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, r7, 0xb8, 0x85, 0x1}}, 0x1c}}, 0x0) 01:30:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, 0x0, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 01:30:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r1) 01:30:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000040)="b7002cdb9fcf5ecbaf63cd0d548f3cbd060f28a5a17c396f19c0064168666989ef0d1bb992f0f08c1d5333bbfffa3e1777151d83883710c566fcaf77e6ed12d7090ec6be2f1d795c00612c8d2d816b5bbdac0c2cc2fe4cfd5da030") [ 1467.081805] input: syz1 as /devices/virtual/input/input26 01:30:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) 01:30:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x800}, 0xb) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) connect(r8, &(0x7f0000000380)=@x25={0x9, @remote={[], 0x3}}, 0x80) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1467.190137] protocol 88fb is buggy, dev hsr_slave_0 [ 1467.190167] protocol 88fb is buggy, dev hsr_slave_1 01:30:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r1) 01:30:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) 01:30:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001080800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) fcntl$addseals(r0, 0x409, 0x8) 01:30:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x20000000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/25, &(0x7f0000000080)=0x19) 01:30:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) [ 1467.486737] input: syz1 as /devices/virtual/input/input27 01:30:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x89, 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000cdbd4a925ad230d111f20f69ffb6ee29ca96f8bf043563e0b0f12babd18aae77ba9e521e09b65b5e384f8b33c9f01d02a07607217e4ba183e4023cb458ec86e2a73e430925b1073bd96a10313a96cca6b4c15e583f3e6cf7a491fc535a5bc475bba5d11a", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) signalfd(r2, &(0x7f0000000000), 0x8) 01:30:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001", 0x17}], 0x1}, 0x0) 01:30:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r1) 01:30:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, 0x0, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001", 0x17}], 0x1}, 0x0) [ 1468.005311] input: syz1 as /devices/virtual/input/input28 01:30:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x0, 0x200) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1468.058492] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:30:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0, &(0x7f0000000400), 0xc17, &(0x7f0000000440)=""/219}, 0x9}], 0x400000000000081, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001", 0x17}], 0x1}, 0x0) 01:30:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006", 0x23}], 0x1}, 0x0) [ 1468.314534] input: syz1 as /devices/virtual/input/input29 01:30:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006", 0x23}], 0x1}, 0x0) 01:30:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1468.526736] input: syz1 as /devices/virtual/input/input30 01:30:05 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006", 0x23}], 0x1}, 0x0) 01:30:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, 0x0, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006000000000100", 0x29}], 0x1}, 0x0) [ 1468.887842] input: syz1 as /devices/virtual/input/input31 01:30:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006000000000100", 0x29}], 0x1}, 0x0) 01:30:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffffb9, &(0x7f0000000180)={&(0x7f0000000080)=@can_newroute={0x0, 0x18, 0x405, 0xa3f, 0x25dfdbfb, {0x1d, 0x1, 0xc}, [@CGW_MOD_SET={0x0, 0x4, {{{0x2, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "534acc3e0d337294"}}}, @CGW_MOD_AND={0x0, 0x1, {{{0x4, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "30c236f4458c6f47"}}}]}, 0x30}}, 0x8000400) 01:30:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) 01:30:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x880) 01:30:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='pagdmap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f00000000c0)={0x813b000000000, 0x3, 0x3}) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006000000000100", 0x29}], 0x1}, 0x0) 01:30:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000000f00284fc0757a", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) [ 1469.204423] input: syz1 as /devices/virtual/input/input32 01:30:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) 01:30:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) [ 1469.270124] net_ratelimit: 1 callbacks suppressed [ 1469.270128] protocol 88fb is buggy, dev hsr_slave_0 [ 1469.270161] protocol 88fb is buggy, dev hsr_slave_1 [ 1469.275064] protocol 88fb is buggy, dev hsr_slave_1 01:30:06 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x8000}}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006000000000100000000", 0x2c}], 0x1}, 0x0) 01:30:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) 01:30:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006000000000100000000", 0x2c}], 0x1}, 0x0) [ 1469.691032] input: syz1 as /devices/virtual/input/input34 01:30:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e0006000000000100000000", 0x2c}], 0x1}, 0x0) 01:30:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e000600000000010000000003", 0x2d}], 0x1}, 0x0) 01:30:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r0}) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e000600000000010000000003", 0x2d}], 0x1}, 0x0) 01:30:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30965ca9f86c0cecdc25073152000059f5280010000108000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:30:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0x7, 0xdf, 0x3, 0x49, 0xf7, 0x2, 0xfd, 0x4, 0x28, 0x7f, 0x7, 0x3, 0x72}, {0xed8a, 0x1, 0x2, 0x6d, 0x3, 0x1f, 0x87, 0x9, 0x5c, 0xdf, 0xb0, 0xb3, 0x9}, {0x1ff, 0x3ff, 0x9, 0x8, 0x10, 0x75, 0xf, 0x1, 0x3f, 0x0, 0x40, 0x7f, 0x6}], 0x6}) 01:30:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904034865160b0001000c410000000800140e000600000000010000000003", 0x2d}], 0x1}, 0x0) 01:30:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7f574c46000900000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045bbdc69bbff39ac5dc60b4b68e9d85a2ee082b856566b7760bc4bbe60c896559926ba235d4615161c6e24ff92e2de79f8a652876b9e5c220210b102e8fed56cfa50165024f29d4fece46ae4c6fcae5cfd960c0f041200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00"/629], 0x275) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40888}, 0x4000000) r4 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0xffffff50, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1470.509893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27896 sclass=netlink_route_socket pig=1468 comm=syz-executor.5 01:30:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1470.616641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=1482 comm=syz-executor.5 01:30:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1470.666759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=1489 comm=syz-executor.5 01:30:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) 01:30:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:07 executing program 5: socket$netlink(0x10, 0x3, 0x0) 01:30:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:30:08 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1471.044218] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1471.093912] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:30:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:08 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setrlimit(0x4, &(0x7f0000000080)={0x0, 0x3807}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000100)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080002}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@mpls_getnetconf={0x34, 0x52, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_IFINDEX={0x8, 0x1, r11}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1471.350141] protocol 88fb is buggy, dev hsr_slave_0 [ 1471.355313] protocol 88fb is buggy, dev hsr_slave_1 [ 1471.360110] protocol 88fb is buggy, dev hsr_slave_0 [ 1471.365406] protocol 88fb is buggy, dev hsr_slave_1 01:30:08 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:08 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f00000000c0)={0x2, 0x5, 0x4, 0x5}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) ioctl$TIOCCONS(r3, 0x541d) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:08 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, r0) 01:30:08 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:08 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) connect$netlink(r1, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4008040}, 0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:08 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:09 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, r0) 01:30:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000359b235b9ef30010000108000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x3}, 0x1, 0x0, 0x0, 0x84}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x101, 0x5, 0x20, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffe}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400080, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={r4, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x4}, 0xc) 01:30:09 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:09 executing program 1: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x12) 01:30:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:09 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, r0) 01:30:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x1a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000200)=""/247, &(0x7f0000000300)=0xf7) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmmsg$alg(r2, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="76d478a0f7d4f8bf736a8256072fd3d6", 0x10}], 0x1}], 0x49249249249263a, 0x0) eventfd(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:30:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 01:30:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 01:30:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 01:30:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) vmsplice(r2, &(0x7f0000001900)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="5e0540252fcea2d10807e25c2946da28fcd9d479ff281c2ae04fb13c650876a75b2569bbb1a7701aa041199073b2e83886cf3b3eafcbbaf11feb253f903e12d3097fdfe335aa64d0ea51f1d925b7946b9eda", 0x52}, {&(0x7f0000001380)="ac735e6eb1a2eba5551129e4683c8898866f0c466be8976b3d6dc7d3faaa3f4f199180f852226a7e81f30747e0cea9897c105caa6a37c57526d0eca0c85dd466692ce139356f2ef885a6caf364fb7957b258086818254cebcb058b01336afd2e94a076d317f2f441c9b597253433e41eb992b5841148c2e69f27f213fda7b8e0f734787bab3270e1c3dc4ba333baef8ad71f0f272ac0d0891c57453fdf87b18dde08ad953db7796a8f2193a13b7109bc862d71deef05b02c0e720553e23bf3a9ed853f6f2aa735b33748b98373e48e496f6ddbf8bb", 0xd5}, {&(0x7f0000001480)="5d2db62a9cd31cef28cddd339bb568736c623528f9423408c786c981d4f7a9b6e810fb98effb6f2e07ef3f95ab0f85f941f34ff08bf7a39acff7b3cacb3b21e81408581de2f701c6ae70ccaeecea72aaf028cf593c438d8114f7a63445f10fd3516ace1840f82e32e164c9a148410ed2ab7e02f434fcffd5cc707939d25961f192dfc37b6f2366431a3bb04890a2e0a9718e9e9c95e51db145e5a87ca7f8a88041bf7afbea23019ba1f573ebacc8", 0xae}, {&(0x7f0000001540)="33e432fdcc2db5cdbf3f7cacb4fef40978569850e99a4fd57bb6c1148b0c00b0eab76c9c825674a995504604cc581a57da5c7b614ee2bc1036a333a4483db09d173d8a9c21c3b66c6f98e75155298aa416cddc79667d6f676e9048362495bfde075e1ded6bece12d47f0bab68d38a25d8113f001885cb5fcfe7eb76f730d0c4c3b6e00d8152b3dd1d9f846770739ccd36af028c405f6cbb6fad8037c08a0", 0x9e}, {&(0x7f0000001600)="647e879da9a836c8110ec77c5d259328ae9f957af2583b0617925985824de625734ef8232ed996b24e1a932267c566161cdc261ad2ab482ade2adcbdffb603bcc42cb7f7bcedb327821c31280e1d1739619847d5353743c6ddfa9f1276297349065aca94ac7dacfda0de22723d80348bd4ad90d23297e1aff975ecdaad849ad46cba93ca414ca7dee4cfe76076d7053becebd799b0eb151f686838f90e21d0ee0091ae466c9c4fc5bbb47c672eddd78f2b3a325502baeae4eb441a", 0xbb}, {&(0x7f00000016c0)="66f0ba019669f0558e7796bb0806adb11723463ea59ff9cbeadbdd2e722ff7c7c4f0234e610a45e2e36ddc6dbc209f1b7f518f503cccbe18c3104822eeadbb70148ded630c534e663992f3948b87b6fd5815e60151a38cd27614fcacc330f0ca87c851a8e1c982b9de0488eb89023b6a5de1bd6349675235c8d547f92a191ba9b9b607a8d4cab5a2a3fcf5aa65fda613bf5cd9a624b8be6a5e80d56e06a4d2fe45e7939edbd4564a2feafa22ecaee5c89442614753f8c68de1759fe91f3144e9fe367f08a98fa7fe075be8cbce4dcc3f635e4fdbdefa0e5b8858267571c70ae865a4d882d1f54bf6d0bd9c0f60", 0xed}, {&(0x7f00000017c0)="e14aeaebb4afe10e91c3b0687cd5cbcd10bcc22907600ad07a2a6197f818b64065bd880beb30b8c5d14539aa4614075e9ccf90e2c1fc13a2603a21e1facb4a4fa2216c849c44c6551986a181b6fad0", 0x4f}, {&(0x7f0000001840)="dc2c72ff822b885bf8997817375f87e26967ca8ac2b6d4c9db29b820479504b733d36c3e84ba1a67cfb339fcd34d4c9bb852313e7f7fb85cbbf85e970f87a6cbe2967874a4230fc01bbf0163e5ef13a9decbadcb956c9c7bff71b2062804cf24da6044cd61f4336f8e9deb64c96627f4872818ce2c9251467d53a86efccbed0790596a81d15d3f308f330b86f6ab001b13a6237b3bef28e586c588ce04d0fc288b07d39ae7c1830a74589d80e52222c73c1f57062c8ebcadb73b21d7", 0xbc}], 0x9, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = dup2(r3, r1) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) r7 = socket$inet(0x2, 0x808, 0x0) write$binfmt_elf32(r7, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0x95, 0x9, 0x2, 0x5, 0x21, 0x5, 0x17e, 0x38, 0x300, 0x759b, 0x6, 0x20, 0x2, 0x8, 0x81}, [{0x5, 0x9, 0x0, 0xd9a6, 0x2, 0x7a2711e3, 0x2, 0x3}, {0x4, 0x9000, 0x401, 0x0, 0x2, 0x0, 0x7, 0xff}], "d0a4ea07a09e2ffb2ff8ac46ee0f03ab1bc0041fa35436d8ed13e2a238fe46693e6e9c3fe500af64ad5616e38805b8cb2a86e716a552b1710a8c5dc668b8e65dd7043b5458ce65288e67caac1772d9cb3eb8f3b4b3e8648e88fe6e8b453497720b982a11f06a5bd84cce318880b0966615cbf837c46d2e482db7d5860969a9b7d9900c2d8167b9aaf4865e23cb3be98e168173e93be74ab5628e1de46214c32cf15b21a41b5bdce768d775e2b30699d9b9c7ab3ffe08", [[]]}, 0x22e) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000)=0x3, 0x4) recvfrom(r3, &(0x7f0000000200)=""/143, 0x8f, 0x10000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800000000d04c60272e518e97c7e30000000000000000", @ANYRES32=0x0, @ANYBLOB="3a0000040000000008001b00000000713c00100010f20500"], 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xff, r0, &(0x7f0000000040)="b3947e361a781bafb2b813a059000a4c165c41096fcf8c1426a099b7bfcb23a651bf28ddec372cd3ba81d72d81562bf2d5654bd2b5f9b19c126a402821a4e5be9d58cad11a03324a6f52bc35a7d2dbd62b483ebbc3d5078be96072c0e9a6000f4abace3b15e99374a098eeef12a84723d75561e8a02870208216ba37c75548d028011c5bb801cc9fafe24ee41e536245d9cb941a9fbecf04ceae0294bb", 0x9d, 0x0, 0x0, 0x3, r8}, &(0x7f0000000140)) 01:30:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 01:30:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 1473.323420] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1473.430104] protocol 88fb is buggy, dev hsr_slave_0 [ 1473.435544] protocol 88fb is buggy, dev hsr_slave_1 [ 1473.440102] protocol 88fb is buggy, dev hsr_slave_0 01:30:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 01:30:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 01:30:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 01:30:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 01:30:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 01:30:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040), 0x4) 01:30:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0xffffffff, 0x2) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000000380)="e94020e06b22af50e009adaf74eb60c08057b747c489b60661673976646cb1e661af3e2e93fa892bd2d2de73fb15e460483f5f0124e604a1c5c7433cd193e8b73d9f74974b5f89351f00a1dc999aa54dfeb97f037fd4bfdde174c095291752de995356c3696af57c84e0e43029bc2a76c4c870c056deebb115be3a8178ac033ef6a206f94a47bb68612931b2068bb9d0d27b5ac13c554fd384d7bc21ec2b5f228232e01e4dac3f23ea30d718f88c4c3e4b430343acdc89b2f7cdbefbfadaf3ffffff7f2f45ac897015dd6e1cc4048bf9b27933cb745030699b090000000000000400f2734bf5ff59b1a0c9c6a0cc4e1dd76cf0334b22c637d4eafc00") sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) socket$inet_udp(0x2, 0x2, 0x0) r11 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r11, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) splice(r13, 0x0, r14, 0x0, 0xffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r15}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r15}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)='\x00', r15}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r12, r13, 0x0, 0x5, &(0x7f0000000480)='ppp0\x00', r15}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 01:30:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x433865c8918779ab}, [@IFLA_LINKMODE={0x8, 0x11, 0x1}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80851}, 0x0) 01:30:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 01:30:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) 01:30:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="24060000110000002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x624}}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x100, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) 01:30:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb", 0x5f) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) 01:30:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001080200"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002700010000000800100005000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 01:30:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x1, @u32}]}, 0x1c}}, 0x0) 01:30:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) 01:30:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001", 0x17}], 0x1}, 0x0) 01:30:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) getpriority(0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, 0x0) sendfile(r1, r3, 0x0, 0x800000bf) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000880)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:30:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001", 0x17}], 0x1}, 0x0) 01:30:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) getpriority(0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, 0x0) sendfile(r1, r3, 0x0, 0x800000bf) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000880)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:30:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1475.510122] net_ratelimit: 1 callbacks suppressed [ 1475.510127] protocol 88fb is buggy, dev hsr_slave_0 [ 1475.510158] protocol 88fb is buggy, dev hsr_slave_1 [ 1475.515053] protocol 88fb is buggy, dev hsr_slave_1 01:30:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb", 0x5f) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x48000000, &(0x7f0000000100)={&(0x7f00000004c0)={0x28, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x14, 0x11, @ipv6=@dev={0xfe, 0x80, [], 0x2a}}]}, 0x28}, 0x1, 0xfdffffff00000000}, 0x0) 01:30:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001", 0x17}], 0x1}, 0x0) 01:30:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006", 0x23}], 0x1}, 0x0) 01:30:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006", 0x23}], 0x1}, 0x0) 01:30:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006", 0x23}], 0x1}, 0x0) 01:30:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x3}}, 0x0) r3 = socket(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xfffffcd5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r7, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) open_by_handle_at(r8, &(0x7f0000000100)={0x13, 0x8, "81f03a59b30d162b262c23"}, 0x800) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7, 0x4}, 0x8) r10 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x2000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r10, 0x0, 0x800, 0x4, 0x2}) 01:30:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006000000000100", 0x29}], 0x1}, 0x0) [ 1476.155168] input: syz1 as /devices/virtual/input/input50 01:30:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006000000000100", 0x29}], 0x1}, 0x0) 01:30:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb", 0x5f) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:13 executing program 5: r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0x1f}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000080)=0x56fc) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0xfe90, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x2cd}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x4) 01:30:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x48000000, &(0x7f0000000100)={&(0x7f00000004c0)={0x28, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x14, 0x11, @ipv6=@dev={0xfe, 0x80, [], 0x2a}}]}, 0x28}, 0x1, 0xfdffffff00000000}, 0x0) 01:30:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006000000000100", 0x29}], 0x1}, 0x0) 01:30:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006000000000100000000", 0x2c}], 0x1}, 0x0) [ 1476.589526] input: syz1 as /devices/virtual/input/input51 [ 1476.656647] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:30:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006000000000100000000", 0x2c}], 0x1}, 0x0) 01:30:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e0006000000000100000000", 0x2c}], 0x1}, 0x0) [ 1476.938033] input: syz1 as /devices/virtual/input/input52 01:30:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e000600000000010000000003", 0x2d}], 0x1}, 0x0) 01:30:14 executing program 3: vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2f88, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0xfc61) [ 1477.095301] input: syz1 as /devices/virtual/input/input53 01:30:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7", 0x8f) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e000600000000010000000003", 0x2d}], 0x1}, 0x0) 01:30:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x80000, 0x7fff) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x21d) getegid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="180000000b86cf420341c709cbbacdde7072cd474d3d5d3b6d36b8f09d776be3d7cb1145f558686c6967710b51cf00a7a32d000939d0a15dbb4b2e201f8ddbd53c98de779b469f96267c0f4bf4c8fc98c6c72fc465b2b579db24f69221d9245f55a6195b106373d6d346b6a8835656972bd2e78cd9547669eee446fec8a34b2f08781342ecbc9346db9636b974267a8e175fda8e4821e151", @ANYRES16=r4, @ANYBLOB="f05c9779de8a0dd715a24fe9ad89a4927bdca19dd4287ad2e090d247335c8ddaf9e9a4c534343540f0b3f08a77beb0"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000001c0)=0x7f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x7}, 0x1000001ab) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000100), &(0x7f00000002c0)=0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0xd}, 0x5, 0x1, 0x0, 0xf, 0x8, 0x1, 0x4}, 0x20) r9 = getpid() accept4$unix(r2, &(0x7f0000000300)=@abs, &(0x7f00000003c0)=0xffffff50, 0x80800) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000580)=""/250, 0xfa}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000480)=""/189, 0x78}, {&(0x7f0000001a00)=""/7, 0x7}, {&(0x7f0000001680)=""/91, 0xfffffffffffffebc}, {&(0x7f0000001700)=""/250, 0xfa}], 0x6, &(0x7f0000001880)=""/169, 0xa9}, 0x2000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000001980)={0x0, 'ip6gretap0\x00', 0x3}, 0x18) ptrace$getregs(0xe, r9, 0x250, &(0x7f0000000200)=""/93) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc9, 0x0, 0x0) 01:30:14 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'batadv0\x00', 0x400}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x2) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) accept4$rose(r4, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@rose, @netrom, @netrom, @null, @netrom]}, &(0x7f0000000480)=0x40, 0x800) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local}, &(0x7f0000000300)=0xc) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000004c0)="e07132367018f6b58aa9b2d5eee1e191b8c35f3a28530666e149fa035b8001ebfcf4a3f01aed14245da471394599dbcc5834d5c58b966778a958482af7dfb2dce7667682ee8529b1d440c716277cf88b1360c83bb04ddeeae690f73fb6487e2d4c656d338a4556292ce1c7b072a4207365d696fa60fcfcdb38d7f8d118fa57417505cfc1e23303ae3899eedd685b390cf19acd3ddc2522e6de782982ad39e0bc3a7b93fb4ae7fa282c593ccae04d1c7a87710c719d4b3320d6fd958b30d5eef2cc79165de7ed791081d1fa1f368038b59355b3a40363dd180d508504e1a0f05a847c99014aee443537cd4a2a8ceef3eaf8bc9a65") getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=""/38, &(0x7f0000000140)=0x26) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000ac00d36fcb01dff6cdf2cea8ce8d387646553c72202f9ba94cf46739eae68d00", @ANYRES32=0x0, @ANYBLOB="610000000000000008001b00ef0000000800100005000000"], 0x30}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x1}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000003c0)={r8, 0x1000}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000240)={0xffffffff, 0x8, 0x1b, 0xdf4e, 0x14, 0x200}) 01:30:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e000600000000010000000003", 0x2d}], 0x1}, 0x0) [ 1477.446522] input: syz1 as /devices/virtual/input/input54 [ 1477.462165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=172 sclass=netlink_route_socket pig=1899 comm=syz-executor.5 [ 1477.507778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=172 sclass=netlink_route_socket pig=1899 comm=syz-executor.5 [ 1477.590279] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.590504] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.595423] protocol 88fb is buggy, dev hsr_slave_1 [ 1477.600435] protocol 88fb is buggy, dev hsr_slave_1 01:30:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(crc32c-intel,ctr-serpent-sse2)\x00'}, 0x58) 01:30:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 01:30:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1477.777983] input: syz1 as /devices/virtual/input/input55 01:30:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x1, 0x10, 0x300, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x0, 0x12, @sit={{0x0, 0x1, 'sit\x00'}, {0x0, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x0, 0x12, 0x4e24}, @IFLA_IPTUN_ENCAP_DPORT={0x0, 0x12, 0x4e24}, @IFLA_IPTUN_TOS={0x0, 0x5, 0x7f}, @IFLA_IPTUN_ENCAP_FLAGS={0x0, 0x10, 0xbf9b}], @IFLA_IPTUN_REMOTE={0x0, 0x3, @mcast2}, @IFLA_IPTUN_PROTO, @IFLA_IPTUN_LOCAL={0x0, 0x2, @rand_addr="98555002538b814226c726a3d852effe"}, @IFLA_IPTUN_LOCAL={0x0, 0x2, @empty}, @IFLA_IPTUN_FLAGS={0x0, 0x8, 0x6}, @IFLA_IPTUN_PROTO, @IFLA_IPTUN_REMOTE={0x0, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x0, 0x8, 0x3e}]}}}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) socketpair(0x3, 0x0, 0xb, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x0, @local}, {0xa, 0x4e20, 0xfa2, @remote, 0x85}, 0x101, [0x40, 0x3, 0x100, 0x8, 0x81, 0x96da, 0x3, 0x8]}, 0x5c) 01:30:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7", 0x8f) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2007fff) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB='u'], 0x1) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8482) 01:30:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @local}, &(0x7f0000000140)=0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_setlink={0x50, 0x13, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x4000, 0x2200}, [@IFLA_EXT_MASK={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_LINK={0x8, 0x5, 0x7f}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "7bbbe0553b9d419e085b0f6603e9a0d27399"}]}, 0x50}}, 0x0) 01:30:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1478.267188] input: syz1 as /devices/virtual/input/input56 01:30:15 executing program 1: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1478.349999] audit: type=1804 audit(1574645415.372:243): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir250040760/syzkaller.AxfM9E/1099/bus" dev="sda1" ino=17106 res=1 01:30:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:15 executing program 1: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1478.604305] input: syz1 as /devices/virtual/input/input57 01:30:15 executing program 1: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7", 0x8f) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) 01:30:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:16 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf0b, 0x10000) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000100)={@dev, @loopback, @dev}, &(0x7f0000000140)=0xc) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0xffffffff00000001, r2}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x1, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x800) 01:30:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) connect$netlink(r1, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4008040}, 0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:16 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1479.153714] input: syz1 as /devices/virtual/input/input58 01:30:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:16 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1479.442349] input: syz1 as /devices/virtual/input/input59 [ 1479.670115] protocol 88fb is buggy, dev hsr_slave_0 [ 1479.670118] protocol 88fb is buggy, dev hsr_slave_0 [ 1479.670159] protocol 88fb is buggy, dev hsr_slave_1 01:30:17 executing program 4: r0 = dup(0xffffffffffffffff) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x9d, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}, r2}}, 0x120) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @mcast2, 0xe34d}, {0xa, 0x4e23, 0x35324c65, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, r2, 0x6}}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000000c0)) open_by_handle_at(r1, &(0x7f0000000380)={0x88, 0x5, "2845cab349ee561b57aacca558e74f67e8f958845d353aab896d05ac6223122b23777642f80a9553e2ed2be9a1b82fbda8bfe29cd7c7d7f46f54e6e295c3831ec2cd0254c5dd73bae21e8e325fdb692a5df9ecaadddba38c03d074f20f186993f51f7cc94d1e6d7d35a688551ba009c46801f2913f8689bdac348a6f412876ef"}, 0x10001) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341", 0xa7) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$int_out(r1, 0x4, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, 0x0, 0x0) 01:30:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) [ 1480.644347] input: syz1 as /devices/virtual/input/input61 01:30:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, 0x0, 0x0) 01:30:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, 0x0, 0x0) [ 1480.944379] input: syz1 as /devices/virtual/input/input63 [ 1481.045960] input: syz1 as /devices/virtual/input/input64 01:30:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341", 0xa7) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:18 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x134, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8669}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x1}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x81) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, 0x0, 0x0) 01:30:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', 0x0, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r2, r1) [ 1481.488926] input: syz1 as /devices/virtual/input/input65 [ 1481.496789] input: syz1 as /devices/virtual/input/input66 01:30:18 executing program 4: get_robust_list(0x0, &(0x7f0000000200)=&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f0000000240)=0x18) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1481.549847] input: syz1 as /devices/virtual/input/input67 [ 1481.750138] net_ratelimit: 1 callbacks suppressed [ 1481.750143] protocol 88fb is buggy, dev hsr_slave_0 [ 1481.750154] protocol 88fb is buggy, dev hsr_slave_0 [ 1481.755098] protocol 88fb is buggy, dev hsr_slave_1 [ 1481.760166] protocol 88fb is buggy, dev hsr_slave_1 01:30:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:18 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setxattr$smack_xattr_label(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0), 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140)=0x9, 0x4) 01:30:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1481.917816] input: syz1 as /devices/virtual/input/input68 [ 1481.939291] input: syz1 as /devices/virtual/input/input69 01:30:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x31, 0x3, 0xff}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001000050000007c5aef79dc4a19aedaa789c9cb9045eacaca39610c601e5cf7c2043859a8234febdc65811c1b7405484d390328a3585a480930a7b4475df455ce6eb1559d97557ca3a85520f4025501b6034f541b"], 0x30}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 01:30:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r2, r1) 01:30:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341", 0xa7) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', 0x0, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000040)=""/18, &(0x7f0000000080)=0x12) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x100, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x8, 0x20}, [@IFLA_EVENT={0x8, 0x2c, 0x48}]}, 0x28}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000240)=0x4) [ 1482.303153] input: syz1 as /devices/virtual/input/input70 [ 1482.314781] input: syz1 as /devices/virtual/input/input72 [ 1482.338432] input: syz1 as /devices/virtual/input/input71 01:30:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r2, r1) 01:30:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1482.697132] input: syz1 as /devices/virtual/input/input73 [ 1482.718780] input: syz1 as /devices/virtual/input/input74 [ 1482.732839] input: syz1 as /devices/virtual/input/input75 01:30:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1482.884879] input: syz1 as /devices/virtual/input/input76 [ 1482.901303] input: syz1 as /devices/virtual/input/input77 01:30:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1482.933721] input: syz1 as /devices/virtual/input/input78 01:30:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r1) [ 1483.011344] input: syz1 as /devices/virtual/input/input79 [ 1483.076539] input: syz1 as /devices/virtual/input/input80 [ 1483.095186] input: syz1 as /devices/virtual/input/input81 01:30:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:20 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1483.187732] input: syz1 as /devices/virtual/input/input82 01:30:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000f1010010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl(r1, 0x2, &(0x7f00000000c0)="a3d39e37acf748789b8eba6f32f24c866490aee64491eca5f8ac31168b1ea20e77bba552539b") 01:30:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87", 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r1) 01:30:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={[], 0x0}, 0x7, 'veth1_to_bridge\x00'}) 01:30:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000640)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1483.341344] input: syz1 as /devices/virtual/input/input83 [ 1483.367074] input: syz1 as /devices/virtual/input/input84 [ 1483.372908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pig=2254 comm=syz-executor.4 [ 1483.391459] input: syz1 as /devices/virtual/input/input85 01:30:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r1) 01:30:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r6, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(0xffffffffffffffff, r1) [ 1483.678339] input: syz1 as /devices/virtual/input/input86 [ 1483.693989] input: syz1 as /devices/virtual/input/input87 [ 1483.713043] input: syz1 as /devices/virtual/input/input88 01:30:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(0xffffffffffffffff, r1) [ 1483.830143] protocol 88fb is buggy, dev hsr_slave_0 [ 1483.830176] protocol 88fb is buggy, dev hsr_slave_1 [ 1483.835287] protocol 88fb is buggy, dev hsr_slave_1 [ 1483.864516] input: syz1 as /devices/virtual/input/input89 01:30:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00', 0x2cd8}) 01:30:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(0xffffffffffffffff, r1) 01:30:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87", 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) [ 1484.212836] input: syz1 as /devices/virtual/input/input90 [ 1484.224912] input: syz1 as /devices/virtual/input/input92 [ 1484.241586] input: syz1 as /devices/virtual/input/input91 01:30:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) dup2(r2, r1) 01:30:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1484.475640] input: syz1 as /devices/virtual/input/input93 01:30:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000080)={0x9, "a1ff5d260583eaea9efec077f82c1c2f565a51af4e1d639abc828e51e3f969fd", 0x2, 0x3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @bt={0x2, 0x81, 0x0, 0xffffffff, 0x80, 0x8, 0x18}}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000240)={0x3, 0xdd6, 0x7, 0x5, 0x3, 0x3f, 0x7, 0xff, 0xfff, 0x81, 0x5, 0x4}) 01:30:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1484.553625] input: syz1 as /devices/virtual/input/input94 [ 1484.575400] input: syz1 as /devices/virtual/input/input95 01:30:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) dup2(r2, r1) [ 1484.634665] input: syz1 as /devices/virtual/input/input96 01:30:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1484.685221] input: syz1 as /devices/virtual/input/input97 [ 1484.747413] input: syz1 as /devices/virtual/input/input98 01:30:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) dup2(r2, r1) 01:30:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87", 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:22 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0xffffffff, 0x2) splice(r12, 0x0, r16, 0x0, 0xffffffff, 0x13) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r18, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0xffffffff, 0x2) r21 = fcntl$dupfd(0xffffffffffffffff, 0x406, r20) sendmsg$nl_route(r21, &(0x7f00000001c0)={0x0, 0x21, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX]}, 0x1, 0x0, 0x0, 0x20000840}, 0x8040) 01:30:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) [ 1485.067297] input: syz1 as /devices/virtual/input/input100 [ 1485.074978] input: syz1 as /devices/virtual/input/input99 [ 1485.092013] input: syz1 as /devices/virtual/input/input101 01:30:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r1) [ 1485.175837] input: syz1 as /devices/virtual/input/input102 01:30:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffee4}, {&(0x7f0000000100)="a48b12f7284b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2c690ccb15322e20000007c7d87a012bf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c4564001e29106fa8cd40e6b02b7dcd2809fe1e135ab1731fbdf7c2a5fae9acc79f793d07a3a4c1e6544bb07d9d1438733ca9997fb677a0b480f808e1251c0fbac0790ad0cf944599b4b23297e30e613b9597029ec9408003da0c2aca5285838440c370fa8bb7a79b1a26e1d660ce624a67abd9ba41d21070591bad85890db2567cf85cd20d242371e1701af4a43b9928c54d1eaa1c60227a121d3fe5a660677b60a83164e4bdaec50fca61", 0x10d}], 0x4, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) r9 = fcntl$dupfd(r6, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0xffffffff, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000140)={'irlan0\x00', {0x2, 0x4e22, @loopback}}) splice(r3, 0x0, r2, 0x0, 0x0, 0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x97}, &(0x7f0000000080)=0x8) [ 1485.419104] input: syz1 as /devices/virtual/input/input103 [ 1485.452935] input: syz1 as /devices/virtual/input/input104 01:30:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0xfffffffc, {{0x2, 0xfffe, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:22 executing program 5: sysinfo(&(0x7f0000000240)=""/147) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1485.511869] input: syz1 as /devices/virtual/input/input105 01:30:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r1) 01:30:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1485.623425] input: syz1 as /devices/virtual/input/input106 [ 1485.692415] input: syz1 as /devices/virtual/input/input108 01:30:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b66912", 0xb9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000200)={"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"}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r1) [ 1485.910130] protocol 88fb is buggy, dev hsr_slave_0 [ 1485.910163] protocol 88fb is buggy, dev hsr_slave_1 [ 1485.915268] protocol 88fb is buggy, dev hsr_slave_1 [ 1485.966033] input: syz1 as /devices/virtual/input/input110 [ 1485.987356] input: syz1 as /devices/virtual/input/input111 01:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@setneightbl={0x35e, 0x43, 0x8, 0x70bd25, 0x25dfdbfb, {0x7}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x1f}, @NDTA_THRESH3={0x8, 0x4, 0xfffffffb}, @NDTA_THRESH2={0x8, 0x3, 0x35d}, @NDTA_PARMS={0x4}, @NDTA_NAME={0x38, 0x1, 'GPL\'!selflomd5sumeth1\\GPLem0mime_type]security-!\x00'}, @NDTA_THRESH2={0x8, 0x3, 0x1}]}, 0x74}}, 0x90) 01:30:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) 01:30:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1486.274216] input: syz1 as /devices/virtual/input/input112 01:30:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x7, {{0x2, 0x0, @local}}, {{0x2, 0xfffe, @empty}}}, 0x108) 01:30:23 executing program 4: socket$netlink(0x10, 0x3, 0x0) 01:30:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) 01:30:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6, 0x400) 01:30:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b66912", 0xb9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0x10001, "8f3dc87d75768d89743d8c918a78046c5735ba0f48098acc3ff157a4b5b941db", 0x1, 0x20, 0x4, 0x9, 0x2, 0x0, 0x3f, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) 01:30:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000240), 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000280)={0x1, "c1a01109af44ff5032acc4b2b6c1f33612201fda721f386f6234304f18704820", 0x3, 0x0, 0x3, 0xfffffff7, 0x4, 0x2, 0x3, 0xe14}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) getsockopt$inet_udp_int(r2, 0x11, 0x6c, &(0x7f0000000140), &(0x7f0000000040)=0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{}, "eba671a86c57fab4", "e03ed0a1b6e60f9e828365986baa40fe", "beb7f56e", "5b73ce320b6634fd"}, 0x28) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) sendto$inet(r5, &(0x7f0000000180)="3020c0f4358b1a48a45ad8c8b3187cacf63506fc154a59729014d1c29a7feb921b87406beda3fb811f77f6454b35e43f17e6aeeec0f47a19d79fc576fb172635eca57253a67da4fc7da3833ed66ea5b9e30fc8ea44857498b8603ece63ff9e80c5ba6d63a79c4483a0afcab765425ee5715c9ef62c815939ba23108b42189462204e0ece22c7daba5ae340abf7dff402fa6915b38028d0fb0c39dd32d20a3b0613f2bf8a468a2f2a", 0xa8, 0xfddc5a97683107bd, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) inotify_init1(0x80000) [ 1486.769615] input: syz1 as /devices/virtual/input/input117 01:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x800) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r1, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR, @ANYPTR64, @ANYRES32=0x0, @ANYRES16, @ANYRES32=r4], @ANYRES16=r6], @ANYBLOB="40a8720d888a6e084400000000000008001b00000010000800faff05000000ce8fae40fad2521ff1dd72b5e55e29f9002361e514fbfeddbe10526006da11fcae9ce9e927f5c7bf6cd6bf3ef2bdb0e00fa1f57fec8653160d70cac376b00e5e54c9ecad6fec72baeca3c75c781ae9a32160de2311581222ae5fbe"], 0x3}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 01:30:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) 01:30:24 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 01:30:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1487.082597] input: syz1 as /devices/virtual/input/input119 01:30:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:24 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 01:30:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1487.204969] input: syz1 as /devices/virtual/input/input123 01:30:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b66912", 0xb9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87", 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:24 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 01:30:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)='bdev:#cpuset\x00'}, 0x30) fcntl$setown(r1, 0x8, r3) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00008000000800100005000000"], 0x30}}, 0x0) 01:30:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x4e22, @local}}, {{0x2, 0x0, @empty}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000100)={0xd0, 0x7fffffff}) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xd6}, &(0x7f0000000200)=0x8) r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r3, 0xfffffff8}, &(0x7f0000000040)=0xfffffffffffffdbc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x4, 0x6}, &(0x7f00000000c0)=0xc) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) 01:30:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000000)={0x0, {{0x2, 0x0, @rand_addr=0x74b}}, {{0x2, 0x0, @empty}}}, 0x108) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x8001, 0x200000) 01:30:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51220}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x35f, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x25, 0x3, 0x0, {0x2, 0x4, 0x0, 'eth1'}}, 0x25) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) 01:30:24 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, r0) 01:30:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) syncfs(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setattr(r3, 0xfffffffffffffffd, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1487.973914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1487.990124] protocol 88fb is buggy, dev hsr_slave_0 [ 1487.990154] protocol 88fb is buggy, dev hsr_slave_1 [ 1487.995459] protocol 88fb is buggy, dev hsr_slave_1 01:30:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1488.052012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:30:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c", 0xbc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b66912", 0xb9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:25 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, r0) 01:30:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_GET_DUMPABLE(0x3) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:25 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8800) ioctl$TIOCSIG(r0, 0x40045436, 0x3b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x3b6) 01:30:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:25 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xa2, 0x400802) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000200)={[], 0x7fff, 0x20, 0x4, 0x0, 0x5, 0x0, 0xf000, [], 0x3}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) write$capi20(r0, &(0x7f0000000100)={0x10, 0x40, 0x76, 0x82, 0x6, 0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x402}}, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 01:30:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:25 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, r0) 01:30:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r5}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e23, 0x4, 0x4e21, 0x5, 0xb, 0x80, 0x1e0, 0x87, r2, r5}, {0xa3, 0x101, 0x7, 0x6ae, 0x88, 0x100, 0xfffffffffffffffb, 0x1000}, {0x1, 0x9, 0x3f, 0x400}, 0x9, 0x6e6bb9, 0x2, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @empty}, 0x4d3, 0x32}, 0xa, @in=@broadcast, 0x3502, 0x1, 0x3, 0x4, 0x8, 0x800, 0xffffff00}}, 0xe8) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x31b, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30d0e1fcd1000108000000aa580fb93a51b5270028e342602ceb38cd81e7c33970c5d22b284e916c32b47e278d461acc3ef17230df217ddf72627a3bbfc1f53d3d65bdba293c834ed270cc170a4138c66eca2d03e0b247e3fd66f0454ba00b728475c4f8f7eb66a2ea466ee5e9903c044f3257f8bb", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x3}}, 0x40084) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$IOC_PR_PREEMPT_ABORT(r8, 0x401870cc, &(0x7f0000000040)={0x1, 0x7fff, 0x31f5, 0x4}) ioctl$HDIO_GETGEO(r8, 0x301, &(0x7f0000000080)) 01:30:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c", 0xbc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87", 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:26 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000180)={0x3, {{0x2, 0x4e23, @remote}}, {{0x2, 0x1, @multicast2}}}, 0x108) getdents(r0, &(0x7f0000000100)=""/110, 0x6e) 01:30:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:30:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1490.070151] protocol 88fb is buggy, dev hsr_slave_0 [ 1490.070154] protocol 88fb is buggy, dev hsr_slave_0 [ 1490.070197] protocol 88fb is buggy, dev hsr_slave_1 [ 1490.075342] protocol 88fb is buggy, dev hsr_slave_1 01:30:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c", 0xbc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:27 executing program 4: r0 = socket(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$RTC_PIE_OFF(r0, 0x7006) r3 = dup3(r1, r2, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) getpeername$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r6, 0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r6}, &(0x7f0000000100)=0x8) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$llc_int(r7, 0x10c, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x386, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0xffffffff}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 01:30:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1490.239606] input: syz1 as /devices/virtual/input/input134 01:30:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x180000, 0xffffffffffffffff}) r2 = getpid() sched_rr_get_interval(0x0, &(0x7f0000000080)) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x3, 0x3f, 0xfffffffffffffffd, r2}) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010a00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008991b00000000000800100005000000"], 0x30}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000002c0)={'rose0\x00', 0xffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) r4 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={r4, r5, r6}, 0xc) 01:30:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1490.539790] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1490.624834] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:30:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000040)={0x1087, 0xffffffff, 0x2a, 0x997a, 0x5, 0x400, 0x7, 0x8, 0xcea, 0x6, 0x0, 0x99d8, 0x0, 0x3, &(0x7f0000000000)=""/16, 0xfff, 0xde5, 0x8}) 01:30:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800080000000000"], 0x30}}, 0x0) 01:30:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65", 0xbd) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000140001080000000000010000352e2125ddf85bd7fcf83c4bb143aed068a28883df47c1d08e7bb89dd40b79af2aa38535f9b24c98601383ae81943c7d2867ba1e30a1453831ad05cbb18e0bcd99cc36c64cb0027ead060ba7d19fe213bfa57f8302a3d66ac77c6cb118c5a9655f78cb447fc885edf8b163f8d9e7244f28c2a30cd8bfffbbc300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100026002100"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x14) 01:30:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1491.064719] input: syz1 as /devices/virtual/input/input141 01:30:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000640)={0x102, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x0, @rand_addr=0x5}}}, 0x128) 01:30:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001080000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)) 01:30:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1491.362300] input: syz1 as /devices/virtual/input/input144 01:30:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_dccp(0x2, 0x6, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x400, 0x0) r7 = dup3(r0, r6, 0x0) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r8, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r8, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r9, 0x9, 0x78b, 0x791b}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0xffffffff, 0x2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r11, @ANYRESOCT], 0x2b) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0xffffffff, 0x2) setsockopt$inet_group_source_req(r12, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1491.444994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1491.522312] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1491.554348] input: syz1 as /devices/virtual/input/input148 01:30:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65", 0xbd) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/s\x81lin}x/\vK\xc9\rb\x00\xfe\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) write$binfmt_aout(r5, &(0x7f0000000300)={{0x10b, 0xfe, 0xff, 0x2ec, 0x1a8, 0x7, 0x60, 0x7f}, "3dcb913c616af86ff4a5b0a01a858dc494be2f29fd6b44d34d997f56be4943398803a396715caba37d2200370c72b6e8fc562dd259a777d8748df79c50c245eb44ea04992910c6db16eafc330cf6cacc5b5584080409350310e9d404c61572", [[], [], [], [], [], [], [], []]}, 0x87f) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r6, 0x8}}, 0x10) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0400000000080010000500000008d759f38bcd8167804ee143491e9a6fcbe361c9d9b955dbad3751729ce0720ef8c38dbc98578f3fe7f528fab5e805a92b88324da64976a04c6e87a5477d620c96f59f2755674ca1f1d20a173629651e1b1d59f19ff5fc3587a27c188ba8b45cd234fc870900e5fba1686a15262aa57bf51053be8e13d0035effaa298abc790615080580978a6ccb9e3b2ecdc27f861fa6d5d8a9a0714921c06ce6e28e66a73155658db9b4674d10eaec14fdf8a8b3bbc0bb69b7b36193c7ff6a0032ef4f270f35fbe137ba1baa58edeff138d0a6e0"], 0x30}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 01:30:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:29 executing program 0 (fault-call:9 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1491.966366] input: syz1 as /devices/virtual/input/input151 [ 1492.047237] input: syz1 as /devices/virtual/input/input152 01:30:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1492.150124] protocol 88fb is buggy, dev hsr_slave_0 [ 1492.150150] protocol 88fb is buggy, dev hsr_slave_1 [ 1492.155249] protocol 88fb is buggy, dev hsr_slave_1 01:30:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockname$ax25(r1, &(0x7f0000000040)={{}, [@bcast, @netrom, @remote, @remote, @netrom, @remote, @rose, @default]}, &(0x7f00000000c0)=0x48) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000140)={{0x7, 0x4}, 'port0\x00', 0x90, 0x20, 0x9, 0x9, 0x800, 0x0, 0x401, 0x0, 0x5, 0x5}) dup2(r2, r1) [ 1492.268196] input: syz1 as /devices/virtual/input/input154 01:30:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x1000001, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0xfffffffffffffc98) [ 1492.363807] input: syz1 as /devices/virtual/input/input155 01:30:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65", 0xbd) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xfd3b) 01:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108001000000000200000080000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) 01:30:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r3, 0x24, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x0, 0x20, 0x1, 0x70bd25, 0x25dfdbfd, {0xa, 0x4e3a54edbc59c66e, 0x20, 0x3, 0x7e, 0x0, 0x0, 0xabe666c928e561f3, 0x2}, [@FRA_DST={0x0, 0x1, @local}, @FRA_DST={0x0, 0x1, @empty}]}, 0xfffffffffffffdb6}}, 0x9ba9a700ee6828e8) 01:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @descriptor="1f7d6268538d7ae9"}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1492.825505] input: syz1 as /devices/virtual/input/input157 [ 1492.851414] input: syz1 as /devices/virtual/input/input158 01:30:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='\x04\x00', 0x6, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000200)=0x8, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) r7 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000780)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x5, 0x4e24, 0x4b86, 0x1c, 0x0, 0x80, 0x84, r6, r7}, {0xa8, 0x10000, 0xa6b, 0xa874, 0x1, 0x1, 0x3, 0x101fe052}, {0xfffffffffffffff8, 0xff, 0x5, 0x20}, 0x40, 0x6e6bb1, 0x0, 0x1, 0x4, 0x3}, {{@in6=@loopback, 0x4d2, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3501, 0xe10afc9bdd2fc5c4, 0x1, 0x87, 0x20, 0x3, 0x4}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r2) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) [ 1493.123777] input: syz1 as /devices/virtual/input/input159 [ 1493.158682] input: syz1 as /devices/virtual/input/input160 01:30:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000180)={0x7, 0x10000}) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000080)) r7 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r2, r1) [ 1493.224947] input: syz1 as /devices/virtual/input/input161 [ 1493.332386] input: syz1 as /devices/virtual/input/input162 01:30:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = dup2(r1, r2) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000040)={0xffffbdf9, 0x10000}) [ 1493.642662] input: syz1 as /devices/virtual/input/input163 [ 1493.666801] input: syz1 as /devices/virtual/input/input164 01:30:30 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x11, {0x1, 0x1, 0x80000001, 0x1}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0x9, 0x4) 01:30:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001081d00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) exit_group(0x8) 01:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x4000) [ 1493.976960] input: syz1 as /devices/virtual/input/input165 [ 1494.007490] input: syz1 as /devices/virtual/input/input166 01:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r3, r4/1000+30000}}) 01:30:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1494.199489] input: syz1 as /devices/virtual/input/input167 [ 1494.210794] input: syz1 as /devices/virtual/input/input168 [ 1494.230118] protocol 88fb is buggy, dev hsr_slave_0 [ 1494.230121] protocol 88fb is buggy, dev hsr_slave_0 [ 1494.230160] protocol 88fb is buggy, dev hsr_slave_1 [ 1494.235261] protocol 88fb is buggy, dev hsr_slave_1 [ 1494.302411] input: syz1 as /devices/virtual/input/input169 01:30:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "fb200c", 0x0, 0x32, 0x0, @mcast2, @ipv4={[], [], @broadcast}, [], "9a89552f1cd4b751"}}}}}}}, 0x0) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) tee(r5, r1, 0x5, 0x6) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0xb37, 0x2, 0x4, 0x33, 0xfff}, 0xc) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0x7, 0x1e, "9b1d50eac6ca7092340abd94a9fabe65f41e427e49bb97cb13b1edf1e2b9"}) 01:30:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r2, r1) 01:30:31 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) [ 1494.495135] input: syz1 as /devices/virtual/input/input170 [ 1494.517839] input: syz1 as /devices/virtual/input/input171 [ 1494.535622] input: syz1 as /devices/virtual/input/input172 01:30:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x9b9541) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) dup2(r1, 0xffffffffffffffff) r3 = accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000100)=0xfffffffffffffff6) shutdown(r3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/56}) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 01:30:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1494.694594] input: syz1 as /devices/virtual/input/input173 01:30:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) write$char_usb(r4, &(0x7f0000000080)="4753184b7a116985900b7a", 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1494.878211] input: syz1 as /devices/virtual/input/input174 [ 1494.899759] input: syz1 as /devices/virtual/input/input175 [ 1494.908836] input: syz1 as /devices/virtual/input/input176 01:30:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x3ff, 0x0, 0x0, 0x1c19}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80800, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r4, r1) [ 1495.037470] input: syz1 as /devices/virtual/input/input177 [ 1495.091573] input: syz1 as /devices/virtual/input/input178 [ 1495.193847] input: syz1 as /devices/virtual/input/input179 01:30:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r1) 01:30:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x0, 0x3, 0x7f, 0xffffffffffffff9f, r6}) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3fc0) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000080)) r8 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup2(r2, r1) ioctl$sock_ifreq(r9, 0x8971, &(0x7f00000001c0)={'irlan0\x00', @ifru_addrs=@can={0x1d, 0x0}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@local, 0x44, r10}) 01:30:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x2, @remote, 'bcsf0\x00'}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000100000419a9a5c282e000000000000000199cbd", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100005000000"], 0x30}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='team_slave_0\x00') 01:30:32 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x17) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x4e22, @local}}, {{0x2, 0x0, @empty}}}, 0x277) [ 1495.386539] input: syz1 as /devices/virtual/input/input180 [ 1495.395684] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1495.412208] input: syz1 as /devices/virtual/input/input181 [ 1495.439927] input: syz1 as /devices/virtual/input/input182 [ 1495.457660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:30:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000080)=0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_getneigh={0x0, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x40000, 0x10401}, [@IFLA_BROADCAST={0x0, 0x2, @remote}, @IFLA_AF_SPEC={0x0, 0x1a, [{0x0, 0x1c}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x1c}]}, @IFLA_NET_NS_FD={0x0, 0x1c, r2}]}, 0x30}}, 0x0) 01:30:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r1) 01:30:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r2, r1) 01:30:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r4 = add_key(&(0x7f00000002c0)='trusted\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="cf7bdd6d58f8c03b1a6abed2c77c1e2e4e053f87b406d7b731a4468406206f5bb88f120fb84c897f112a94aa16d29b4a029ddb82e94d6676f9565e1afa841021d7dbfbd8600fa31489ce21e62735aa9542d0e277f8f752863eb550c38c42a0ddc7bc90f2b5ef9fc06cc155736fdebb650b499f7e84f79976005d399f93c472a354523314139c81c17a315bf2159fb5ad866d56a19cd7c2e23f96b02941efcfb7a8b1da19b85fea6fd5f29420bbba73b1df3eeab4da6154c4db7bad936ec3b1d1f4d4", 0xc2, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$reject(0x13, r4, 0x4, 0xc904, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0xc71cd4c115e4cb99, @bt={0x9, 0x2, 0x0, 0x2, 0xffffffffffff85d7, 0x8, 0xa549, 0x4b0f, 0xfff, 0x7ff, 0x8001, 0x6, 0x1b, 0x80000, 0x1, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) dup2(r3, r2) [ 1495.754263] input: syz1 as /devices/virtual/input/input184 [ 1495.770817] input: syz1 as /devices/virtual/input/input185 [ 1495.782280] input: syz1 as /devices/virtual/input/input186 01:30:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r1) 01:30:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r2, r1) [ 1495.875222] input: syz1 as /devices/virtual/input/input187 [ 1495.887717] input: syz1 as /devices/virtual/input/input188 [ 1495.957428] input: syz1 as /devices/virtual/input/input189 01:30:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, 0x0, 0x0) 01:30:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:33 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000200)={{0x0, 0x8, 0xfff9, 0x8}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00', 0x3}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000000)=0xe8) fchown(r3, r4, 0xee01) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0xff) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "f831d45f5ad80fae", "43864345a04b1240cf9ea3b675b3fc5a", "9e1028b3", "3df876dd47b0bb9b"}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r5, r0) 01:30:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r2, r1) [ 1496.215228] input: syz1 as /devices/virtual/input/input190 [ 1496.228295] input: syz1 as /devices/virtual/input/input191 01:30:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x4}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = getpgid(0xffffffffffffffff) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000180)={0x4, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e22, 0x3, 'dh\x00', 0x4, 0x28cf8b0c, 0x18}, 0x2c) sched_rr_get_interval(r5, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) 01:30:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x8000) [ 1496.310126] protocol 88fb is buggy, dev hsr_slave_0 [ 1496.315360] protocol 88fb is buggy, dev hsr_slave_1 [ 1496.320499] protocol 88fb is buggy, dev hsr_slave_0 [ 1496.320538] protocol 88fb is buggy, dev hsr_slave_1 01:30:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r1) 01:30:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1496.571401] input: syz1 as /devices/virtual/input/input194 01:30:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0xa2c9f977d2f9efb8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0xffffffff, 0x2) close(0xffffffffffffffff) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) ioctl$FICLONE(r1, 0x40049409, r3) 01:30:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000240)=""/138) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@delneigh={0x37, 0x1d, 0x100, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, r6, 0x3a, 0x88, 0x4}, [@NDA_CACHEINFO={0x0, 0x3, {0x80000001, 0x9, 0x8, 0x2}}, @NDA_PROBES={0x0, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x9db47d7a6e7e684b}, 0x4000000) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) r8 = socket(0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = dup3(r9, r10, 0x0) sendto$inet(r11, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0xffffffffffffff80, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x7a, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r12, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f00000000c0)={r12, 0x5}, 0x8) 01:30:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) [ 1496.632089] input: syz1 as /devices/virtual/input/input195 [ 1496.643178] input: syz1 as /devices/virtual/input/input196 [ 1496.709404] input: syz1 as /devices/virtual/input/input197 [ 1496.774828] input: syz1 as /devices/virtual/input/input198 01:30:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, 0x0, 0x0) 01:30:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r1) 01:30:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x0, 0x3, 0x7f, 0xffffffffffffff9f, r6}) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3fc0) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000080)) r8 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup2(r2, r1) ioctl$sock_ifreq(r9, 0x8971, &(0x7f00000001c0)={'irlan0\x00', @ifru_addrs=@can={0x1d, 0x0}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@local, 0x44, r10}) 01:30:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x3f0, 0x400000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000200)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3, @empty, 0x80000000}, {0xa, 0x4e24, 0xb1, @local, 0x10001}, 0xffff, [0x5, 0x1, 0x1, 0x6, 0x4, 0x7fffffff, 0x20, 0x8]}, 0x5c) dup2(r5, r5) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x2001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xd99) dup2(r4, r3) [ 1497.064225] input: syz1 as /devices/virtual/input/input199 [ 1497.070256] input: syz1 as /devices/virtual/input/input200 [ 1497.077351] input: syz1 as /devices/virtual/input/input201 01:30:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r1) 01:30:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x9b9541) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) dup2(r1, 0xffffffffffffffff) r3 = accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000100)=0xfffffffffffffff6) shutdown(r3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/56}) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) [ 1497.407926] input: syz1 as /devices/virtual/input/input202 01:30:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$rfkill(r2, &(0x7f0000000040)={0x3ff, 0x4, 0x3}, 0x8) 01:30:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 01:30:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) fcntl$setpipe(r1, 0x407, 0x401) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x300, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x0, 0x1f1a4}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x5}]}, 0x28}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x2d) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0xffffffff, 0x2) accept4(r7, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x80, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_setlink={0x3c, 0x13, 0x608, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r9, 0x7, 0x25290}, [@IFLA_PROTO_DOWN={0x8, 0x27, 0x2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffff009}, @IFLA_BROADCAST={0xc, 0x2, @local}]}, 0x3c}}, 0x0) [ 1497.543164] input: syz1 as /devices/virtual/input/input203 01:30:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) [ 1497.679319] input: syz1 as /devices/virtual/input/input204 01:30:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) [ 1497.784051] input: syz1 as /devices/virtual/input/input205 01:30:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x1) 01:30:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, 0x0, 0x0) 01:30:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r1, 0xffffffffffffffff) [ 1497.917139] input: syz1 as /devices/virtual/input/input206 [ 1497.964218] input: syz1 as /devices/virtual/input/input207 01:30:35 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x11, {0x1, 0x1, 0x80000001, 0x1}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0x9, 0x4) 01:30:35 executing program 1 (fault-call:6 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x4a2) [ 1498.295031] input: syz1 as /devices/virtual/input/input208 [ 1498.306150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.324796] bridge0: port 2(bridge_slave_1) entered disabled state 01:30:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}, {{0x2, 0x0, @empty}}}, 0xdf) socketpair(0x9, 0xda1851ae46f625e4, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) bind$can_raw(r1, &(0x7f0000000040), 0x10) 01:30:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) geteuid() ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1498.390115] protocol 88fb is buggy, dev hsr_slave_0 [ 1498.395282] protocol 88fb is buggy, dev hsr_slave_1 01:30:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) [ 1498.507584] input: syz1 as /devices/virtual/input/input209 01:30:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000000)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x49f) [ 1498.605534] input: syz1 as /devices/virtual/input/input210 01:30:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @local}}}, 0x108) 01:30:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, '\x83yz0\x00', 0x8004e}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xc) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000080)={0x6, 0x8, 0x1}) dup2(r1, 0xffffffffffffffff) 01:30:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) 01:30:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100800, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x60280ae9c54fbd69, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 1498.771059] input input211: cannot allocate more than FF_MAX_EFFECTS effects [ 1498.788185] input: syz1 as /devices/virtual/input/input212 [ 1498.863398] input input214: cannot allocate more than FF_MAX_EFFECTS effects [ 1498.896125] input: syz1 as /devices/virtual/input/input215 01:30:36 executing program 3 (fault-call:7 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev\x1d\x14h\xb90\xdd\xaa\xffvent#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) 01:30:36 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) pwrite64(r3, &(0x7f0000000100)="56e3e6b9548a92e30e3162a2198341f739cfe206365cb728e5dc30338a025abe032e76bedf1963b1210ab18b6fc38c0bdfaec2b588f97daa1aff708f59ea9d514891c2e485dd2b645a68557e181e4bff0f2d351f20720bb4cb1eb7b3bdc4c6d7fc1d4bd9687fbc6201a47f5712c882e11e1b2c83e1d8c3590135b7ee51227ec970de6f3ea220115638634eb66e00723feb5da46ab27665221c67df19eef466ed3bcf23d24942d451db00158b0c9f325fbb906bbb10b9fae10f02152ce9a26f682525a9a7d312f8652df1826404f0314e9ec65f67a375f79c10b0af2a0063b60b05d37cc5bb799b8c50e1494adc01ff46a46521", 0xf3, 0x9a) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) r6 = getgid() write$P9_RGETATTR(r2, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x200, {0x4, 0x4, 0x7}, 0x40, r5, r6, 0x8000, 0x401, 0x400, 0xffff, 0x101, 0x5, 0x7, 0x80000000, 0x4, 0x8, 0x94, 0x81, 0x2, 0xfffffffffffffff9, 0xb53}}, 0xa0) setsockopt$inet_group_source_req(r1, 0x0, 0x13, &(0x7f0000000640)={0x4, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x142) 01:30:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev\a\x00\x8d\xd7X\r\x82\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x400000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x284004, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3f}, @SEG6_ATTR_SECRET={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r4, r1) [ 1499.178908] input: syz1 as /devices/virtual/input/input217 [ 1499.195029] input: syz1 as /devices/virtual/input/input218 01:30:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2000, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000140)="7f0ddf13af8aedf795646004ece2e2c9501bacfbe8d6731a981c4be4ea81374301ff8d1bc23261700391e434e6ada28e0ea4a3963b54678e", 0x38) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r1) 01:30:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1499.352069] input: syz1 as /devices/virtual/input/input220 [ 1499.363040] input: syz1 as /devices/virtual/input/input221 [ 1499.462290] input: syz1 as /devices/virtual/input/input222 01:30:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) r4 = socket(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f0000000200)="007200e90f6b2ec71f8cbd8480f016d62da9f132602b816f754374d40f23395b658045219de06d7a322a4b1acefe5c72f512458da4cf1cafac6f0637c7b44d6bbb4a95c1eca9811b45c7249f8ce2f52ab80209deb27406679b6a36f38651a0e707da3cad7c10faf7bc5a8391460a89a42079663ff520429fa1173169851706fb962a971a54321a78644772f9a9af223e10e529c7890bbfdb62a3244585e5cd17b618b1", 0xffffffffffffffd0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r8, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r8, @in={{0x2, 0x4e22, @multicast2}}, 0x3d, 0x7fff, 0x7, 0x8000}, 0x98) dup2(0xffffffffffffffff, r1) 01:30:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1499.594222] input: syz1 as /devices/virtual/input/input224 01:30:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) [ 1499.679635] input: syz1 as /devices/virtual/input/input225 [ 1499.870643] input: syz1 as /devices/virtual/input/input227 01:30:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='t\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) r4 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r3, r4) dup2(r2, r1) 01:30:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000640)={0x0, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1500.014094] input: syz1 as /devices/virtual/input/input228 01:30:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="96d28f589fd24a051d6f1867c5fe3a239a8e265e969b809760ea28b6234862cbc391c930104d6227114b725e7df0a126956ef908c3e45d2d2683825c36fcc2cafc774729819386d460e1f3c77747ab75ba6ee2caff81aa4c1c1701c573a6f57ccf3a4dfd968c201688eca064c2a2906a54ad5794c515a9a970e2d13574e69537f5c08783b89e7b4cbb30d0764a0b789574cf89bc1f58a756ed3eee81a0ed323fd4db9a785b10a909c4d36cdfe8fff66857bcc3b203fd39a95a2a1809cd1df0cdba10d13a52453247f55fd6f5f9ffd8417de10254320464f49d56", 0xda}, {&(0x7f0000000100)="eebf6085315f8601b75725e97ee3056fd81338d26f4adb8067b679b26363a1de7b6ab4bdc63d68a33dbf389a634ea47d71b714f7877cb6a397fbbbbcce2858452eca1bb3c8ce8c3b23300a7f84a96c019e1dcdf0fee4fe4ddf21b8e2ce4d1a8fd810c60ecba64f73eac163f4e7d43659764a13c92e661ce74eb54e50710f3b003734e57cf8aab0e4a48bf00d0e21752ed6c747ab8b8ae2f0161746736e36d879456daeb321513aee68785616d67284b057d3cf59", 0xb4}, {&(0x7f00000001c0)="a491a5bb73fa3531dd8fd18ffc41431174db62ce3c26e07e1f9923cdb8d934180c01b7bfd638fb926dd482dcf22f5abcab256e972dce3a4025074683f83f3c0f612828cf356f59e3e3703955fccd1c87840423a3e7df28345f64578a6b461eb7c195983e5b5c5ca6a253636b77e32feceef25dcea6f999940fa84de4e4e3ff7f8e51a4d58acc1b2e7029d3cd", 0x8c}, {&(0x7f0000000280)="22980c53eebb716c28fd74bb45ed7f86b18b521ded882738ef62cd4b1c9010a8472d568416419aa63dce680852a53dcb574a3c518b5fa48b6cda3a50e1e6588605ee3154d2be69d9d53a3b5bcf74a356404b653cecda36c444be90a28bd974bb9a2f533d2991e5cdb3c81a6b031dad29151e4b959fda9832a8807322d047a1ad911f2b65069c66c2ad7889048cfd", 0x8e}], 0x4, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x90000, 0x0) [ 1500.096982] input: syz1 as /devices/virtual/input/input229 01:30:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x501200) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r16 = ioctl$TIOCGPTPEER(r15, 0x5441, 0x3d2) splice(r16, 0x0, r14, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r18 = socket$inet_udp(0x2, 0x2, 0x0) close(r18) splice(r17, 0x0, r18, 0x0, 0xffffffff, 0x2) write$binfmt_misc(r7, &(0x7f0000000240)=ANY=[@ANYRES64=r9, @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="93a802fe7225c64ae460d16ab8d8d7bd986567eb3a54ea6b6bdfecc92854fc025093e70b7b6f169cde993fb259dfdbd0eca0e36eb823a05d6f0c8789a7eb", @ANYPTR64, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="66003cee5bc95f04e642ea450bda3f3858ec54f299dce4c57313dc6302e9965237b797dcb115dd9adb3249e636994d2a728e330f6ba1c738d6528cf6a779420e3b078bf0d5cdba1f7914509ed9415767eb68adeb830cbb26bc6d959ec0017cb53e157d31077a024aff3dd8fe4f88bf67d164ebb1aad5b56c94467d697ad4997f00238f2370b434a5f96542e76f1338b821826aef0772d039b04baa6a18b6f77e99f5b7ee231ff0f7b2113e7567d636dda8745a354f24209630012fcb2520bc3d51c6f21a0419c9f6b98000"/214, @ANYRES64=r10, @ANYRESOCT=r12, @ANYPTR64, @ANYBLOB, @ANYRES64=r13, @ANYBLOB], @ANYRES32, @ANYRES64=r17]], 0x24) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r19, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r20 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c) fcntl$setpipe(r20, 0x407, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r21, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r22, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r24 = socket$inet_udp(0x2, 0x2, 0x0) close(r24) splice(r23, 0x0, r24, 0x0, 0xffffffff, 0x2) write$binfmt_misc(r1, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r24, @ANYPTR64=&(0x7f0000000080)=ANY=[], @ANYBLOB="9935bba2d5b5c529b258621ed5e9b05965b1db5bd72cdf7ddc9c5ed3f81efccdb8577ac689135fcba7ab2cc04db4280d8ec3507fd64044448679766dda8b0c550adbfdab4243cfb0c9d834700b5874a4219744f4b86af43eeda9509e2280b7e715cb2d804994b90202ca98fee2bf379b015dfb2ec4637a325c1049ce7d45dc2d252289fbbc3296c625dfde175347b02fb6a050b988d4001085174ffc1087ba5dc42d7a6708393d6ebd779190790a67c8e747d074a00c557cfcceccfd9d615781b23b165a", @ANYBLOB="9cb3adfb49b7518d04871f2044"], @ANYBLOB="7d2a8dbd1f35510aea3bfa093cb0568fe67ebb558e925a49ee782e24460a01f856f5bbb3413f0bce9532202c1676707d4338dff3ed4fb5aab39fd990bbfaa78e050bcc46f657706210f6ba5800e3f90b6a43b79238c4b9548ca0c31bf7319bac8469b7c70d0dc2b2a0b450182af9eeb8fb32d07208fbd073775301b201a55358333de651e794729b", @ANYRESOCT=r5, @ANYRESHEX, @ANYBLOB="640ac4deae66c8ef3e84d56a26e61d752e2b913b0c6dee1c68c2705970c1d51d92c1abe2bf4073cfb6b7d014ee9a4437b3935db092c20f2395c29938174521203f9f95e760f85f7e98bcbe229711361bcfc13d4d88cc631f3c44d1f18838e09727c1808d63d21caa50e0c8571787003a138d7555c77802260582e4e81ed9f72348b0bab3d657bab2d3373822bc7f", @ANYBLOB="a4b956a3581fe500746d4375337b34a4790770f013f66e6a34e815a90bf327e7ae6851cb274da815f31379f38a7b8845eaf3080b0a5e", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES16=r22]], 0xfe) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0x0, 0xa6c7, 0xfffe}, 'syz1\x00', 0x22}) ioctl$UI_DEV_CREATE(r0, 0x5501) r25 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r26 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r27 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) dup2(r26, r25) [ 1500.233736] input: syz1 as /devices/virtual/input/input230 01:30:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='\"\x00<\x00\x00\x00\x03\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000140)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) r10 = socket(0x0, 0x0, 0x0) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r11, r12, 0x0) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r14, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r14, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xffffffca, @rand_addr="dd27731c94ed88b277d82520148f8453", 0x90}]}, &(0x7f0000000280)=0x10) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0x4240a2a0) close(r2) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x2) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='ifb0\x00') r16 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r17, r16) [ 1500.317780] input: syz1 as /devices/virtual/input/input231 01:30:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000240)) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) dup2(r2, r1) 01:30:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) [ 1500.434546] input: syz1 as /devices/virtual/input/input232 [ 1500.470167] protocol 88fb is buggy, dev hsr_slave_0 [ 1500.475309] protocol 88fb is buggy, dev hsr_slave_1 01:30:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000080)=0x6, 0x4) [ 1500.833027] input: syz1 as /devices/virtual/input/input233 [ 1500.915167] input: syz1 as /devices/virtual/input/input234 01:30:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x154000, 0x0) bind$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x2, 0x4, 0x2, 0x40, "ddf2dc37186c6fab3ab4eda4058cfa111825230c8acd470a8ff0073ff66192234405f4fd71cd5ab41a409707c057bd9c17128eb89a60c9f4c8eef4676303f9", 0xd}, 0x60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000080)) r7 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r2, r1) 01:30:38 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, @bcast, @netrom={'nr', 0x0}, 0x7ff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x1, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x13, &(0x7f0000000000)={0x5a, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @empty}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = getuid() r6 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r7, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x4000, 0x0) r9 = socket$bt_hidp(0x1f, 0x3, 0x6) r10 = getpid() pipe(&(0x7f0000000200)) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xac38c6c1) ioctl$SIOCAX25ADDUID(r11, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r13}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r14, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r15, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r17 = socket$inet_udp(0x2, 0x2, 0x0) close(r17) splice(r16, 0x0, r17, 0x0, 0xffffffff, 0x2) r18 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0xffffffff, 0x2) r21 = eventfd(0x0) sendmsg$netlink(r4, &(0x7f0000000400)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x7fffffff, 0x4000082}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000280)={0x1c, 0x15, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x4b, @u64=0x4}]}, 0x1c}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r7}}}, @rights={{0x18, 0x1, 0x1, [r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r15}}}, @rights={{0x20, 0x1, 0x1, [r16, r3, r18, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r20]}}, @rights={{0x14, 0x1, 0x1, [r21]}}], 0xa8, 0x4024491}, 0x10040) [ 1501.031545] input: syz1 as /devices/virtual/input/input235 01:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x10000, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/vc/cache_thres\x05\xd8\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000340)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="4c819ee0ab90e30000171ade124a0240bdbd36f465a2baba07f5b9b3f0be7f384f23ab58bb69fc730ed1dc5f2a19b7d1269e904cde57264cd9ab6e90b46b96c3804aad14b1358ebdf56d69881092c655fab622f500001f00000000000000139fd023046dbd0294e10b68d628a35d7b9dc081ea190b7c3353343479bec5c8ac3835e042dbe8a6a772037f768b7eaf552afe3ab91d82358ecdf52784bf62b19302d440c51c101300000000", @ANYPTR64, @ANYRES64=0x0, @ANYRESDEC, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYPTR, @ANYRES16=0x0]], @ANYRES32, @ANYRES64=r3, @ANYRES64, @ANYPTR], 0x5, 0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=r3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x10000}, [@IFLA_GROUP={0xffd3}, @IFLA_IFNAME={0x0, 0x3, 'nr0\x00'}]}, 0x30}}, 0x0) 01:30:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r3, r2) [ 1501.129322] input: syz1 as /devices/virtual/input/input236 01:30:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000140)={r5, 0x466}) dup2(r2, r1) [ 1501.175027] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:30:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x0, 0x7ffd, 0xffff}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/inpu\x00\x01event#\x00', 0x4, 0x44df9a2c2a88f45b) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = semget$private(0x0, 0x3, 0x100) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000140)=""/122) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000002c0)=""/25) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x6, {0x7, 0x1f, 0xc76, 0x200, 0x0, 0x5, 0x9, 0x200}}, 0x50) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000001c0)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0xffffffff, 0x2) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000440)={0xb682, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e22, @remote}}}, 0x108) pipe(&(0x7f0000000200)) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xcf) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r11}) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r11}) dup2(r2, r1) ioctl$KDENABIO(r6, 0x4b36) 01:30:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000000080)={&(0x7f0000000140)="7619784e991f7e044f749ebe5c0313c66288fb5e73a4d37ff8e46f751ca5a39d8cadaa8397060661da7e64f8ed47b3b47cdc1b87fff8f7529407a3a5e96ee3685cbf44137069d44b0ebcb7d84b7f6fc597b006", 0x53}) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r3, r1) [ 1501.278102] input: syz1 as /devices/virtual/input/input239 01:30:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) 01:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000300)={0x2e25, 0xbe, 0x100, 0xffffffff, 0x101, 0x8, 0x0, 0x1}, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3017796b72021b00"/20, @ANYRES32=0x0, @ANYBLOB="0000019de2d78412f82fceb3163b322a4aec4dd521ed0100000000805038381c813b95f443a3fcbd8e4bf274db5c50ba7bf3437c7dafd4b17d58eeaa9630bfc49cb53dba9023121a68a0025966db71b054f65d83afa85877ec8d2307100bc4cddeffe50f2d0f934972b1cd146c33d8608c9b7eed756db6704990db3667cc84e904678cb86c992b7e218e61a31f6767d0265beec8ed67275988fcd5cc3b8cc613a9c5989bc467a78f2bdf3ca45218dc8befa4e3747f5ccd7ea8d9c3"], 0x30}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x2) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r4, 0x0, r7, 0x0, 0xffffffff, 0x2) fallocate(r7, 0x2, 0x200000000000000, 0x7) splice(r0, 0x0, r3, 0x0, 0xffffffff, 0x2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r2, 0x4) getpeername$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) 01:30:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1a) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000140)=0x4) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r2) [ 1501.369164] input: syz1 as /devices/virtual/input/input240 [ 1501.436650] input: syz1 as /devices/virtual/input/input242 01:30:38 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1501.557257] input: syz1 as /devices/virtual/input/input244 01:30:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x111100) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) [ 1501.768549] input: syz1 as /devices/virtual/input/input245 [ 1501.781350] input: syz1 as /devices/virtual/input/input246 [ 1501.788331] input: syz1 as /devices/virtual/input/input247 01:30:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @rand_addr=0xf6ea}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @multicast2}, 0x297, 0x0, 0x0, 0x0, 0x7176, 0x0, 0x3000000000000, 0x6, 0x6}) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1501.828012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=626 sclass=netlink_tcpdiag_socket pig=3607 comm=syz-executor.4 [ 1501.845508] input: syz1 as /devices/virtual/input/input248 [ 1501.857996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=626 sclass=netlink_tcpdiag_socket pig=3607 comm=syz-executor.4 01:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) r2 = socket(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r6, 0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r6, 0x0, 0x618, 0x2, 0x80000000, 0xf4f}, 0x14) 01:30:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) 01:30:39 executing program 5: listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000180)={0x2b, 0x6, 0x0, {0x5, 0x0, 0x2, 0x0, ':&'}}, 0x2b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) 01:30:39 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4c4d82, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={0x8, 0x1, 0x10000, 0x3, 'syz0\x00', 0x5}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0x0, 0x3}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setns(r3, 0x4000000) ioctl$UI_DEV_DESTROY(r1, 0x5502) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fcntl$setpipe(r6, 0x407, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r7, r2) 01:30:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x4e25, @local}}, {{0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x16}}}}, 0x108) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r3}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@empty, @in=@multicast2, 0x4e21, 0x7f, 0x4e22, 0xb8c2, 0x2, 0x20, 0xe0, 0xfda993faa609ba3a, 0x0, r3}, {0x3, 0xfffffffffffffffc, 0x80000001, 0x8, 0xffffffffffffff93, 0x3, 0x8, 0x1f}, {0x15f, 0x7f, 0x5, 0x100000001}, 0x3ff, 0x6e6bb5, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d6, 0x2b}, 0xa4507877699f940e, @in=@multicast2, 0x3505, 0x3, 0x0, 0x1, 0x101, 0x3, 0x3}}, 0xe8) 01:30:39 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/130, 0x82}, {&(0x7f0000000200)=""/236, 0xec}], 0x2, &(0x7f0000000340)=""/116, 0x74}, 0x2143) r1 = socket(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x3, 0x6, [0x2, 0x4, 0x800, 0x21a0, 0x8, 0x6]}, &(0x7f0000000540)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r7, 0x2}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r5, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, 0x81, 0x101, 0x4, 0x948, 0x1}, &(0x7f00000004c0)=0x98) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 1502.065192] input: syz1 as /devices/virtual/input/input250 [ 1502.106138] input: syz1 as /devices/virtual/input/input251 01:30:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) 01:30:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x200}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x5c96, 0x883}, 0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1502.187738] sctp: [Deprecated]: syz-executor.4 (pid 3650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1502.187738] Use struct sctp_sack_info instead 01:30:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) dup3(r4, 0xffffffffffffffff, 0x40000) dup2(r3, r2) 01:30:39 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000480)={0x20000000, 0x7fda, 0x10}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\b\x00', 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2500) getsockname$llc(r5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r8, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r9, 0x0) r10 = memfd_create(&(0x7f00000004c0)='(wlan1eth1(\xba\\\x00', 0x1) r11 = open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x100) ioctl$BLKROGET(r11, 0x125e, &(0x7f00000001c0)) fstat(r10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x2840080, &(0x7f0000000200)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3ffc000000000}}, {@default_permissions='default_permissions'}], [{@euid_lt={'euid<', r12}}, {@smackfshat={'smackfshat', 0x3d, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}}, {@subj_user={'subj_user', 0x3d, ':self\x0f\xbdwlan0securityvboxnet1vmnet0/-md5sum\''}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/input/event#\x00'}}]}}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r13 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) dup2(r4, r3) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000500)={&(0x7f0000ffd000/0x2000)=nil, 0x4, 0x2, 0x1, &(0x7f0000ff9000/0x4000)=nil, 0x9}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r14, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BINDER_THREAD_EXIT(r14, 0x40046208, 0x0) [ 1502.550123] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.555290] protocol 88fb is buggy, dev hsr_slave_1 [ 1502.589570] input: syz1 as /devices/virtual/input/input253 [ 1502.666658] input: syz1 as /devices/virtual/input/input254 [ 1502.702388] input: syz1 as /devices/virtual/input/input255 01:30:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = accept4$x25(r3, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x180800) write(r4, &(0x7f0000000380)="26c9bd6c05d62f39b20dcebcfeb5f12c28a3be24dd987e82c463f3e13b615b5372919e5fd764018679cb8f0f92a212f778c27cab785ef2255ede774474e53ab2b6502aa9f8a01dae8d2c0885ab0009f2860fe0f30e5f00edf5bbc976f0dc1b1d96d0b9e045d35dacf29f0c70d48c7742395a11ead23861d2cd6fd39dc7d4e55f68a040428ec8df12ee5eae04893e4ebcf4d8f7d56c336fa0b784a726794a5de2caced2", 0xa3) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8082) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r7) 01:30:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x401, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r9 = msgget(0x1, 0x100) msgrcv(r9, &(0x7f0000000b40)={0x0, ""/4096}, 0x1008, 0x849fb051517ae503, 0x1000) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r8}, 0x10) [ 1502.868208] input: syz1 as /devices/virtual/input/input256 01:30:39 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="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"], 0x3}}, 0x0) [ 1502.921813] input: syz1 as /devices/virtual/input/input257 01:30:40 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1503.003295] FAULT_INJECTION: forcing a failure. [ 1503.003295] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.015196] CPU: 1 PID: 3695 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1503.023122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.023128] Call Trace: [ 1503.023151] dump_stack+0x142/0x197 [ 1503.038749] should_fail.cold+0x10f/0x159 [ 1503.038765] should_failslab+0xdb/0x130 [ 1503.038777] kmem_cache_alloc_node+0x287/0x780 [ 1503.047007] __alloc_skb+0x9c/0x500 [ 1503.047018] ? skb_scrub_packet+0x4b0/0x4b0 [ 1503.047031] ? netlink_autobind.isra.0+0x1c9/0x290 [ 1503.047042] netlink_sendmsg+0x874/0xc60 [ 1503.047055] ? netlink_unicast+0x640/0x640 [ 1503.055268] ? security_socket_sendmsg+0x89/0xb0 [ 1503.064494] ? netlink_unicast+0x640/0x640 [ 1503.064507] sock_sendmsg+0xce/0x110 [ 1503.064518] ___sys_sendmsg+0x70a/0x840 [ 1503.064530] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1503.064541] ? __fget+0x210/0x370 [ 1503.064556] ? find_held_lock+0x35/0x130 01:30:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x4, {{0x2, 0x4e20, @empty}}, {{0x2, 0x0, @local}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000000)={0x40, 0x50}) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000040)="9f21f87336a2c38babde4cd27cdbf917b4d6d2fe544e", 0x16) [ 1503.072833] ? __fget+0x210/0x370 [ 1503.072854] ? lock_downgrade+0x740/0x740 [ 1503.072875] ? __fget+0x237/0x370 [ 1503.081949] ? __fget_light+0x172/0x1f0 [ 1503.081961] ? __fdget+0x1b/0x20 [ 1503.081972] ? sockfd_lookup_light+0xb4/0x160 [ 1503.081983] __sys_sendmsg+0xb9/0x140 [ 1503.081991] ? SyS_shutdown+0x170/0x170 [ 1503.082012] SyS_sendmsg+0x2d/0x50 [ 1503.082019] ? __sys_sendmsg+0x140/0x140 [ 1503.082031] do_syscall_64+0x1e8/0x640 [ 1503.089694] ? trace_hardirqs_off_thunk+0x1a/0x1c 01:30:40 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) [ 1503.089714] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1503.089724] RIP: 0033:0x45a639 [ 1503.089729] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1503.097922] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1503.097928] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1503.097934] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1503.097940] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1503.097946] R13: 00000000004c8d02 R14: 00000000004df538 R15: 0000000000000004 [ 1503.229071] FAULT_INJECTION: forcing a failure. [ 1503.229071] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.249075] CPU: 1 PID: 3705 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1503.256931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.266323] Call Trace: [ 1503.268915] dump_stack+0x142/0x197 [ 1503.272555] should_fail.cold+0x10f/0x159 [ 1503.272573] should_failslab+0xdb/0x130 [ 1503.272584] kmem_cache_alloc_node_trace+0x280/0x770 [ 1503.272599] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1503.280708] __kmalloc_node_track_caller+0x3d/0x80 [ 1503.280724] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1503.280736] __alloc_skb+0xcf/0x500 [ 1503.280745] ? skb_scrub_packet+0x4b0/0x4b0 [ 1503.280758] ? netlink_autobind.isra.0+0x1c9/0x290 [ 1503.280768] netlink_sendmsg+0x874/0xc60 [ 1503.280781] ? netlink_unicast+0x640/0x640 [ 1503.280796] ? security_socket_sendmsg+0x89/0xb0 01:30:40 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1503.280803] ? netlink_unicast+0x640/0x640 [ 1503.280812] sock_sendmsg+0xce/0x110 [ 1503.280821] ___sys_sendmsg+0x70a/0x840 [ 1503.280832] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1503.280843] ? __fget+0x210/0x370 [ 1503.280861] ? find_held_lock+0x35/0x130 [ 1503.280869] ? __fget+0x210/0x370 [ 1503.280884] ? lock_downgrade+0x740/0x740 [ 1503.280894] ? __fget+0x237/0x370 [ 1503.280906] ? __fget_light+0x172/0x1f0 [ 1503.280915] ? __fdget+0x1b/0x20 [ 1503.280922] ? sockfd_lookup_light+0xb4/0x160 [ 1503.280932] __sys_sendmsg+0xb9/0x140 [ 1503.280941] ? SyS_shutdown+0x170/0x170 [ 1503.280961] SyS_sendmsg+0x2d/0x50 [ 1503.280968] ? __sys_sendmsg+0x140/0x140 [ 1503.280978] do_syscall_64+0x1e8/0x640 [ 1503.280986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1503.281002] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1503.281012] RIP: 0033:0x45a639 [ 1503.291536] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1503.291548] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1503.291554] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1503.291560] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1503.291566] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1503.291571] R13: 00000000004c8d02 R14: 00000000004df538 R15: 0000000000000004 [ 1503.333520] FAULT_INJECTION: forcing a failure. [ 1503.333520] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.344576] CPU: 0 PID: 3709 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1503.422181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.436715] Call Trace: [ 1503.436733] dump_stack+0x142/0x197 [ 1503.436751] should_fail.cold+0x10f/0x159 [ 1503.436767] should_failslab+0xdb/0x130 [ 1503.436775] kmem_cache_alloc_trace+0x2e9/0x790 [ 1503.436790] ? security_capable+0x8e/0xc0 [ 1503.451422] smc_pnet_add+0x75/0xc60 [ 1503.451437] ? nla_parse+0x186/0x240 [ 1503.451454] genl_family_rcv_msg+0x614/0xc30 [ 1503.451469] ? genl_unregister_family+0x6a0/0x6a0 [ 1503.451497] genl_rcv_msg+0xb4/0x150 [ 1503.479826] netlink_rcv_skb+0x14f/0x3c0 01:30:40 executing program 4 (fault-call:1 fault-nth:3): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1503.479840] ? genl_family_rcv_msg+0xc30/0xc30 [ 1503.479851] ? netlink_ack+0x9a0/0x9a0 [ 1503.479860] ? genl_rcv+0x1a/0x40 [ 1503.479876] genl_rcv+0x29/0x40 [ 1503.479887] netlink_unicast+0x45d/0x640 [ 1503.487287] input: syz1 as /devices/virtual/input/input258 [ 1503.490233] ? netlink_attachskb+0x6a0/0x6a0 [ 1503.490248] ? security_netlink_send+0x81/0xb0 [ 1503.490261] netlink_sendmsg+0x7c4/0xc60 [ 1503.490275] ? netlink_unicast+0x640/0x640 [ 1503.490287] ? security_socket_sendmsg+0x89/0xb0 [ 1503.490296] ? netlink_unicast+0x640/0x640 [ 1503.490306] sock_sendmsg+0xce/0x110 [ 1503.490316] ___sys_sendmsg+0x70a/0x840 [ 1503.490325] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1503.490337] ? __fget+0x210/0x370 [ 1503.490348] ? find_held_lock+0x35/0x130 [ 1503.490356] ? __fget+0x210/0x370 [ 1503.490370] ? lock_downgrade+0x740/0x740 [ 1503.498998] ? __fget+0x237/0x370 [ 1503.499014] ? __fget_light+0x172/0x1f0 [ 1503.499025] ? __fdget+0x1b/0x20 [ 1503.499036] ? sockfd_lookup_light+0xb4/0x160 [ 1503.499047] __sys_sendmsg+0xb9/0x140 [ 1503.499056] ? SyS_shutdown+0x170/0x170 01:30:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x4, 0x50000) set_tid_address(&(0x7f0000000080)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1503.519826] SyS_sendmsg+0x2d/0x50 [ 1503.519837] ? __sys_sendmsg+0x140/0x140 [ 1503.519850] do_syscall_64+0x1e8/0x640 [ 1503.519858] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1503.519874] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1503.532193] RIP: 0033:0x45a639 [ 1503.532199] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1503.532211] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1503.532217] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1503.532223] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1503.532229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1503.532235] R13: 00000000004c8d02 R14: 00000000004df538 R15: 0000000000000004 [ 1503.657971] FAULT_INJECTION: forcing a failure. [ 1503.657971] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.755703] CPU: 0 PID: 3718 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1503.763547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.763553] Call Trace: [ 1503.763570] dump_stack+0x142/0x197 [ 1503.763590] should_fail.cold+0x10f/0x159 [ 1503.763606] should_failslab+0xdb/0x130 [ 1503.775533] kmem_cache_alloc_node+0x287/0x780 [ 1503.775554] __alloc_skb+0x9c/0x500 [ 1503.775565] ? skb_scrub_packet+0x4b0/0x4b0 [ 1503.775577] ? __mutex_unlock_slowpath+0x71/0x800 [ 1503.775591] netlink_ack+0x21c/0x9a0 [ 1503.783350] ? netlink_sendmsg+0xc60/0xc60 [ 1503.783360] ? mutex_unlock+0xd/0x10 [ 1503.783373] ? genl_rcv_msg+0xe5/0x150 [ 1503.783383] netlink_rcv_skb+0x2fc/0x3c0 [ 1503.783394] ? genl_family_rcv_msg+0xc30/0xc30 [ 1503.783405] ? netlink_ack+0x9a0/0x9a0 [ 1503.783415] ? genl_rcv+0x1a/0x40 [ 1503.783432] genl_rcv+0x29/0x40 [ 1503.783442] netlink_unicast+0x45d/0x640 [ 1503.783454] ? netlink_attachskb+0x6a0/0x6a0 [ 1503.783465] ? security_netlink_send+0x81/0xb0 [ 1503.783475] netlink_sendmsg+0x7c4/0xc60 [ 1503.792011] ? netlink_unicast+0x640/0x640 [ 1503.792026] ? security_socket_sendmsg+0x89/0xb0 [ 1503.792037] ? netlink_unicast+0x640/0x640 [ 1503.792048] sock_sendmsg+0xce/0x110 [ 1503.792059] ___sys_sendmsg+0x70a/0x840 [ 1503.792068] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1503.792077] ? __fget+0x210/0x370 [ 1503.792088] ? find_held_lock+0x35/0x130 [ 1503.792095] ? __fget+0x210/0x370 [ 1503.792108] ? lock_downgrade+0x740/0x740 [ 1503.792120] ? __fget+0x237/0x370 [ 1503.792133] ? __fget_light+0x172/0x1f0 [ 1503.800055] ? __fdget+0x1b/0x20 [ 1503.800066] ? sockfd_lookup_light+0xb4/0x160 [ 1503.800077] __sys_sendmsg+0xb9/0x140 [ 1503.800087] ? SyS_shutdown+0x170/0x170 [ 1503.800111] SyS_sendmsg+0x2d/0x50 [ 1503.800118] ? __sys_sendmsg+0x140/0x140 [ 1503.800129] do_syscall_64+0x1e8/0x640 [ 1503.800136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1503.800151] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1503.800160] RIP: 0033:0x45a639 [ 1503.808682] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:30:40 executing program 4 (fault-call:1 fault-nth:4): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1503.808693] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1503.808699] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1503.808705] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1503.808710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1503.808716] R13: 00000000004c8d02 R14: 00000000004df538 R15: 0000000000000004 [ 1503.968314] FAULT_INJECTION: forcing a failure. [ 1503.968314] name failslab, interval 1, probability 0, space 0, times 0 01:30:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x22040) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20100, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x93, 0x3}, {0xc5, 0x7f}, 0x8000, 0x5e78839e4b633eac, 0x65}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) 01:30:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x5}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 1504.003940] input: syz1 as /devices/virtual/input/input259 [ 1504.037478] CPU: 0 PID: 3728 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 1504.045362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.054723] Call Trace: [ 1504.057328] dump_stack+0x142/0x197 [ 1504.060975] should_fail.cold+0x10f/0x159 [ 1504.065239] should_failslab+0xdb/0x130 [ 1504.069219] kmem_cache_alloc_node_trace+0x280/0x770 [ 1504.074321] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1504.079881] __kmalloc_node_track_caller+0x3d/0x80 [ 1504.085689] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1504.085700] __alloc_skb+0xcf/0x500 [ 1504.085712] ? skb_scrub_packet+0x4b0/0x4b0 [ 1504.098316] ? __mutex_unlock_slowpath+0x71/0x800 [ 1504.103159] netlink_ack+0x21c/0x9a0 [ 1504.103171] ? netlink_sendmsg+0xc60/0xc60 [ 1504.103179] ? mutex_unlock+0xd/0x10 [ 1504.103186] ? genl_rcv_msg+0xe5/0x150 [ 1504.103197] netlink_rcv_skb+0x2fc/0x3c0 [ 1504.103206] ? genl_family_rcv_msg+0xc30/0xc30 [ 1504.103216] ? netlink_ack+0x9a0/0x9a0 [ 1504.103223] ? genl_rcv+0x1a/0x40 [ 1504.103238] genl_rcv+0x29/0x40 [ 1504.103246] netlink_unicast+0x45d/0x640 [ 1504.103258] ? netlink_attachskb+0x6a0/0x6a0 [ 1504.103272] ? security_netlink_send+0x81/0xb0 [ 1504.111200] netlink_sendmsg+0x7c4/0xc60 [ 1504.111213] ? netlink_unicast+0x640/0x640 [ 1504.111227] ? security_socket_sendmsg+0x89/0xb0 [ 1504.111235] ? netlink_unicast+0x640/0x640 [ 1504.111248] sock_sendmsg+0xce/0x110 [ 1504.111258] ___sys_sendmsg+0x70a/0x840 [ 1504.111268] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1504.111281] ? __fget+0x210/0x370 [ 1504.127522] ? find_held_lock+0x35/0x130 [ 1504.127534] ? __fget+0x210/0x370 [ 1504.127548] ? lock_downgrade+0x740/0x740 [ 1504.139363] input: syz1 as /devices/virtual/input/input261 [ 1504.142191] ? __fget+0x237/0x370 [ 1504.142205] ? __fget_light+0x172/0x1f0 [ 1504.142216] ? __fdget+0x1b/0x20 [ 1504.142226] ? sockfd_lookup_light+0xb4/0x160 [ 1504.142237] __sys_sendmsg+0xb9/0x140 [ 1504.142245] ? SyS_shutdown+0x170/0x170 [ 1504.142265] SyS_sendmsg+0x2d/0x50 [ 1504.228466] ? __sys_sendmsg+0x140/0x140 [ 1504.232517] do_syscall_64+0x1e8/0x640 [ 1504.236388] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1504.241217] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1504.246395] RIP: 0033:0x45a639 [ 1504.249563] RSP: 002b:00007fe950d3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1504.257252] RAX: ffffffffffffffda RBX: 00007fe950d3cc90 RCX: 000000000045a639 [ 1504.264515] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1504.271806] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1504.279058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe950d3d6d4 [ 1504.286317] R13: 00000000004c8d02 R14: 00000000004df538 R15: 0000000000000004 01:30:41 executing program 2 (fault-call:18 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000000)={@broadcast, @initdev, @initdev}, &(0x7f0000000040)=0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}}, 0x108) [ 1504.310840] input: syz1 as /devices/virtual/input/input262 01:30:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='\x00\x00\x00\x04\x00', 0x2, 0x0) dup2(r2, r1) 01:30:41 executing program 4 (fault-call:1 fault-nth:5): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) 01:30:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000140)={0x60, 0xfffffffffffffffe, 0x1, {{0x800, 0x7ff, 0x80000000, 0x3, 0x8, 0x3, 0x10000}}}, 0x60) dup2(r2, r1) [ 1504.384708] input: syz1 as /devices/virtual/input/input263 01:30:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0xda43, 0x0, 0x8000, 0x7, 0xffffffff, 0x3f}) 01:30:41 executing program 5: ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x4fc4e000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x13, &(0x7f0000000640)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x4e22, @empty}}}, 0x108) 01:30:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x10e, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000002c0)=""/199) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2e}], 0x1}, 0x40080) [ 1504.441678] input: syz1 as /devices/virtual/input/input264 [ 1504.570451] FAULT_INJECTION: forcing a failure. [ 1504.570451] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.581851] CPU: 0 PID: 3769 Comm: syz-executor.2 Not tainted 4.14.156-syzkaller #0 [ 1504.589672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.599029] Call Trace: [ 1504.599050] dump_stack+0x142/0x197 [ 1504.599067] should_fail.cold+0x10f/0x159 [ 1504.609419] should_failslab+0xdb/0x130 [ 1504.613397] kmem_cache_alloc_trace+0x2e9/0x790 [ 1504.613412] ? file_has_perm+0x163/0x2c0 [ 1504.622122] alloc_pipe_info+0xb0/0x380 [ 1504.622135] splice_direct_to_actor+0x5d2/0x7b0 [ 1504.622148] ? selinux_file_permission+0x85/0x480 [ 1504.622156] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1504.622168] ? security_file_permission+0x89/0x1f0 [ 1504.622176] ? do_splice_to+0x170/0x170 [ 1504.622185] ? rw_verify_area+0xea/0x2b0 [ 1504.622195] do_splice_direct+0x18d/0x230 [ 1504.622206] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1504.630125] protocol 88fb is buggy, dev hsr_slave_0 01:30:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) fgetxattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000100)=""/132, 0x84) [ 1504.631056] ? rw_verify_area+0xea/0x2b0 [ 1504.631070] do_sendfile+0x4db/0xbd0 [ 1504.631090] ? do_compat_pwritev64+0x140/0x140 [ 1504.631100] ? fput+0xd4/0x150 [ 1504.631109] SyS_sendfile64+0x102/0x110 [ 1504.635980] protocol 88fb is buggy, dev hsr_slave_1 [ 1504.640765] ? SyS_sendfile+0x130/0x130 [ 1504.640775] ? do_syscall_64+0x53/0x640 [ 1504.640783] ? SyS_sendfile+0x130/0x130 [ 1504.640793] do_syscall_64+0x1e8/0x640 [ 1504.640801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1504.640824] entry_SYSCALL_64_after_hwframe+0x42/0xb7 01:30:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b07000000000000000800140e00160000000001000000000300", 0x17d}], 0x1, 0x0, 0xfffffffffffffff6}, 0x0) [ 1504.675482] RIP: 0033:0x45a639 [ 1504.687188] RSP: 002b:00007f27568abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1504.687200] RAX: ffffffffffffffda RBX: 00007f27568abc90 RCX: 000000000045a639 [ 1504.687206] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 1504.687212] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1504.687218] R10: 0050000000000443 R11: 0000000000000246 R12: 00007f27568ac6d4 [ 1504.687223] R13: 00000000004c85aa R14: 00000000004dec38 R15: 000000000000000b [ 1504.773260] input: syz1 as /devices/virtual/input/input265 01:30:41 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80002, 0x0) pipe(&(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xffffffffffffff90) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r3}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0xffffffff, 0x2) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x28000005}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r11, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r12, 0x89e1, &(0x7f00000001c0)={0x3, @null, r13}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, r15) fstat(r14, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r16, 0x0) r17 = syz_open_dev$dspn(&(0x7f00000008c0)='/dev/dsp#\x00', 0x1, 0x64000) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0x172) r19 = getgid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000380)={0x2d8, 0xffffffffffffffda, 0x4, [{{0x2, 0x3, 0x5, 0x9, 0x5d, 0x2a, {0x1, 0x7fffffff, 0x9, 0x5, 0xbed, 0x3f, 0x100, 0x8, 0x23, 0x8, 0x2, r3, r4, 0x6, 0x1}}, {0x1, 0x0, 0x29, 0x1, '#%systemvboxnet0cpusetcgroup\'systemcpuset'}}, {{0x5, 0x0, 0xfffffffffffffffd, 0x8f8, 0x3a3d, 0x1, {0x6, 0x100000000000000, 0x0, 0x1, 0x5, 0x9, 0x7fff000, 0x3f, 0x5, 0x4, 0xfffffff7, r6, r7, 0xf51, 0x401}}, {0x6, 0x8a2a, 0x9, 0x2, 'eth1wlan0'}}, {{0x4, 0x2, 0x3, 0x8, 0xa968, 0xd5, {0x6, 0x6, 0x40, 0x8, 0x3ff, 0x3, 0x4c7, 0x40, 0x5, 0x6, 0x7fffffff, r13, r16, 0x401, 0x10001}}, {0x5, 0x1, 0x17, 0x7f, 'wlan1mime_typevmnet0+\\{'}}, {{0x0, 0x1, 0x6, 0x100000000, 0x2, 0x63, {0x5, 0x2, 0xde1, 0x3f, 0xc03, 0x7, 0xff, 0xcd1, 0x7, 0x3, 0x7, r18, r19, 0x1, 0x80000000}}, {0x1, 0x7f, 0xc, 0x3, '[em1ppp1eth0'}}]}, 0x2d8) socket$inet_udp(0x2, 0x2, 0x0) 01:30:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa144020}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x1400, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xffff2b50, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c800}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r1) [ 1504.990585] input: syz1 as /devices/virtual/input/input269 [ 1505.073819] input: syz1 as /devices/virtual/input/input270 01:30:42 executing program 2 (fault-call:18 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:42 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x1082, 0x0) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/3, 0x3) r1 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865140b0001000c410200000800140e00060000000001000000000300", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) bind(r3, &(0x7f00000001c0)=@ipx={0x4, 0x1, 0x3, "b42d0289c2f1", 0x1f}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) 01:30:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x2) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000140)=0x1c) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r1) 01:30:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PORT={0x8}]}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r6, 0x6e97b98a8a07992, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10800}, 0xc08a097) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$uinput_user_dev(r3, &(0x7f0000000140)={'syz1\x00', {0x3, 0x0, 0xfffa, 0x5}, 0x21, [0x1000, 0x400, 0x101, 0xb5, 0x2, 0xe4a1, 0x5, 0x1, 0x6c0, 0x8, 0x0, 0x5, 0x89, 0x7, 0x8001, 0xffff, 0x80000001, 0x6c8, 0x7, 0x7f, 0x68, 0x3ff, 0x6, 0x0, 0x9, 0x272, 0x1, 0xc334, 0x6, 0x1000, 0x9, 0x1, 0x1, 0x1, 0xeb9, 0xffe0000, 0x4, 0x2, 0x1, 0x7fffffff, 0x3, 0xa9a, 0x2, 0xfff, 0x3, 0xffffffff, 0x8c, 0x85, 0xd2, 0xfffffff7, 0x5, 0x3, 0x3, 0x4, 0xfff, 0x3f, 0x1, 0x6c16, 0x400, 0x10000, 0x62d6, 0x0, 0x800, 0x600000], [0x1, 0x2, 0x80000001, 0x7ff, 0x5, 0x7, 0x3d3c, 0x7fff, 0x8001, 0xb257, 0x3, 0x9, 0x3, 0x7ff, 0x1, 0x9, 0x101, 0x9, 0x8, 0x7, 0xc96, 0x1, 0x7fffffff, 0x9, 0x8, 0x1, 0x20, 0x8ad3, 0xca1, 0x0, 0x7, 0x9, 0x69, 0xc0cd, 0x1fe0000, 0x9, 0x6, 0x7fffffff, 0xa681, 0x8, 0x4, 0x100, 0xff, 0x15, 0x2, 0xfde, 0x5, 0xb3ef, 0xa0000000, 0xc6, 0x3, 0x4, 0x80000001, 0xf8db, 0x100, 0x4, 0x6, 0x10, 0xcd09, 0x2, 0x728, 0x3f6, 0x1c8, 0x7], [0xcd6, 0x5, 0x9, 0x200, 0x38f, 0x9, 0x5, 0x5057, 0xffff, 0x7, 0x1, 0x6, 0x7e2a3798, 0x0, 0x3, 0xd64, 0x6, 0x3ff, 0x6, 0xa798, 0x5, 0x1, 0x1, 0x10000, 0x9, 0x5, 0x1ff, 0x8000, 0x1, 0x80000000, 0x1f00000, 0x0, 0xfffffff7, 0x200, 0x6, 0x8, 0xf4, 0x80000000, 0x1ff, 0x5, 0x4, 0x10001, 0x0, 0x400, 0x246, 0x6, 0x8, 0xfffff1f4, 0x101, 0x6e, 0x9, 0x1000, 0x16f5, 0x2, 0x5, 0x3, 0x3, 0x1, 0x3, 0x1ff, 0x5, 0x10000, 0x3378, 0x4682], [0x5, 0x7, 0x6, 0x5, 0x3, 0x5, 0x7, 0x4, 0x2, 0x80, 0x1, 0x8, 0x3, 0x7ff, 0x80000001, 0x813d, 0x1000000, 0xfffffeff, 0x2, 0x0, 0x100, 0x1, 0x9, 0x80000000, 0x7f, 0x8000, 0x7f, 0x1ff, 0xffff, 0x1, 0x2, 0x7, 0x4, 0x40, 0xfffffffd, 0x7af0a4b7, 0x7fffffff, 0xfffff4d3, 0x4, 0xfffffe01, 0x7, 0x1, 0x80, 0x1, 0x5, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x835, 0x6, 0x4e, 0x1000, 0x8001, 0x0, 0x20, 0x9, 0x2e8214b2, 0x3ff, 0x3, 0x0, 0x0, 0x1]}, 0x45c) dup2(r1, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f00000006c0)=[{0x1, 0x0, 0x7, 0x1}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000780)={0x0, 0x100000, 0xffffffffffffffff}) splice(r2, &(0x7f0000000740)=0x926, r8, &(0x7f00000007c0)=0x6, 0x4, 0x2) 01:30:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe2(&(0x7f0000000080), 0x2800) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x400000) r4 = accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x800) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r2, r1) [ 1505.256844] input: syz1 as /devices/virtual/input/input271 [ 1505.265959] input: syz1 as /devices/virtual/input/input273 [ 1505.275834] input: syz1 as /devices/virtual/input/input272 [ 1505.359819] input: syz1 as /devices/virtual/input/input274 [ 1505.434924] FAULT_INJECTION: forcing a failure. [ 1505.434924] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.446537] CPU: 1 PID: 3833 Comm: syz-executor.2 Not tainted 4.14.156-syzkaller #0 [ 1505.454350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.463726] Call Trace: [ 1505.463746] dump_stack+0x142/0x197 [ 1505.463765] should_fail.cold+0x10f/0x159 [ 1505.463781] should_failslab+0xdb/0x130 [ 1505.478127] __kmalloc+0x2f0/0x7a0 [ 1505.481673] ? kmem_cache_alloc_trace+0x623/0x790 [ 1505.486518] ? retint_kernel+0x2d/0x2d [ 1505.490420] ? alloc_pipe_info+0x15c/0x380 [ 1505.494653] alloc_pipe_info+0x15c/0x380 [ 1505.494667] splice_direct_to_actor+0x5d2/0x7b0 [ 1505.494683] ? selinux_file_permission+0x85/0x480 [ 1505.494691] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1505.494705] ? security_file_permission+0x89/0x1f0 [ 1505.494712] ? do_splice_to+0x170/0x170 [ 1505.494724] ? rw_verify_area+0xea/0x2b0 [ 1505.503442] do_splice_direct+0x18d/0x230 [ 1505.530183] ? splice_direct_to_actor+0x7b0/0x7b0 01:30:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000240)={0x3, r1, 0x1}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x2680) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_DEV_DESTROY(r4, 0x5502) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x100000001}, 0x28, 0x1) dup2(r8, r3) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x400400, 0x0) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/21, 0x15}, {&(0x7f0000000600)=""/10, 0xa}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000640)=""/115, 0x73}], 0x8}, 0x695}, {{&(0x7f0000000740)=@xdp, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/115, 0x73}], 0x1, &(0x7f0000000880)=""/192, 0xc0}, 0x7}, {{&(0x7f0000000940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/232, 0xe8}], 0x1, &(0x7f0000001b40)=""/213, 0xd5}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001c40)=""/30, 0x1e}], 0x1, &(0x7f0000001cc0)=""/13, 0xd}, 0x5}], 0x4, 0x40002000, &(0x7f0000001e00)={0x0, 0x1c9c380}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0xffffffff, 0x2) getsockname$packet(r14, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001e80)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r18 = socket$inet_udp(0x2, 0x2, 0x0) close(r18) splice(r17, 0x0, r18, 0x0, 0xffffffff, 0x2) getpeername$packet(r17, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001f40)=0x14) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$packet(0x11, 0x3, 0x300) r22 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r21, &(0x7f0000000100)={0x11, 0x0, r23, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r24}}, 0x20}}, 0x0) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket$packet(0x11, 0x3, 0x300) r27 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r27, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r26, &(0x7f0000000100)={0x11, 0x0, r28, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r25, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r29}}, 0x20}}, 0x0) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket$packet(0x11, 0x3, 0x300) r32 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r32, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r31, &(0x7f0000000100)={0x11, 0x0, r33, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x29e) sendmsg$nl_route(r30, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r34}}, 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r36 = socket$inet_udp(0x2, 0x2, 0x0) close(r36) splice(r35, 0x0, r36, 0x0, 0xffffffff, 0x2) getpeername$packet(r35, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001fc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002740)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000002840)=0xe8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r40 = socket$inet_udp(0x2, 0x2, 0x0) close(r40) splice(r39, 0x0, r40, 0x0, 0xffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r40, 0x8933, &(0x7f00000028c0)={'vxcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000003f40)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000004040)=0xe8) r43 = socket$nl_route(0x10, 0x3, 0x0) r44 = socket$packet(0x11, 0x3, 0x300) r45 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r45, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r44, &(0x7f0000000100)={0x11, 0x0, r46, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r44, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r43, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r47}}, 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r49 = socket$inet_udp(0x2, 0x2, 0x0) close(r49) splice(r48, 0x0, r49, 0x0, 0xffffffff, 0x2) r50 = socket$nl_route(0x10, 0x3, 0x0) r51 = socket$packet(0x11, 0x3, 0x300) r52 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r52, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r51, &(0x7f0000000100)={0x11, 0x0, r53, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r51, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r50, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r54}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r48, 0x8933, &(0x7f0000004080)={'vxcan1\x00', r54}) r56 = socket$nl_route(0x10, 0x3, 0x0) r57 = socket$packet(0x11, 0x3, 0x300) r58 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r58, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x10, r59, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r56, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r60}}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000004500)={&(0x7f00000002c0), 0xc, &(0x7f00000044c0)={&(0x7f00000040c0)={0x3d4, r12, 0xe29, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r13}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r19}, {0xac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r24}, {0x1f8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r34}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r37}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r38}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3b8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r41}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r42}}}]}}, {{0x8, 0x1, r47}, {0xbc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6a780ef7}}, {0x8, 0x6, r55}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r60}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x500}, 0x80) [ 1505.535037] ? rw_verify_area+0xea/0x2b0 [ 1505.539143] do_sendfile+0x4db/0xbd0 [ 1505.542875] ? do_compat_pwritev64+0x140/0x140 [ 1505.547464] ? pci_mmcfg_check_reserved+0x150/0x150 [ 1505.552482] ? fput+0xd4/0x150 [ 1505.555682] SyS_sendfile64+0x102/0x110 [ 1505.559661] ? SyS_sendfile+0x130/0x130 [ 1505.563634] ? do_syscall_64+0x53/0x640 [ 1505.567695] ? SyS_sendfile+0x130/0x130 [ 1505.571679] do_syscall_64+0x1e8/0x640 [ 1505.575572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1505.580428] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1505.585619] RIP: 0033:0x45a639 [ 1505.588811] RSP: 002b:00007f27568abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1505.596518] RAX: ffffffffffffffda RBX: 00007f27568abc90 RCX: 000000000045a639 [ 1505.596524] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 1505.596530] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1505.596536] R10: 0050000000000443 R11: 0000000000000246 R12: 00007f27568ac6d4 [ 1505.596542] R13: 00000000004c85aa R14: 00000000004dec38 R15: 000000000000000b 01:30:42 executing program 3: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x1b, 0x36, 0x8, 0x10, 0xb, 0x4, 0x0, 0x2}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) getpid() ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) [ 1505.668106] input: syz1 as /devices/virtual/input/input276 01:30:42 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00', {0x1ff, 0x8, 0x81, 0x3f}, 0x48, [0x3, 0x9, 0x0, 0x80, 0x5, 0x6, 0x7, 0x3, 0x7, 0x8, 0x9, 0x5, 0x11a, 0x8, 0x0, 0x8001, 0x8, 0x5, 0x80000001, 0x7, 0xda, 0x20, 0x16, 0x7, 0x9, 0x4, 0x0, 0x7, 0x8, 0x53, 0x40, 0x60, 0xd8a, 0x1, 0x1f, 0x4, 0x2, 0x8, 0xcb43, 0x3f, 0x4, 0xffff8000, 0x4, 0x5, 0x6, 0x4, 0x7, 0x8, 0x8000, 0x1, 0xfff, 0x2, 0x8, 0x8001, 0x8, 0x80000001, 0x7f, 0x6, 0x1, 0x4, 0x8, 0x9, 0xffffff2c, 0xed], [0x401, 0x8, 0xe2, 0x5fc1, 0xffff, 0x8675, 0x3, 0x6, 0x2, 0x4, 0x8000, 0x20, 0x100, 0xd3ec, 0x8822, 0x5, 0x1000, 0x7, 0xc735, 0x33b4ee86, 0xf4, 0x81, 0x10000, 0x8761, 0x9, 0x1d0, 0x80000001, 0x1000, 0xff, 0x5, 0x3, 0x8, 0xcd, 0xfffffff8, 0x3ff, 0xffffffa2, 0x20, 0x8, 0x6, 0x200, 0x9, 0x8, 0x5, 0x4, 0xfff, 0x5, 0x7fffffff, 0x4, 0x3, 0x8000, 0xfffffffa, 0x0, 0x1, 0x4, 0x4, 0x2, 0xfffffffd, 0x40, 0xffffffff, 0x1000, 0xab7, 0x1, 0x86, 0x6], [0x8, 0xf55, 0x5, 0x1000, 0x8000, 0x6, 0x4, 0x6, 0x337c, 0x4, 0x401, 0x1000, 0x3, 0x2, 0x6, 0x1, 0xb7f, 0x5, 0xff, 0x654, 0x85, 0x200, 0x3, 0x3, 0x1, 0x2, 0x9, 0x2, 0x5, 0x4, 0x7ff, 0x8, 0x5, 0x0, 0x0, 0x1, 0x9, 0x2, 0x20, 0x7, 0x101, 0x7, 0x7, 0x9, 0x80000000, 0x4, 0x3, 0xf6, 0x0, 0x5, 0x9, 0x65c, 0x1, 0x5, 0x2, 0x400, 0x5, 0x3, 0x7fff, 0x7, 0x5, 0x200, 0xf8, 0xa000], [0x5b2b, 0xed6a, 0x24, 0x3, 0x3, 0xfffffff8, 0x8000, 0x5, 0x8, 0x0, 0x6, 0x7, 0xffffffff, 0xfff, 0x1, 0xffff, 0x8001, 0x1, 0x6c7, 0x6, 0x401, 0x56f, 0x6, 0x0, 0xcab4, 0x80000000, 0x8001, 0x77b4df7e, 0x5, 0x3f, 0x8, 0x0, 0x8000, 0xfffffffe, 0x9, 0x81, 0x81, 0x2000, 0x6, 0x81, 0x1, 0x165, 0x7f, 0x8000, 0x9, 0x800, 0x43d, 0x4, 0x101, 0x0, 0x0, 0x8, 0x7, 0xffffffff, 0x3, 0x0, 0x1d, 0x400, 0x2, 0x5d2, 0x534c, 0x2, 0x3, 0x32000000]}, 0x45c) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xc102, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x13, &(0x7f0000000040)={0x1000, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e24, @empty}}}, 0x108) [ 1505.788976] input: syz1 as /devices/virtual/input/input277 01:30:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x102, {{0x2, 0x0, @rand_addr=0x8001}}, {{0x2, 0x4e20, @empty}}}, 0x108) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x48080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000440)={0x2, 0x1c, 0x11}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r5, 0x0, r7, 0x0, 0xffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$binfmt_misc(r2, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES32, @ANYRES16=r3, @ANYPTR64, @ANYRESDEC, @ANYRES16=r5, @ANYRESOCT, @ANYRES32=r8], @ANYRES32=r2, @ANYRES16=r1, @ANYRESOCT=r9], @ANYBLOB="c8d1cec28b66aad0ab6e1d51775b723a6c496c2dd1cb8c3fdba7acaff0a81e34856d9d27ac064021b331c3c3b003a8993887ca09a3dd892aeb20fbdd32b7838e32cd0b208277016a7841c630f8d8252b6d41449200dd1e09ff65b3fc327e5ea122545d671dd5bbab92c3fc37ae309a40c38632678f1514543f2185776268cb35225d0922bfb304cd816a5e1802ad2bda7d62"], 0xba) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket(0x0, 0x0, 0x0) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r11, r12, 0x0) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r14, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r14, 0xff, 0x3, [0x7f, 0x401, 0x6]}, &(0x7f0000000200)=0xe) 01:30:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r5}) r6 = geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r9}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x945408, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x400}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x10000}}], [{@dont_appraise='dont_appraise'}, {@fowner_lt={'fowner<', r5}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfshat={'smackfshat', 0x3d, '-proc'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r9}}]}) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) dup2(r1, 0xffffffffffffffff) [ 1505.981530] input: syz1 as /devices/virtual/input/input279 01:30:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) write$binfmt_elf32(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c467700fc09807200000000000002000600030500009c00000038000000b4000000ffffffff000020000100000201001742000000000700000000020000040000007f0000000100010000000000090000000800000000000070050000000080000040000000060000000700000020000000000000006e6a386153260189afcbaa3a314ae5224ae36da94d6af26e25c1bcafa59f9adeb4600bd2b9a41299d205d164b0521d80799fef8878657a75e07ecaf8d3efa8ffa7d9792a923c40bd7a32564efdd0c6c76ce32152ef539ff4c205f6ac768fa4215d759b973dd12f9db32edffc851fd20094ea776f498ecbc286d925db143a0ef6d549efa8bdb0621227fc2810df8b99e48f505162ebab3e2d8257db8963cf829fd3dc5cdb8a0d63973e2cd35f1886d169cbccc034e6deb6dd656a7f540292079e95516873d7df2b1c936ae0684475d7e371b800a55ade3c8fc1f774abe0d013cfc8a888f76fe6919b31c6fdb52de5918a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ff994c485599030cf0e1700"/2664], 0xa68) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r2, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) ioctl$UI_DEV_CREATE(r3, 0x5501) getpid() 01:30:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0x23, 0xf0, 0xc6, 0x7, 0x3, 0x5, 0x9, 0x3, 0x58, 0x0, 0x81}, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711}, 0x10) close(r3) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e4, &(0x7f0000000180)="14bc50b7e809ee78f41e76bc9fae2afa596edda644ae3ae79c611ec159ca2364bb1ef4f5fa1d3ea1da1c74046731f84a14ed28bbb5b7d1feb7b6a6283297102605a91142bf39c4") splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x2) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x8, 0x40, 0x6, 0x6000}) 01:30:43 executing program 2 (fault-call:18 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000340)={0x2, 0x80, 0x6, 0x3}) shmctl$IPC_RMID(0x0, 0x0) sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40040) r7 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='(security\x00', 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000280)="ec21e30fd592055283ce857420c13c38b21103d5f291bb3b38b71297fd54bac52f6a6da98f89c19b35ea2a36afe4ef886134449124af854cb27f92b2cf6571302535acfc977cdea976e1f345c3d1cb47e01e2e767b14ecfcd875639c5059eb762ccf4a8d318ab596fac18ec545d45cbede19e51796cd2bcf8720ae6d481bfb64734dd54a5c735360f64cd7aaf255a7181bb0b1bb274b2834253d6dbb934f6f5a6b69b318c9f341aff11954250b1190c7bccf87891d84b669122f141c65ea", 0xbe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 01:30:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904024865160b0001000c410200000800140e00060000000001000000000300", 0x2d6}], 0x1}, 0x0) [ 1506.096783] input: syz1 as /devices/virtual/input/input281 [ 1506.129679] input: syz1 as /devices/virtual/input/input280 01:30:43 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x2) write(r0, &(0x7f00000000c0)="2debecd6d143bcb39c5279176cd52564664f0cd7bee21a3395e70e2f08e92fb46907c394393b7c3f65f302df0ec8ee18f1e4b4ddbb50c85cfcb159eb1d4cac0a5ce6c315318eef8fd9f443a63b81b1fb023a2c39bfade81e0acde63824fb9fbd9386c646f025d6b1d58cb4dc7ce760887e8097c94184b71fec8bef159d0d8f62b7b96cd86f4b5129a61b54acaa8885fe005383587ae9fd9f74f3524947d0b2500c7290ce164c5a0fc6bb8af1e8b064afd17c2c", 0xb3) r2 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r6 = getpid() sched_setattr(r6, &(0x7f00000014c0)={0x3b6, 0x2, 0x0, 0x4, 0x8, 0x0, 0x800}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f00000001c0)={0x1244, 0x11, 0x1, 0x200, 0x70bd29, 0x25dfdbfe, {0xe, 0x0, 0x6}, [@typed={0xe4, 0x2b, @binary="c863e43e5f8f954edaed91a29447004cb30d50d03806a40acc9ac58fe4b7f56d4bcfd9662c14980972f9d1d1828fa20a48ef0a4afdbdd4f0b2ed26dbd9cc0fc67b49d726ef7b9abd4bb7492eacacfcde3f9a6025c77b2b45e7b60406338ee16a6bbc5d42aefcafaae129803d505658f958e59506126338bdfbf05a149e0fb35fb1b00feb08894cc48f019bef9ce8e6ae614dbc3c9b6ded4f641ecefccbdbaba2584e1632cbe61118c4e13fea2a437ce8297b8063997b66dcf9290912786a64980103803e6cd393acb51ff70cd5ee65065ad08f9b62241e874ac7a8141d041e"}, @generic="c60768c7d2b010108447773a8a529a3297b4202b386a9afa7120304c5078e5d74a8e5afcf7597e584240156afbe2e31db46860638d00bb975e94f1b4298c56bea377c6d0e5d8bd861a9c918cd6da68fc5a3b67873c956e4ca8f439e57e923bb87b21f283c7b8f3d9c98e8847fdf4680f09de7fd6d47a3f188588faeaa965efa7a09f86e8658d071518a2da838d64c2ff1d7c70ee02bf561119e3068ec4ab3838080968864f0506a3bf8458987f70450427b2e0953d4f04", @typed={0x8, 0x54, @uid=r5}, @nested={0x108c, 0x47, [@generic="7a60e0d6209c71516af3e9f64736b180bcc0172fd01567927735fc062178167ddd6e9172da7f50612819aa745388ebf6572dc927a0c2c8b7673fe3b912ddac16bfcc6401426f493e9eb32f74f3331f489fe995e856fba0aeeacb64c8295e3921061421d84f62f0ae65ba1f0f16a4fa57f8be4db8452fc0e702b709feca7a52f3cca6a576e841e60afab1e32a6c5fe92f55803c3cd5846c68e871e08632a9222e48dcf45b26c5574d4d696e1525ae68d1ba1ad0fb375d723f77d9a52af23127cda4fd5acff1d9339c664a9108f775b828e39c73a9980d9b438205c73d7701f32c7f9851685efbba1c2a162e7a5289074ecaede4efca63d6cd8ce111cd935f8dc0aaa5dc21b3c1162084580a6b0220b9befbcab639d0798207577d5721b442260b945acfcb8e81c6767d80bf48cab17ab16d7a5777213ccd0d9dc48697c3b7a7b9f3220875caf910deea3226f4d1d6beec01e90fe0e96ceacaa2372e9550ec5d285b1753f98057fe20ed569ef774de7e312edc0286deaa32804ac8df3d97616ca26c16c26cffaae686ef6b7fdcafdb8bd73b44e02fc982747dbe1bdd1b94065a5b4f85cc8cb5bb5bb7f6436dd8dfb001656e5d46ef3d0ae30cb5aeccfc15e046c665accff9888e1b16b73eaa8b03b0b84169358930a959d58dd8ced1cd9e65c1611d1d81f13bd4c5176475898ef56adbbcbb07df4e5cc70bc4fbaaed03f592a18cd6c5d88d54b90a776d13c9765a9a74a6628429698576c1349df4460d2b5932d3a201587be509b18a10c004a727bae6e690edf34f3cd386ed295d16fc97cf4ebbe95f657ab38ea2e6a33f12fe6e7f5b1907336c5ecf8c3bbaeca68b65840f94384ce2c0307d5bbd55be8c2e75cb026d19e87347240fe7ea7556e95dc0708b5c5ba0bf4edc052f0c5b99f43c32c68257c3cf353e632ec7614dc6d22491b95bf24aa39f45229f12c11230ed8fd14fb44ffa44e46d2287556946825a0c973719d208798f3596512db849c7d4bee3a010383f85b364142848761ecec13c750556a484e70fac72728f63cf3fbbf83d2d879417e25a595776a83cae8845fbbc3718992399af620514b414592d69bf12b25e635ca6a6c010eac7f98251133dbca7826818a3bc541a42b912277e2efd3e82e482156f15aaf188804c3490d7fd7ca81ae7657ee155524af6efb00458d868859f1d19a9cd4e30dd8a5c2fc7b40ca55efc3f06bee3551f1fe6acbf12f6128e853ece8f03021b90a9ff6215d315aee3b7f20e0274b83ed5a5d55e67f515322872ea3cc9d5f7376f18d33caa1f208c00e96d3c4ae5d8aa085d3ea64b80ecc6f6687848f333b2802f8f89dd63495e82dfbeacdcaa1298deee7a8576579d21528075b54a00e47b16144084ad0311a61155440db2a455471f64be0fcf65894e9dec51912ddfc9c83f75f4e60d22ea1dd78d4487e2e49dafe60f12d25f33f2f61ddb6d397d0781df9ea00ff7c0ca08fa66d5f3f824c908759f499e06deb0c0fb9e416c60c4d24e2dedfe741846eaf550fb9ba444459f32f107e5c54e98b1a91966f3e684d7a26c5e2fb11a56baeb5bf25bcdfb262bf3de815ba3e9e802c942912a6740d2a2a28ae84dda96e01b49b459033de7b81170905c7d009a5b8972d5d7bcd59d9dd89eef67087aa92bc387c50c12caf7c0a525293b72ebfebbb9dfe9311efa7f4586437d51367a9598f892f20b514b06fcb094d5f3e3fd8b4cdf9bf078d34ee12bc5c51d59bcedd665fbcd41fae1c20bd110eac033581b444cdf47f84ed9d7d89bd082da94ab4d2c205d9637addf574843dbd07f0febde88b6f83d1079ee2641938227c80bd16e647c18e28efe8d54f43f41f797b776f0cec840889ec6de07e52b37a97c6d8ac8921524ad72fd71a49711e4ace1fa9f5f8ed7e786a6ee8e2923395b28fa8c487e8e02fd20f6a5d69e0c80a87052cf6443662fafe8541b040d2b5f82d2999f92466be36a54dc804dd2eaa9eb465edf039093a8089978b29786226acd80853b4d0681e78f194ad35465f08502577f45ba537099dcc8df9d74976915d94ef3786b50765aea8194f6d77cf7be4b4527d271566041580b880499d789d48bb397f1848cfced61b2b19e5b8b41ef2e3a7e5c2f62c334ccf1e2732253ad489be6e2f8a370ef80f6ff67844ec24514e6b65b849c088bd26cdd82fea447cf90370e83ff3f7a68651a429b9359acd31e3d94c0a7f94cf4dbd3b603e07e030a3f402673adcbb6757bcb522eb01c221498d08df19bd248d7627aadfb0fe9c235c4f1ae74207094469bfad2a37e7bd2b1051df8d7e09b5a50ed36ef17148143d78a87294ff170743a26f9b7e2baf0f70650288b4839e9304c4a932b507ac1ba32ae7b3a734cdd77a8da93fdea734e3bca680a00718d21135519983933b0c73be9c7286fb6aef6d5a92b8437ba3b6b70be9409b8d04f1c553879232c12be5d184f9960d62e75ad07377c8b0c648c42818f9b441c0f15f11ee78560378a6e73f9291a8d1da286d6d88d87bc91fdf53d1a14526ec42154e3a12ba860e031867ecd07cc58630891fe31a084655ee9d44aaa4380250d0166fccac748010aba6fe13bd899e35bed7c94d0b1efa814b0e5a38ad41b2a005acbc90f0355c3c3a00787f4bee41baa219de9ff6934f8b25bdb673105109470be5ffff84a3ed80a4b92a4bd65332de603a94e00d669d0c4eda569768319811fe1c6e23e3c7baf977dc0c2d6233dfaa4f9d2017b4571f70628c11f58cb175a5c3513ac6b4f90603aeb789d71752590048dba0baf16523a8edf094ed4bb92377a3f1af15c045813d953be4897cf4166a35862958738a3cd00ac609148c13be0bfb5310641b03f1503bffb1264eb5d1bca575d1c7305779fab0bded3647e2c720c635cd947716a4f9c2e728ca72feea1623c8da45afc162af4d60803758c52127f3679e85f73f88fee6382acd47fcf34bdfe86f2f9b828fab3a815fa232a06d361b71cde58047ee08b88d23950d370010cf8fd3bb890f9542a48efcacd09a49b762fbea675d1d5127bb0002237c23d1f1870fdda685e6480739da53e78dba3c7ed8dfdf642dcaa1fd4a56ca873b5c340f4ccac7c57ba08cddd489ae3d66ef3cbec40cb1bd9ddc01ff2161183541dbcc6cf7da5a8f207496204b8674b4e77921e67e429145b9d4c4151a2604d265e43bc876caf8e2b83fe0ff59443b64ee8f7ccaedc4193e2d2ccce1d7a6e1ac4f63d75540c93a8ae1c443d00770d37ddcdf55d8d577870718c9db0d35bd219bd2ba79c28bb5a318272f6a209d79ae24b3b39a672b159e2ddd31f433db33421520fed2840f5e4811fdbff05f37aa6043b6fc4eb44d3f0a4da7f186085211c0e243db82475e88df46cdfc00fde80c6ed4da341342361dc9f6761f0da85b0c6bcd2996108a3082def46f93733fb4ffbab66b8e74a217e6dc7a1b0606f3ae37fe01711bfffb46922cda83285bed0b948f77d8edfc49ac096bc7fad7dcc6ee5cf8ea2bb8a9eed892aca840dd5727bcd7d438965b22d842f7d9ef330df53ae965d24b081a47922103329ebc56d112ff60cd6d03fe0629d4d4eeecba732958db6561ad98ce29cc581debcd954c9d2f6df9ac7e5dc519aaa68b8fff73f7d7e2878157eac025df9ea47632787c4c62c90dcaaa6d44f6322db42acb736db85cff5c81f31b18ca2dcfed447e11b80a01ff09d447ce38df0adde71fb25315ef102c4ef8d0af0988b8e42a1ef63aa511ec36b63f4808d50b0c587d1c1d466d72f5c3e500d6d1c3b45a471b105369b7d8be5b08eb33c4924abe13f1df08d633f8925977efbcf2a35eca549a771667fcaaa131750dea20b1de420b6d1487ad226131047a3f399caed90ecbd98fb4e4d7901a7145daf9c98465600cdab309f9c592051237bf0b505c684ca9e8109e5fc58b153f153d5d500544991061f07760695e541b69b9f7f8c937fd52e4acaa6a8d47510dd28992c88cd58cfdd919cb79a9973bce80862eee4a2a221175010aa0640a2813790c363f53f21c5de145cbfc5d30618cff029d005170bea8e8bd1d83a34eb7b63397e6e19a95851b93f6829b3e74fbe9a5eb70973200244b9711aaa41759bf17ad2276ad7e5f618e6bb1261ef4802f11f3e7db2ac34ecd880e10344475d793834d83358a855e2b755ca94e309bbc0c898e5af064c374debd6239e0f6962457ca03d83373eee213078394c4be6982a3034345e02e0c3425a0944c6b55a9336f1910d90413c0c22b34e993763af3d548758db1a8136f94ff909fb9b7799d38d1ca11e27576ded11a5490b49aa955dc7eb367033ece7bf53fefb28edafa88b54b5fbff931c0d6c571a95c4064a5325a1e3f6adb73ce7136c4559075b21c5700cef8a664bec5497d0275094ee04dae594501894b574e59ab843d6123d488432e5350fdbc7fa10e57aa838dd7a9d7f6dca7931ba5358fbfc451ed297fc417e7dba469d35259de5c4baadac717011e9bff4c46a8f50d46d35dfe16049e39925b67592cecae452010f56c81b2d983920cc2c6e00540ae5e44b32e18c9dabaf63aadbb166dd6292943ce42b5dd149d06e5b650a6c2e4873d0c97d64d2679df69c045c969329b5eb539189ca2cca192d8c8af075429e7aac7d81b0936554d0d3e13b2205160c1864a6e1da8f16f988feb622f9249a9cee518d5a925a4cba72c9744071df3b15133f0acbe00acf44a3c0d5bb9c9b58ef985d0a9e5815b2911353c355cdb641a64a4f833e1439f089a7f87be5c12f6a7b1b50b2d8616ea95a79eb5c8c3985a4ed6ab6c82f2bbf63dd8844dd6a749bd1ae5b538d90baa9f202842272f57ea7a1cbe7dc2654cb23af6f4e96dbf13aa34e00240a4088e6d1fdbd1c76528b402b552df346148ffabef5bd08a86d2bce4583f89be96a0dfae554ec05d36d0b4790a77fc3238e3d9deb20f4c75f97b369760f1de6d5b397809e9d777b8b450a4ce0dc94992058c6e2631fe4c88d3f9ff67cd411db612040690aab2f0f618a05c2244e75f723025f39065ef937da8fa204bbeac613649bf4ccb1b2b509f260fc9f99621dd42c40ae8a0a94990559629f70a5139a17f4034d26e94f95fafe530cad2da9e930d56a2c52a7afeaf4c39118dd26915c288148d2371d348c0040cb0801624e92d3883dc47eaa7af2050f48247770f6d7da51751c2d27e7518c31cf321f709a64cb68bfe5aa506df94cd74813d975555807ceef9299252a0a911406e7e0c50999ec78a110af3666ecc1f65ce6db59c00ba2d9e1ccd3d0d133058dda5261dd204bf2accfe4b532c3ce8a85413785794bfad8be20d45b70821d3645dc52f907ab35bbcc9a6d442d0f0d88654a3acfb6702d68065538a843ad027eee43b432c546b863dd717708853744692f2db774c378585adb6e3540c5a309a89b856a536a984c59a7a180202a83fc85784dc6060cc7aa91a4f6be125d71318fa25dbe3504cfc8856b858c1752b469c286884381efcc2395ad561bbfb7fb80bed5ffb41df432aac0cf6223624e16bd8ab763c52d9cff3ce460e2d01ecb64edbc794fb903b3850a17e51d5626fc6b8b1161ed6bce785f32c2d50718fb5de1814d102d15c91a1ba0a78a0d03cb8aaed2030cf9c8174b4024ea9f51037f5890e0d71d83956c7f472bc16a080d8c37ad5a77e3f74fee328b7c9f803c8a8da83547f1fc7ac0df264532d7fe13ebf70adfd1b3123616f54707cf3ffb54803f42ea2c84daf08b6525e463747d9650f79e00b5abec1a11f9b6bde2a2cdea6b5c5d723c18d63b75471c433b7ce9180b2061ba", @generic="4eefe162887f220c3e221ebda1fe87ca839aa6e3a060caea6bd82132423abece41543a0a15ab2aa6abef96c381c4ca4c8c4b68cf64c346980c90211eb0325a4d", @typed={0x8, 0x47, @pid=r6}, @generic="942b67609d7edd77432fbacf23768cc7fe9fa170746024ee8f9d95a3014f3b5509ea2455e00893dae5f50db7c618533b29d63c461d13b7d5039f7ce629"]}]}, 0x1244}}, 0x40000) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 1506.304336] FAULT_INJECTION: forcing a failure. [ 1506.304336] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.316663] CPU: 0 PID: 3898 Comm: syz-executor.2 Not tainted 4.14.156-syzkaller #0 [ 1506.324481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.333899] Call Trace: [ 1506.336523] dump_stack+0x142/0x197 [ 1506.340151] should_fail.cold+0x10f/0x159 [ 1506.340169] should_failslab+0xdb/0x130 [ 1506.340182] kmem_cache_alloc_node_trace+0x280/0x770 [ 1506.340196] ? retint_kernel+0x2d/0x2d [ 1506.340208] __kmalloc_node+0x3d/0x80 [ 1506.340222] kvmalloc_node+0x4e/0xe0 [ 1506.340234] iov_iter_get_pages_alloc+0x4a7/0xef0 [ 1506.340244] ? trace_hardirqs_on_caller+0x400/0x590 [ 1506.340258] ? iov_iter_revert+0x9c0/0x9c0 [ 1506.340273] ? iov_iter_pipe+0x9f/0x2c0 [ 1506.369719] default_file_splice_read+0x17c/0x7b0 [ 1506.369739] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 1506.369765] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 1506.369778] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 01:30:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x4000) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setgid(r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x2) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000180)) dup2(r2, r1) 01:30:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7fed\xc1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e23, 0x1, @rand_addr="8cdd67cbd68ef049b796c30caa6bdce6", 0x8}, r3}}, 0xffffffffffffffe3) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) dup2(r4, r1) [ 1506.369787] ? fsnotify+0x11e0/0x11e0 [ 1506.397821] ? __inode_security_revalidate+0xd6/0x130 [ 1506.397832] ? avc_policy_seqno+0x9/0x20 [ 1506.397842] ? selinux_file_permission+0x85/0x480 [ 1506.397858] ? security_file_permission+0x89/0x1f0 [ 1506.397872] ? rw_verify_area+0xea/0x2b0 [ 1506.397881] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 1506.397890] do_splice_to+0x105/0x170 [ 1506.408348] splice_direct_to_actor+0x222/0x7b0 [ 1506.417582] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1506.417594] ? do_splice_to+0x170/0x170 [ 1506.427338] ? rw_verify_area+0xea/0x2b0 [ 1506.427352] ? selinux_file_permission+0x30e/0x480 [ 1506.427364] do_splice_direct+0x18d/0x230 [ 1506.427376] ? splice_direct_to_actor+0x7b0/0x7b0 [ 1506.427391] ? rw_verify_area+0xea/0x2b0 [ 1506.427404] do_sendfile+0x4db/0xbd0 [ 1506.436550] ? do_compat_pwritev64+0x140/0x140 [ 1506.436568] ? fput+0xd4/0x150 [ 1506.436579] SyS_sendfile64+0x102/0x110 [ 1506.436587] ? SyS_sendfile+0x130/0x130 [ 1506.436600] ? do_syscall_64+0x53/0x640 [ 1506.442579] kobject: 'event4' (ffff88804651eab8): fill_kobj_path: path = '/devices/virtual/input/input276/event4' [ 1506.445075] ? SyS_sendfile+0x130/0x130 [ 1506.445090] do_syscall_64+0x1e8/0x640 [ 1506.445100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1506.445117] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1506.445125] RIP: 0033:0x45a639 [ 1506.445133] RSP: 002b:00007f27568abc78 EFLAGS: 00000246 [ 1506.455064] kobject: '(null)' (ffff88804651eee8): kobject_cleanup, parent ffff88804651eab8 [ 1506.458859] ORIG_RAX: 0000000000000028 [ 1506.458867] RAX: ffffffffffffffda RBX: 00007f27568abc90 RCX: 000000000045a639 [ 1506.458873] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 1506.458878] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 1506.458885] R10: 0050000000000443 R11: 0000000000000246 R12: 00007f27568ac6d4 [ 1506.458890] R13: 00000000004c85aa R14: 00000000004dec38 R15: 000000000000000b [ 1506.472475] refcount_t: increment on 0; use-after-free. [ 1506.480701] kobject: 'input283' (ffff888034a4cee0): fill_kobj_path: path = '/devices/virtual/input/input283' [ 1506.481358] ------------[ cut here ]------------ [ 1506.486220] kobject: 'input283' (ffff888034a4cee0): fill_kobj_path: path = '/devices/virtual/input/input283' [ 1506.489020] WARNING: CPU: 0 PID: 3905 at lib/refcount.c:153 refcount_inc.cold+0x18/0x1f [ 1506.489028] Kernel panic - not syncing: panic_on_warn set ... [ 1506.489028] [ 1506.489040] CPU: 0 PID: 3905 Comm: syz-executor.1 Not tainted 4.14.156-syzkaller #0 [ 1506.489046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.489051] Call Trace: [ 1506.489064] dump_stack+0x142/0x197 [ 1506.489078] panic+0x1f9/0x42d [ 1506.489090] ? add_taint.cold+0x16/0x16 [ 1506.662961] ? refcount_inc.cold+0x18/0x1f [ 1506.667176] ? __warn.cold+0x14/0x2f [ 1506.670873] ? refcount_inc.cold+0x18/0x1f [ 1506.675086] __warn.cold+0x2f/0x2f [ 1506.678602] ? ist_end_non_atomic+0x10/0x10 [ 1506.682901] ? refcount_inc.cold+0x18/0x1f [ 1506.687117] report_bug+0x216/0x254 [ 1506.691160] do_error_trap+0x1bb/0x310 [ 1506.695028] ? math_error+0x360/0x360 [ 1506.698823] ? vprintk_emit+0x171/0x600 [ 1506.702793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1506.707616] do_invalid_op+0x1b/0x20 [ 1506.710130] protocol 88fb is buggy, dev hsr_slave_0 [ 1506.711313] invalid_op+0x1b/0x40 [ 1506.716362] protocol 88fb is buggy, dev hsr_slave_1 [ 1506.719752] RIP: 0010:refcount_inc.cold+0x18/0x1f [ 1506.729560] RSP: 0018:ffff8880820f7980 EFLAGS: 00010286 [ 1506.734924] RAX: 000000000000002b RBX: 1ffff1101041ef3d RCX: 0000000000000000 [ 1506.742174] RDX: 000000000000c98b RSI: ffffffff814b8665 RDI: ffffed101041ef26 [ 1506.749421] RBP: ffff8880820f7988 R08: 000000000000002b R09: ffff88803343ca60 [ 1506.756669] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804651ef20 [ 1506.763919] R13: 0000000000000000 R14: ffff88808dc90a80 R15: ffff888094838488 [ 1506.771193] ? vprintk_func+0x65/0x159 [ 1506.775065] kobject_get+0x5b/0x70 [ 1506.778592] cdev_get+0x54/0xa0 [ 1506.781849] chrdev_open+0x9b/0x590 [ 1506.785454] ? cdev_put.part.0+0x50/0x50 [ 1506.789507] ? security_file_open+0x89/0x190 [ 1506.793910] do_dentry_open+0x73b/0xeb0 [ 1506.797864] ? cdev_put.part.0+0x50/0x50 [ 1506.801905] vfs_open+0x105/0x220 [ 1506.805339] path_openat+0x8bd/0x3f70 [ 1506.809147] ? trace_hardirqs_on+0x10/0x10 [ 1506.813373] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 1506.818020] ? find_held_lock+0x35/0x130 [ 1506.822073] ? __alloc_fd+0x1d4/0x4a0 [ 1506.825849] do_filp_open+0x18e/0x250 [ 1506.829627] ? may_open_dev+0xe0/0xe0 [ 1506.833420] ? do_raw_spin_unlock+0x16b/0x260 [ 1506.837893] ? _raw_spin_unlock+0x2d/0x50 [ 1506.842031] ? __alloc_fd+0x1d4/0x4a0 [ 1506.845813] do_sys_open+0x2c5/0x430 [ 1506.849505] ? filp_open+0x70/0x70 [ 1506.853028] ? SyS_clock_gettime+0xf8/0x180 [ 1506.857327] SyS_open+0x2d/0x40 [ 1506.860595] ? do_sys_open+0x430/0x430 [ 1506.864463] do_syscall_64+0x1e8/0x640 [ 1506.868326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1506.873147] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1506.878325] RIP: 0033:0x4143d1 [ 1506.881494] RSP: 002b:00007f1412d647a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1506.889272] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 1506.896522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f1412d64850 [ 1506.903772] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 1506.911021] R10: 00007f1412d659d0 R11: 0000000000000293 R12: 00007f1412d656d4 [ 1506.918272] R13: 00000000004ca309 R14: 00000000004e22f8 R15: 00000000ffffffff [ 1506.927012] Kernel Offset: disabled [ 1506.930808] Rebooting in 86400 seconds..