fffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) 13:36:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000c00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 938.434322][T29793] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:09 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 13:36:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:09 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000d00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 938.641203][T29814] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:10 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0xcf0f0000}, 0x0) 13:36:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000e00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:10 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 939.302298][T29843] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:10 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$inet6(0xa, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) 13:36:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 13:36:10 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$inet6(0xa, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) 13:36:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000f00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 939.485479][T29856] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:10 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:10 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$inet6(0xa, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) 13:36:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 13:36:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001100580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:11 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) [ 940.222766][T29896] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 13:36:11 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001200580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:11 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 13:36:11 executing program 2: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:11 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002500580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:11 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) 13:36:11 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:11 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:12 executing program 2: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000004000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:12 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) [ 941.374592][T29952] net_ratelimit: 74 callbacks suppressed [ 941.374623][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.426735][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.487066][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.546136][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.605447][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.665900][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.726660][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.787394][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.848452][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 941.906108][T29952] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:12 executing program 2: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 13:36:12 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000884700580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:12 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:12 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) [ 942.076039][T30000] __nla_validate_parse: 3 callbacks suppressed [ 942.076048][T30000] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x2) 13:36:12 executing program 2: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000884800580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 942.226544][T30015] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:13 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:13 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x3) 13:36:13 executing program 2: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000655800580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:13 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x4) 13:36:13 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:13 executing program 2: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:13 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000006000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 943.083150][T30063] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:13 executing program 2: r0 = syz_open_dev$sg(0x0, 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:13 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x5) 13:36:13 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:14 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000586500580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:14 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x6) 13:36:14 executing program 2: r0 = syz_open_dev$sg(0x0, 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:14 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008100580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 943.978272][T30110] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:14 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:14 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000478800580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:14 executing program 2: r0 = syz_open_dev$sg(0x0, 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x8) [ 944.222664][T30136] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:15 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 13:36:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x9) 13:36:15 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 13:36:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000488800580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:15 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xf) 13:36:15 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 13:36:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:15 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x28) 13:36:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000039f00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 945.167630][T30185] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300), 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:16 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) 13:36:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x60) 13:36:16 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000001fd00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 945.939010][T30215] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:16 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:16 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) 13:36:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000fffe00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x300) 13:36:17 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) [ 946.212083][T30241] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 946.406136][T30224] net_ratelimit: 74 callbacks suppressed [ 946.406158][T30224] Dead loop on virtual device ip6_vti0, fix it urgently! [ 946.466307][T30224] Dead loop on virtual device ip6_vti0, fix it urgently! [ 946.525799][T30224] Dead loop on virtual device ip6_vti0, fix it urgently! [ 946.584442][T30224] Dead loop on virtual device ip6_vti0, fix it urgently! [ 946.644391][T30224] Dead loop on virtual device ip6_vti0, fix it urgently! [ 946.704961][T30224] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300), 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:17 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x500) 13:36:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000fff00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:17 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) [ 946.764166][T30224] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 946.842817][T30270] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:17 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:17 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) [ 946.897042][T30274] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x600) [ 946.942870][T30274] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:17 executing program 2: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000feff00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 946.986315][T30274] Dead loop on virtual device ip6_vti0, fix it urgently! [ 947.073129][T30293] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300), 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:18 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) 13:36:18 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:36:18 executing program 2: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x900) 13:36:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000680012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:18 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) [ 947.774873][T30323] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xf00) 13:36:18 executing program 2: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:18 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 13:36:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000200580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:18 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) [ 948.022336][T30342] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16", 0x29) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:19 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xfcf) 13:36:19 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 13:36:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000300580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x2800) 13:36:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000039f00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000400580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:19 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) [ 948.812678][T30387] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 948.883522][T30391] 8021q: adding VLAN 0 to HW filter on device macvlan2 13:36:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x6000) [ 949.044996][T30405] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16", 0x29) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:20 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) 13:36:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xcf0f) 13:36:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000500580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x34000) 13:36:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000600580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:20 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) [ 949.832872][T30444] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x400300) 13:36:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 950.056963][T30457] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16", 0x29) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000700580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:21 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) 13:36:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x1000000) 13:36:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:21 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 950.701571][T30476] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16", 0x29) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x2000000) 13:36:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000800580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:21 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) 13:36:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 950.919767][T30491] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 951.448076][T30473] net_ratelimit: 74 callbacks suppressed [ 951.448093][T30473] Dead loop on virtual device ip6_vti0, fix it urgently! [ 951.509745][T30473] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8", 0x3e) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x3000000) 13:36:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000900580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:22 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) [ 951.569554][T30473] Dead loop on virtual device ip6_vti0, fix it urgently! [ 951.694538][T30511] Dead loop on virtual device ip6_vti0, fix it urgently! [ 951.717674][T30511] Dead loop on virtual device ip6_vti0, fix it urgently! [ 951.722881][T30516] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 951.765606][T30511] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x4000000) [ 951.805895][T30511] Dead loop on virtual device ip6_vti0, fix it urgently! [ 951.867591][T30511] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:22 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) 13:36:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000a00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:22 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r3}) 13:36:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x5000000) 13:36:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 951.912172][T30525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 951.925942][T30511] Dead loop on virtual device ip6_vti0, fix it urgently! [ 951.985600][T30511] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8", 0x3e) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x6000000) 13:36:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:23 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x8400) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000b00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:23 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x8000000) 13:36:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:23 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000c00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x9000000) [ 952.896189][T30585] __nla_validate_parse: 3 callbacks suppressed [ 952.896196][T30585] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8", 0x3e) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:24 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xf000000) 13:36:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000d00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 953.507819][T30601] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:24 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000e00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x28000000) [ 953.726199][T30618] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x60000000) [ 953.896067][T30631] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819", 0x48) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:25 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000f00580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) 13:36:25 executing program 5: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(r0, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x9effffff) 13:36:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x0, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:25 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x0, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xcf0f0000) 13:36:25 executing program 3: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(r0, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x0, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xefffffff) 13:36:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819", 0x48) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001100580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xf0ffffff) 13:36:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x0, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x0, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xffffff7f) 13:36:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x0, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001200580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xffffff9e) 13:36:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 956.483976][T30699] net_ratelimit: 74 callbacks suppressed [ 956.483982][T30699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 956.543732][T30699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 956.614361][T30699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 956.667350][T30699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 956.737905][T30699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 956.796287][T30699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 956.847237][T30699] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819", 0x48) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:27 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002500580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xffffffef) 13:36:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xfffffff0) 13:36:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 957.028311][T30739] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:27 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000006000580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 957.089991][T30739] Dead loop on virtual device ip6_vti0, fix it urgently! [ 957.143109][T30739] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x40030000000000) 13:36:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 957.305445][T30754] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000fd01580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae", 0x4d) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x100000000000000) 13:36:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000003580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 958.082335][T30772] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x200000000000000) 13:36:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000009f03580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 958.382811][T30785] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x300000000000000) 13:36:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 958.655510][T30793] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae", 0x4d) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000005580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x400000000000000) 13:36:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 959.146217][T30806] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x500000000000000) 13:36:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000006580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 959.429671][T30821] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x600000000000000) 13:36:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000007580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 959.700088][T30834] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae", 0x4d) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x800000000000000) 13:36:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000009580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 960.286147][T30845] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x900000000000000) 13:36:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000a580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 960.941515][T30865] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xf00000000000000) 13:36:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000b580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 961.179379][T30877] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 961.525385][T30849] net_ratelimit: 74 callbacks suppressed [ 961.525392][T30849] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1f", 0x50) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x2800000000000000) 13:36:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000c580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 961.699061][T30894] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 961.740385][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 961.793086][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 961.813321][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 961.829278][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 961.850837][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 961.890603][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 961.946034][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 962.006942][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 962.065748][T30895] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e9205", 0x2a}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x6000000000000000) 13:36:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000d580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e9205", 0x2a}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x8000000000000000) 13:36:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x9effffff00000000) 13:36:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1f", 0x50) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e9205", 0x2a}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f", 0x3f}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xcf0f000000000000) 13:36:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000f580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 963.233784][T30947] __nla_validate_parse: 3 callbacks suppressed [ 963.233792][T30947] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f", 0x3f}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xefffffff00000000) 13:36:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000011580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 963.600224][T30957] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f", 0x3f}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xf0ffffff00000000) 13:36:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000012580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 964.068960][T30971] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1f", 0x50) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082", 0x49}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xffffff7f00000000) 13:36:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000025580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 964.267131][T30988] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082", 0x49}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0xffffffff00000000) 13:36:35 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000040580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 964.551707][T30996] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082", 0x49}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = getpid() write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1f, 0x37, 0x2, {0x1, 0xffffffffffff94e4, 0x9f1, r2, 0x1, '@'}}, 0x1f) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) dup2(r0, r0) 13:36:36 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008847580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab", 0x51) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 965.349029][T31015] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154c", 0x4e}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:36 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008848580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0002000000e6000028004ffbb7bbadfd0c411273496eaa3bd8055fdf1d4c0c532ae5fdcf8d08d6aa3013b69244434c6422dfdfd5454ab500070ecb51e0a96af39069084d096dce60ac147090f5e778b5"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x25c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1f}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2b}, @ETHTOOL_A_LINKMODES_OURS={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_MASK={0x65, 0x5, "4ee1abb245e71e7b50ae30f2c02d8a9b1a7053e3a2cdbdc0229db9683d9bb579fba1e57b95014df6d607efab70a37cd9c3b03bbb04432f6ebf8029b571346aee566b29af4c8540ecd600799e63efa4a74e342df1e6d4af4079fccdf26327bd9630"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x73}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\*]p\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf55}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, "f0"}, @ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "21e7828bc4f586db6733d65d1f7a5b7f970d9d969b74115766d33167793457d7b0cd6b2528bb03254152b81a9ebe4168e8acd3aa05e5ae9c693ad12690ada32c8043331fdb246d30867ba0f0e2375d92aec9e685ef1808d478f0b8bf252df77e8e7e37f015626a2fcb15e2213bc53c766644b6fa0372a5e5c414f9b953c609901852332b50e7163fbd85fe95c8f8e5358d83b21ded3e5d9ec4f5a80afa3d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="585300000206829d80aa6a1b59b300000000000005000400000000000900020073797a300000f902050001"], 0x58}}, 0x0) 13:36:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154c", 0x4e}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154c", 0x4e}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:36 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000006558580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) fcntl$dupfd(r2, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 13:36:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247", 0x51}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000060580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc6010", 0x15}], 0x1}, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x4000000000000000, 0x0, 0x8, 0x0, 0xf}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc6010", 0x15}], 0x1}, 0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = dup2(r4, r5) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000400)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="000128bd7000ffdbdf25030000000900030073797a32000000000900030073797a32000000000900010073797a30000000001400020076657468315f746f5f8f4fea6e30957465616d0000000900030073797a320000000005000400010000001400020076657468305f766972745f7769666900140002006272696467655f736c6176655f3100000900010073797a3100000000"], 0x94}, 0x1, 0x0, 0x0, 0x44}, 0x800) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) 13:36:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab", 0x51) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 966.580174][T31069] net_ratelimit: 72 callbacks suppressed [ 966.580191][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247", 0x51}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 966.659210][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 966.694793][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$dupfd(r0, 0x0, r1) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x4, 0xfffffff9, 0x0, 0x7c5ea57c, 0x401, 0x7e5, 0x80000001, 0x36, 0x100, 0x6, 0x9, 0x1, 0x2c48, 0x9, 0x0, 0x2, 0x0, 0x5, 0x4, 0x10001, 0x4, 0x80000000, 0x40, 0x30000000, 0x1bda, 0xf43, 0x2020000, 0x7, 0x78, 0x7fffffff, 0x2, 0x66]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) [ 966.736373][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000005865580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 966.801187][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247", 0x51}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 966.847380][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 966.860461][T31119] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 966.910569][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 966.981420][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce", 0x52}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 967.030087][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 967.080698][T31069] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="c94c1985e13b084b30c7e04026a630a2cdf381372927002409227aac84fcad2c546fbcc82e647996446d33ce66447151fff853fce303", 0x36}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="15351ddafec25f7fcb94df676d377e2db21de0f52b53df75f69d7a17a7a77581fd780fc52554abfcf1dfee685804b3025f663b2b8c"], &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3, 0x20, 0x3ff, 0x5, 0x9, 0x8}, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x40, &(0x7f0000000100)="54ea679b38c633cf27343f0ef441d7b6258a6049d68323b9913ccbdc84c8b8c9a98030c446a3293df8359fa12abcb370ea1ae80bbbd47c9a6afc0804e856e2e4eda5e3e402838ae6766c231eaa7bcd1cc6f47bd8d1217a1d2e1950d8b9264110e048f2237787abfd199f28a4f777cee055aefc23882f4afd0a6ea3287137cbbc9b6adbe9e24961ad6262001459eadbdf87f1fdefcbd34468dece73b4f0c0ccebe400e9ae21401d147d") r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r7], 0x58}}, 0x4044010) 13:36:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000081580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce", 0x52}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab", 0x51) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:38 executing program 3: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2276, 0xffffffffffffffff) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000001340)) 13:36:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce", 0x52}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000004788580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x220080, 0x0) recvfrom$ax25(r1, &(0x7f0000000080)=""/33, 0x21, 0x40, &(0x7f0000000100)={{0x3, @default, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 13:36:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x100, 0x2f0801) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b00000007000000050000000000000009000000000000004b04000000000000060000000000000000000000000000000000000000000000000000000000000001000000080000000100000000000000810000000000000008000000080000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009acb00"/256]) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000280)=0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000001340)) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000380)={r4}) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="071700000000000000000d"], 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x124, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd0f8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53ad}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x8000010) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000200)={0x0, &(0x7f0000000140)="b000c7ee69db958b2779ab767368059318b3b692d3b44f1e84b283c40a2f5efc5e012edea555be34e84b25ea787dc15cfb8942c55970518f6626a32d563db57b47c71f4ef300bd2745ba02adb980f820f7d64870d2fee3ac012e2f9cb953e7a9139d4fbb86a6aa6c99cdbd615db052dceade0cae360e94ff331bdd55ec542133df292377ed2a76797373cba6c0fd23a20ab88f1e7c0a88834944cc99bfd14be07db78286fb165afe7c8816a74cae37c3fe", 0xb1}) 13:36:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x1}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000004888580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 968.134036][T31170] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 968.179586][T31173] QAT: Invalid ioctl 13:36:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632177fbac14140de934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010a08038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000001340)) 13:36:39 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) 13:36:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x1}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:39 executing program 3: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) finit_module(r0, &(0x7f0000000080)='(\x00', 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2276, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2276, 0xffffffffffffffff) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000001340)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000040)) 13:36:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000039f580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050004ff000000000900020073797a3000000000050001"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 13:36:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x1}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000001fd580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 969.118362][T31205] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x5b, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073186ea54d797a30000000d59e4af680000e0a4ba92b205146ba4fd6a963d41ab9aadd49994dce628cf05505339f5c43db41ee246c9f1bf7c8d5ecea5cf961"], 0x58}}, 0x4004000) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) getsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$TCSBRKP(r2, 0x5425, 0x6) 13:36:40 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632177fbac14140de934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010a08038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000001340)) 13:36:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:36:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000fffe580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020601010000001d19710c95d700000900020073797a30000000040500019d21d423fcb52aa127cf9a8a65c47bdbadab05dafe21e2f809ad8d8fb5c600"/78], 0x58}}, 0x0) [ 969.846751][T31234] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000fff580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:36:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40048c9}, 0xfe02cc948d902fff) 13:36:41 executing program 5 (fault-call:8 fault-nth:0): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1200, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fsync(r4) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) read$smackfs_access(r2, &(0x7f0000000040), 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x80) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000280)=""/179, &(0x7f0000000180)=0xb3) r6 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) fcntl$dupfd(r5, 0x0, r6) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x58}}, 0x0) 13:36:41 executing program 3: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) 13:36:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000feff580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:41 executing program 3: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) [ 970.623212][T31285] FAULT_INJECTION: forcing a failure. [ 970.623212][T31285] name failslab, interval 1, probability 0, space 0, times 0 13:36:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 970.706340][T31285] CPU: 1 PID: 31285 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 970.715135][T31285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.725177][T31285] Call Trace: [ 970.728451][T31285] dump_stack+0x1f0/0x31e [ 970.732764][T31285] should_fail+0x38a/0x4e0 [ 970.737158][T31285] ? tomoyo_realpath_from_path+0xd8/0x630 [ 970.742850][T31285] should_failslab+0x5/0x20 [ 970.747323][T31285] __kmalloc+0x74/0x330 [ 970.751448][T31285] ? tomoyo_realpath_from_path+0xcb/0x630 [ 970.757137][T31285] tomoyo_realpath_from_path+0xd8/0x630 [ 970.762670][T31285] tomoyo_path_number_perm+0x18f/0x690 [ 970.768132][T31285] security_file_ioctl+0x55/0xb0 [ 970.773043][T31285] __se_sys_ioctl+0x48/0x160 [ 970.777607][T31285] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 970.783643][T31285] do_syscall_64+0x73/0xe0 [ 970.788029][T31285] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 970.793888][T31285] RIP: 0033:0x45c1d9 [ 970.797750][T31285] Code: Bad RIP value. [ 970.801798][T31285] RSP: 002b:00007f23c8636c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.810176][T31285] RAX: ffffffffffffffda RBX: 000000000001c440 RCX: 000000000045c1d9 [ 970.818117][T31285] RDX: 0000000020000240 RSI: 000000000000890b RDI: 0000000000000004 [ 970.826057][T31285] RBP: 00007f23c8636ca0 R08: 0000000000000000 R09: 0000000000000000 [ 970.834002][T31285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.841945][T31285] R13: 00007ffdd7d0e71f R14: 00007f23c86379c0 R15: 000000000078bfac [ 971.212874][T31285] ERROR: Out of memory at tomoyo_realpath_from_path. 13:36:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000002580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:42 executing program 3: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) 13:36:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:42 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendto$inet6(r0, &(0x7f0000000280)="8f5258c199441346822a70381bbdc111baf1ba5c7038b25a22266d0a585480306c203270215d7dc4cb7d7baedb4655a9a2361df75f9ccf99cb6617758674e2f82504bbecd214f2aa02fb8d1e622c1a100f0edad01c8a88e2624bb96a04a2ed055560c097fed3a3007471e45ab685b7b9aaf18cc1627e55016e8d88550ba20b963df41ba7b01c6821492ca5215ce52fe20e6c599d22ba43459eef517959aebcb880d769", 0xa3, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) getsockname(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000246010100000000000000000000000005000400000000000900020073799d3000400000050001"], 0x58}}, 0x0) 13:36:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:42 executing program 5 (fault-call:8 fault-nth:1): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:42 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 971.441113][T31337] FAULT_INJECTION: forcing a failure. [ 971.441113][T31337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 971.454429][T31337] CPU: 0 PID: 31337 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 971.454439][T31337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.473172][T31337] Call Trace: [ 971.476460][T31337] dump_stack+0x1f0/0x31e [ 971.480783][T31337] should_fail+0x38a/0x4e0 [ 971.485193][T31337] prepare_alloc_pages+0x28c/0x4a0 [ 971.490301][T31337] __alloc_pages_nodemask+0xbc/0x5e0 [ 971.495578][T31337] ? __lock_acquire+0x116c/0x2c30 [ 971.500601][T31337] kmem_getpages+0x49/0x900 [ 971.505100][T31337] cache_grow_begin+0x7b/0x2e0 [ 971.509865][T31337] cache_alloc_refill+0x359/0x3f0 [ 971.514883][T31337] ? check_preemption_disabled+0x51/0x140 [ 971.520594][T31337] __kmalloc+0x30c/0x330 [ 971.524830][T31337] ? tomoyo_realpath_from_path+0xd8/0x630 [ 971.530547][T31337] tomoyo_realpath_from_path+0xd8/0x630 [ 971.536098][T31337] tomoyo_path_number_perm+0x18f/0x690 [ 971.541551][T31337] ? sched_clock_cpu+0x18/0x3b0 [ 971.546401][T31337] ? kvm_sched_clock_read+0x15/0x40 [ 971.551588][T31337] ? sched_clock+0x36/0x40 [ 971.556011][T31337] ? security_file_ioctl+0x60/0xb0 [ 971.561126][T31337] ? tomoyo_file_ioctl+0xc/0x20 [ 971.565970][T31337] security_file_ioctl+0x55/0xb0 [ 971.570911][T31337] __se_sys_ioctl+0x48/0x160 [ 971.575495][T31337] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 971.581554][T31337] do_syscall_64+0x73/0xe0 [ 971.585962][T31337] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 971.591856][T31337] RIP: 0033:0x45c1d9 [ 971.595734][T31337] Code: Bad RIP value. [ 971.599804][T31337] RSP: 002b:00007f23c8636c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.608201][T31337] RAX: ffffffffffffffda RBX: 000000000001c440 RCX: 000000000045c1d9 [ 971.616173][T31337] RDX: 0000000020000240 RSI: 000000000000890b RDI: 0000000000000004 [ 971.624136][T31337] RBP: 00007f23c8636ca0 R08: 0000000000000000 R09: 0000000000000000 [ 971.632097][T31337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:36:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000003580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:42 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:36:42 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:36:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) [ 971.640070][T31337] R13: 00007ffdd7d0e71f R14: 00007f23c86379c0 R15: 000000000078bfac [ 971.670026][T31329] net_ratelimit: 74 callbacks suppressed [ 971.670050][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:42 executing program 3: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) 13:36:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x420003, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1409, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040000}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:36:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000004580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 971.736130][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) [ 971.788358][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 971.821584][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 971.829261][T31363] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 971.855316][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 971.913787][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 971.924568][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 971.940208][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 971.964158][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! [ 972.030093][T31329] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:43 executing program 5 (fault-call:8 fault-nth:2): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:43 executing program 3: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) 13:36:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x7, 0x6e2}) 13:36:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000005580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 972.349991][T31384] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:43 executing program 3: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) [ 972.461749][T31394] FAULT_INJECTION: forcing a failure. [ 972.461749][T31394] name failslab, interval 1, probability 0, space 0, times 0 [ 972.499117][T31384] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000006580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 972.518331][T31394] CPU: 0 PID: 31394 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 972.527000][T31394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.537058][T31394] Call Trace: [ 972.537077][T31394] dump_stack+0x1f0/0x31e 13:36:43 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:36:43 executing program 5 (fault-call:8 fault-nth:3): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 972.537091][T31394] should_fail+0x38a/0x4e0 [ 972.537108][T31394] ? tomoyo_encode2+0x25a/0x560 [ 972.537118][T31394] should_failslab+0x5/0x20 13:36:43 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 972.537128][T31394] __kmalloc+0x74/0x330 [ 972.537143][T31394] tomoyo_encode2+0x25a/0x560 [ 972.537157][T31394] ? sock_free_inode+0x20/0x20 [ 972.537170][T31394] tomoyo_realpath_from_path+0x5d6/0x630 [ 972.537191][T31394] tomoyo_path_number_perm+0x18f/0x690 [ 972.537218][T31394] ? check_preemption_disabled+0x51/0x140 [ 972.537257][T31394] security_file_ioctl+0x55/0xb0 [ 972.537278][T31394] __se_sys_ioctl+0x48/0x160 [ 972.537291][T31394] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 972.537301][T31394] do_syscall_64+0x73/0xe0 [ 972.537313][T31394] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 972.537321][T31394] RIP: 0033:0x45c1d9 [ 972.537326][T31394] Code: Bad RIP value. [ 972.537331][T31394] RSP: 002b:00007f23c8636c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.537340][T31394] RAX: ffffffffffffffda RBX: 000000000001c440 RCX: 000000000045c1d9 [ 972.537346][T31394] RDX: 0000000020000240 RSI: 000000000000890b RDI: 0000000000000004 [ 972.537352][T31394] RBP: 00007f23c8636ca0 R08: 0000000000000000 R09: 0000000000000000 [ 972.537357][T31394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.537363][T31394] R13: 00007ffdd7d0e71f R14: 00007f23c86379c0 R15: 000000000078bfac [ 972.610620][T31394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 972.689206][T31412] FAULT_INJECTION: forcing a failure. [ 972.689206][T31412] name failslab, interval 1, probability 0, space 0, times 0 [ 972.689219][T31412] CPU: 1 PID: 31412 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 972.689225][T31412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.689229][T31412] Call Trace: [ 972.689245][T31412] dump_stack+0x1f0/0x31e [ 972.689257][T31412] should_fail+0x38a/0x4e0 [ 972.689272][T31412] ? tomoyo_realpath_from_path+0xd8/0x630 [ 972.689280][T31412] should_failslab+0x5/0x20 [ 972.689289][T31412] __kmalloc+0x74/0x330 [ 972.689300][T31412] ? tomoyo_realpath_from_path+0xcb/0x630 [ 972.689312][T31412] tomoyo_realpath_from_path+0xd8/0x630 [ 972.689331][T31412] tomoyo_path_number_perm+0x18f/0x690 [ 972.689373][T31412] security_file_ioctl+0x55/0xb0 [ 972.689386][T31412] __se_sys_ioctl+0x48/0x160 [ 972.689400][T31412] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 972.689409][T31412] do_syscall_64+0x73/0xe0 [ 972.689421][T31412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 972.689430][T31412] RIP: 0033:0x45c1d9 [ 972.689434][T31412] Code: Bad RIP value. [ 972.689440][T31412] RSP: 002b:00007f759c443c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.689449][T31412] RAX: ffffffffffffffda RBX: 0000000000013340 RCX: 000000000045c1d9 [ 972.689455][T31412] RDX: 0000000000000000 RSI: 0000000000002283 RDI: 0000000000000003 [ 972.689460][T31412] RBP: 00007f759c443ca0 R08: 0000000000000000 R09: 0000000000000000 [ 972.689465][T31412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.689471][T31412] R13: 00007fffa789f96f R14: 00007f759c4449c0 R15: 000000000078bf0c [ 972.689490][T31412] ERROR: Out of memory at tomoyo_realpath_from_path. [ 972.859196][T31420] FAULT_INJECTION: forcing a failure. [ 972.859196][T31420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 972.859210][T31420] CPU: 0 PID: 31420 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 972.859216][T31420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.859220][T31420] Call Trace: [ 972.859235][T31420] dump_stack+0x1f0/0x31e [ 972.859257][T31420] should_fail+0x38a/0x4e0 [ 972.859273][T31420] prepare_alloc_pages+0x28c/0x4a0 [ 972.859288][T31420] __alloc_pages_nodemask+0xbc/0x5e0 [ 972.859300][T31420] ? __lock_acquire+0x116c/0x2c30 [ 972.859318][T31420] kmem_getpages+0x49/0x900 [ 972.859332][T31420] cache_grow_begin+0x7b/0x2e0 [ 972.859346][T31420] cache_alloc_refill+0x359/0x3f0 [ 972.859359][T31420] ? check_preemption_disabled+0x51/0x140 [ 972.859371][T31420] __kmalloc+0x30c/0x330 [ 972.859382][T31420] ? tomoyo_realpath_from_path+0xd8/0x630 [ 972.859394][T31420] tomoyo_realpath_from_path+0xd8/0x630 [ 972.859431][T31420] tomoyo_path_number_perm+0x18f/0x690 [ 972.859474][T31420] security_file_ioctl+0x55/0xb0 [ 972.859487][T31420] __se_sys_ioctl+0x48/0x160 [ 972.859502][T31420] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 973.237433][T31420] do_syscall_64+0x73/0xe0 [ 973.241846][T31420] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 973.247729][T31420] RIP: 0033:0x45c1d9 [ 973.251608][T31420] Code: Bad RIP value. 13:36:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000007580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x7, 0x407, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r6, 0x200, 0x70bd29, 0x4, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000005}, 0x20000060) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '@?(:\xb4-)!!-\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x20041) 13:36:44 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 973.255669][T31420] RSP: 002b:00007f759c443c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 973.264066][T31420] RAX: ffffffffffffffda RBX: 0000000000013340 RCX: 000000000045c1d9 [ 973.272027][T31420] RDX: 0000000000000000 RSI: 0000000000002283 RDI: 0000000000000003 [ 973.279988][T31420] RBP: 00007f759c443ca0 R08: 0000000000000000 R09: 0000000000000000 [ 973.287944][T31420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.295992][T31420] R13: 00007fffa789f96f R14: 00007f759c4449c0 R15: 000000000078bf0c [ 973.374895][T31428] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 973.439057][T31435] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300), 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:44 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x2, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000008580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x43d9}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3e}]}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x78}}, 0x4004800) 13:36:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300), 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 973.662199][T31448] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300), 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 973.734343][T31448] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:36:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:45 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x10, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206010123000000000000000000000005000400000000000900020073797a308b2210a27494aa0000ac1a706fa00000050001"], 0x58}}, 0x0) 13:36:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000009580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16", 0x29) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2, 0x0) 13:36:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x3, 0x0) 13:36:45 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0xfffffffffffffffd, 0x40) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 13:36:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16", 0x29) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000a580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x10, 0x0) 13:36:45 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x2405, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 13:36:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16", 0x29) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1267, 0x0) 13:36:45 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x4c00, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000b580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8", 0x3e) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 975.199436][T31533] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1274, 0x0) [ 975.325810][T31533] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8", 0x3e) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:46 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x4c01, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1275, 0x0) 13:36:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000c580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x58}}, 0x0) 13:36:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x1276, 0x0) 13:36:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8", 0x3e) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000d580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:46 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x540d, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2201, 0x0) 13:36:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819", 0x48) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x20, 0x284, &(0x7f0000000100)="b92b138714d24e6a5b71685a6913851300ed71d0c2269c7e6d84d17d340b7e2311ca05af0a266253573514c2e53f157749229381ad39c1cb48ff2a0139c9b260301b81f41192025bdd0a4b6705bcb5ec2d5f6df7aea3452c70bd1501df3c589a01f7e2237624eaf16ce95610b428369938de7047728ffcaf04b42fa803ce0d74d43634970c1bc4021a7e80013c8be9689b59634a7050c7d59a41229de8cff466cb7e6c4c4de83f390ea03f55058b6294f2fe4f3d5691fe032aae0612811a8dc8b004ef", &(0x7f0000000280)="95272eb04f89e2ae167329b1a76d86c10ae921885890d9d577796d181cabd06a5db3aca0f64970fab7650f6a204f4ee532d378168641f1f3028dfd3dbc527d27b93b5733c125af12175f383eb190a04b8e4a63bb2087a5c2f019999e7193f56b042b424695d27d29136d843a999b8a79e4c8ec2c9d0e182e91ea0db1d247db40cdb905a43a5b20f4918d0075ef893dd0e26adee97d99e26b7e681b198e35577e95ce16c090fcbd48a157f45e182c93", 0xc3, 0xaf}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:36:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819", 0x48) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:47 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x541b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 976.388288][T31626] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 976.442616][T31631] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 976.695842][T31595] net_ratelimit: 73 callbacks suppressed [ 976.695859][T31595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 976.755046][T31595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 976.815560][T31595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 976.874757][T31595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 976.942501][T31595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 976.992479][T31595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 977.057363][T31595] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2202, 0x0) 13:36:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819", 0x48) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x32) 13:36:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000f580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:47 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 977.193344][T31647] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2203, 0x0) [ 977.250977][T31650] Dead loop on virtual device ip6_vti0, fix it urgently! [ 977.276531][T31647] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae", 0x4d) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 977.336068][T31650] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001c7a8f25f7ffacc5e17a1729ae3b44cecf122aab5312443278a4757be9a512cacc21d0a8949fcc6e155ca3e8b46cf16d69fdadae7445f1f5feab63e8ec2e08430f48162a24ab28529620156db86eca2c10a49a9502f5f07fc6463b37df57d90b256884e79340b561bd3c962861624ae610f25abdc7f0d6185c6d2e072a088d9f8fddbd089693ee884d90f9839ca0295e3a70c946d97c35e46b77c24fe6fcf7c333af1a482cf43a2f3a7fb29f9f734b702767a32f9c117d14bf5c7f81d16d548d5fe29f414"], 0x58}}, 0x0) 13:36:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000010580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:48 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x5450, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 977.382969][T31650] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) [ 977.488250][T31679] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae", 0x4d) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:48 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000040)) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x88000, 0x1, 0x8}, 0x18) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) fcntl$dupfd(r0, 0x0, r1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x0) 13:36:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2270, 0x0) 13:36:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000011580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:48 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x5451, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae", 0x4d) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000012580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2271, 0x0) 13:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1f", 0x50) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:49 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x5452, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:49 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:36:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2272, 0x0) 13:36:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1f", 0x50) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000840)={0x0, 0x0}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000010000005000400010000000900020073797a3000000000050001"], 0x58}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000680)=""/69, 0x45}], 0x7, 0xffffffffffff01fc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x7f, 0xab, 0xd2}, {0xfff9, 0x3, 0x2, 0x7f}, {0x0, 0x2, 0x4, 0xffffff74}, {0x4, 0x3, 0xc7, 0x7}, {0x2, 0x9, 0xff, 0x2000007}, {0x8001, 0x7, 0x4, 0x3}, {0x40, 0x20, 0x2, 0xff}, {0xb1, 0x8, 0x0, 0x8}]}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000780)={0x6, "942b585c3f31ff8d720138e602af956a3878fbbffae0b7a27e0e4ca95cae325aaa42c9b09f0161713bcee7779676c6fd2404c0277905d234cf514623a20c5c836e0633c1bef49f535d1cd8b31fd0ae02be4360bda1730410694810c18e38430f891ce20a05d449c68d8a0e2cd3461d2da072286f22c253639c0b4384a3f9a0aa"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) fcntl$dupfd(r4, 0x0, r5) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000180)=0x100000000) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x6, 0xe6a5}}, 0x28) 13:36:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000025580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:49 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x5460, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1f", 0x50) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 979.029423][T31774] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2275, 0x0) 13:36:49 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x5501, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000060580012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 979.113593][ T27] audit: type=1326 audit(1595165809.862:103): auid=0 uid=0 gid=0 ses=4 subj=_ pid=31767 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f01a code=0x0 13:36:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab", 0x51) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2276, 0x0) 13:36:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab", 0x51) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000680012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 979.869738][T31820] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 979.941374][ T27] audit: type=1326 audit(1595165810.682:104): auid=0 uid=0 gid=0 ses=4 subj=_ pid=31767 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f01a code=0x0 13:36:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020601010000ad6768758bf411380000000000000000000005008400000000000900020073797a300000000005000118a77c9bda561c32587bc1899a15e0c8222c06f9cf53daaba08d5f570493a5da994024fe3c5a5f951edced57e878a8fbcae2dcf89c0a388b6b4d9b7be800047ac2e3aae22dbaf8c4a7b7b6aabe3ea6043e31ab46c116e7ea0168935edffc7d369654212a9b0b9be3ff68c8b97c33c41da9fde8153646d576a50818493d0bacae20bf85780181ee0daf5020e27cabd5"], 0x58}}, 0x0) 13:36:50 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x5603, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2279, 0x0) 13:36:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab", 0x51) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000040012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227a, 0x0) [ 980.198970][T31847] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x7, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:36:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000680012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 980.411874][T31863] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x0, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:51 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x6364, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227b, 0x0) 13:36:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:51 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 13:36:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580212800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 980.795936][T31879] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 13:36:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, 0x0) 13:36:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x0, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:51 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 980.907772][T31903] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 13:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002f000010000000000000000000000000500040000000000090002007379a69700000000050001"], 0x58}}, 0x0) 13:36:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) 13:36:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580312800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81028c0}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c0801}, 0x20000080) 13:36:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227e, 0x0) [ 981.106557][T31925] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 13:36:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x0, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:51 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8902, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 981.165933][T31932] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 981.230324][T31932] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 981.237719][T31941] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 13:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 13:36:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227f, 0x0) 13:36:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580412800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:52 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8903, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2282, 0x0) 13:36:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000080)={0x0, 0x80000000}) fcntl$dupfd(r2, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000100)=""/149) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040)) setsockopt$inet_opts(r3, 0x0, 0x2, &(0x7f0000000280)="50e7f97ca6efe863f6461fef122bd1ce450037dc6c9dbf90cf471a771314962ce9535ec7c8fd2e6ecf57c8353d37148d4d2c822bd8e974c20e6123f5da3a26c93adc7a8e911bde21b889f3f2ff0857f6f1445f050a6f06916d5a539b962e73cba5a0e1835c7e693646c9e1add4aa7f67e77302210e64c7830060c4da32c78d514eb871ef860053e6ed8a6bc539994c2f6e124866456a62b4ec97ba82ffb135204fbb69dc0e97cf18b53e45960763c807", 0xb0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000150000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) [ 981.420509][T31962] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 981.438606][T31964] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 13:36:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 981.543801][T31980] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 13:36:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2284, 0x0) 13:36:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580512800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:52 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8904, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2285, 0x0) 13:36:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:52 executing program 4: get_thread_area(&(0x7f00000001c0)={0x800, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x701801, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x1409, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:36:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580612800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, 0x0) 13:36:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socket$inet6(0xa, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x1, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000100)) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x80000001, "47844764279c17fc9d554a249a43c387acc0fb82d59a3b8e4a1cb0acd83a5efd", 0x2, 0x1}) 13:36:52 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8906, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580712800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2287, 0x0) 13:36:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x804) 13:36:52 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8907, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580812800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2288, 0x0) 13:36:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="d7fffff402060101000000000000b0960000000000001d0500040000000000090002007322a3797a3000000000050ac7f6dcce12974db459dd52e0e9d87a521cde9a095d350231e51c"], 0x58}}, 0x40010) 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2289, 0x0) 13:36:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580912800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x1) 13:36:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:53 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4b2f, 0x0) 13:36:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000002cf7e1741000000000000000000000005000400000000000900020073f82030000000000500bce41b6414fa3537541f6fcf945d9bef"], 0x58}}, 0x0) 13:36:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580a12800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601010000000000000000572472b6d05afd79050001"], 0x58}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000100)="6ae5649a0bc1be868a05475bdae14e6d44c63189c9c4586ea4da8160648790f6c7fbb0cbe05d60c106cd4238176149c2f219c8bdbde62e9f52a4ab17e7e8ae8bb88f1307c6405b45058aba14f194bf25d17e8006932ee2aa19e3aff7b68686793199d3fbcdc37dfce085422ee9dc859eeb1faba034d7c3efb4c0672247fa920f71cd3e2c4a3b6bab81e02ba88668ef40ac91641f86d43fcbde9c5637344c80f7c36a6ad2dbb201bdd8ee558f83f9dcc2dda96af850ef0d62f8b972d634", 0xbd, 0x1}) 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4b3b, 0x0) 13:36:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4c00, 0x0) 13:36:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580b12800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:53 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8912, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4c01, 0x0) 13:36:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 982.838005][T32151] net_ratelimit: 58 callbacks suppressed [ 982.838012][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! [ 982.863770][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! [ 982.901151][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! [ 982.925261][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! [ 982.943844][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5382, 0x0) [ 982.960366][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580c12800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) [ 983.002166][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! [ 983.021099][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5385, 0x0) [ 983.066919][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! [ 983.098430][T32151] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:53 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8914, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580d12800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5386, 0x0) 13:36:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5411, 0x0) 13:36:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580e12800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:54 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8916, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x541b, 0x0) 13:36:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580f12800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x541d, 0x0) 13:36:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:54 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8918, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000581012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5421, 0x0) 13:36:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, 0x0, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYBLOB="000025bd7000fedbdf25030000000800010001000000895b24a095984e4b4a8aca0f57d9c3ba6186e6515519df1743f4c2c24d65a19c99e5ba"], 0x1c}, 0x1, 0x0, 0x0, 0x4008014}, 0x10004081) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x200000d0) 13:36:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5450, 0x0) 13:36:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000581112800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:54 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8933, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5451, 0x0) 13:36:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000581212800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup3(r0, r2, 0x80000) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000100)=""/132) 13:36:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5452, 0x0) 13:36:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5460, 0x0) 13:36:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) write$qrtrtun(r2, &(0x7f0000000040)="69ed01d9d859a201a89dfb54997640ecefe0b2397689a9efe378393010a16ab8df3b57d0c6da489feea7706bfd59feaffda8d3fd9490cca3b71eeb58332beee260ea1a35d1a38b4905", 0x49) 13:36:55 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8936, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000582512800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x5501, 0x0) 13:36:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x6364, 0x0) 13:36:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) 13:36:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000586012800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:55 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x7006, 0x0) 13:36:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x8912, 0x0) 13:36:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000000206010100000000000000000000000085000400000000000900020073797a3000000000050001ee5a023f5379135525b12aa43a1975870a5621bc2eea1a7ce127272a6845830e751c7cc8f56607eace55dccc3c4a377f7a74f7a96523446913f5ba8c516ef2cb4c17bcd7526abbe14efef4d01f6e949fb8dad9aca090d9e12dd798bb9c62a47540c9eea90e4315bb7fc040a0e36b25c884acbbec2563"], 0x58}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0907000000001a00000001"], 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5}]}}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xc8, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x5c, 0x2d, 0x0, 0x1, [{0x8, 0x0, [0x17, 0x1, 0x20, 0x17]}, {0xa, 0x0, [0x1, 0x13, 0x9, 0x1b, 0x7, 0x3]}, {0xe, 0x0, [0x10, 0x14, 0x1d, 0x0, 0x17, 0x1, 0x4, 0x2, 0x5, 0x1c]}, {0x8, 0x0, [0x6, 0x0, 0x9, 0x4]}, {0x5, 0x0, [0x20]}, {0xb, 0x0, [0xa, 0x6, 0x16, 0x10, 0x1b, 0xb, 0x3]}, {0x9, 0x0, [0x5, 0x9, 0x1c, 0x1e, 0x11]}, {0x9, 0x0, [0x9, 0x1, 0x1f, 0x9, 0x14]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1e, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xc, 0x1, "9c82b036104b3c78"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @local}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xff, 0x7}}]}, 0xc8}}, 0x810) 13:36:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580036800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:55 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8941, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x8933, 0x0) 13:36:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580036800c0001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:56 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x894c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x89e1, 0x0) [ 985.426310][T32398] __nla_validate_parse: 49 callbacks suppressed [ 985.426319][T32398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x89f1, 0x0) 13:36:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100080000000000000000000005000400000000000900020073797a3000000000050e010dbe535b8d09e8043826332512e7e5b252cffeee7005eeb7c124f83942c9568b637b73e341986938e5ed01bed091bf815c3160e355d405"], 0x58}}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x1b30}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}], 0x17, 0x0, &(0x7f00000000c0)="cb1cd0c561ff8085145eb03b5168ceb403fd9ee3f8284b"}) 13:36:56 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8980, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000058001280040001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) [ 985.845574][T32453] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xae01, 0x0) 13:36:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) [ 985.932973][T32453] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:56 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8981, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000058001280070001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:36:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xae04, 0x0) [ 986.073879][T32482] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 986.106850][T32488] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 986.177013][T32494] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 986.221345][T32496] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. 13:36:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:36:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xae41, 0x0) 13:36:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) fcntl$dupfd(r2, 0x0, r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000002c0)={@fixed={[], 0x12}, 0x4}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000040)=0x8) r7 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='@,\x00', r7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0200010103000000000000000000"], &(0x7f0000000100)=0x12) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r8, 0xbf, "96fac205ddf2e16909f3ee9d2267a44e1cf0c5b1afea1f20dccd3dad01e1d753587ef139ba3ef3b4adfc934c7abad5eb833943601822db90ec983533368c5f4aced3933df185e21bd8ef2a693d3596b24fb884b521f7bf6a4e1a8e2d5b77045aed41f870766d8e9f22f62b51296aabf6cc4895ab87de3ab39192f557fba308bc93d0e17c39c4757e3f485c581d889f78ce0fb60ee8a2e114640e8b4590c8c42d6f65452471ed45954ff9972a104fb53aa5d58d8b8499891889084d2367bede"}, &(0x7f0000000280)=0xc7) 13:36:57 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000058001280080001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 986.389472][T32509] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 986.400832][T32510] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:36:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xae60, 0x0) 13:36:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) [ 986.493620][T32525] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. 13:36:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xae80, 0x0) 13:36:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000058001280270001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:57 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8983, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x400454ca, 0x0) 13:36:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@getchain={0x54, 0x66, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x7}, {0x2, 0xf}, {0x10, 0x5}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x24d}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}]}, 0x54}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)={'ip6gre0\x00', r3, 0x29, 0x5, 0xff, 0x9, 0x12, @private1, @local, 0x7800, 0x0, 0x1, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff36866a8c09c88eb34d00000000090001006866"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newqdisc={0x204, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0xfff1}, {0x10, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe8}, @TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x4, 0x48, 0x2, 0x7fff, 0x10d, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0x1, 0x7f, 0x3, 0x3, 0x1, 0x0, 0x2, 0xa}}, {0x18, 0x2, [0x2, 0x0, 0x8, 0x4, 0xff, 0x5, 0x6, 0x6, 0x3, 0x81]}}, {{0x1c, 0x1, {0x1, 0x7, 0x0, 0x5, 0x2, 0xed, 0x9, 0x4}}, {0xc, 0x2, [0x2, 0xffff, 0x3, 0x8000]}}, {{0x1c, 0x1, {0xd7, 0xad, 0xfff8, 0x3, 0x1, 0x4, 0x7, 0xa}}, {0x18, 0x2, [0x7, 0xff, 0x7f, 0x3ff, 0x2, 0x9f1, 0x1563, 0x7c5, 0x2, 0xabd]}}, {{0x1c, 0x1, {0x81, 0x40, 0xfff, 0x1000, 0x1, 0x4b57, 0xde5, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x7]}}, {{0x1c, 0x1, {0x8, 0x1f, 0x100, 0x0, 0x2, 0xc78, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0xff81]}}, {{0x1c, 0x1, {0x5, 0x4, 0x0, 0x3, 0x1, 0x80, 0x3, 0x8}}, {0x14, 0x2, [0x100, 0x7f, 0x395e, 0x20, 0x6, 0xe00, 0x400, 0x70]}}, {{0x1c, 0x1, {0x20, 0x9, 0xfffc, 0x5, 0x2, 0x363c26d7, 0x26, 0x2}}, {0x8, 0x2, [0x3, 0x7c37]}}]}, @qdisc_kind_options=@q_pfifo={{0xa, 0x1, 'pfifo\x00'}, {0x8, 0x2, 0x800}}, @qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{0x2, 0x32, 0x1ff, 0x0, 0x4, 0x4}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf063bfdc2168dcab}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x0, 0x1, 0x8001}}]}}}]}, 0x204}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfd, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44804) 13:36:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000058001280540001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:57 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40049409, 0x0) 13:36:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40085503, 0x0) 13:36:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r6}) 13:36:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0400006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40086602, 0x0) 13:36:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0xa, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:36:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4008ae89, 0x0) 13:36:58 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a1, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800cab00006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601010000000000000000000000001dba9822000000000900220073797a3000400000051501c7d7f37086b478484de9b95d77b940798f613e054bbeccbf144f90ca73d61a0f86d056b378bf1e935490ec051e8ee2052d98db71b066b587af4209712716e2c58f4f93b40aef2becb302446d39cbc02eb7696192d2183a57b2975585a07bf898f066c2791635bd551618c13046e2e7fc8423c186f5168d9cd2409df24b8bf1a840810a49"], 0x58}}, 0x0) 13:36:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40186366, 0x0) 13:36:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'erspan0\x00', {}, 0x8}) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601010005000000009254e838f495c70d0400000000000900020073797a3080000000050001"], 0x58}}, 0x0) 13:36:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) 13:36:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0201006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4020565b, 0x0) [ 987.872088][T32635] net_ratelimit: 79 callbacks suppressed [ 987.872095][T32635] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r5}) [ 987.937138][T32635] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xc084}, 0x0) [ 987.991392][T32635] Dead loop on virtual device ip6_vti0, fix it urgently! [ 988.071613][T32635] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:58 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x89e0, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4020940d, 0x0) 13:36:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0301006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 988.112047][T32635] Dead loop on virtual device ip6_vti0, fix it urgently! [ 988.174200][T32635] Dead loop on virtual device ip6_vti0, fix it urgently! [ 988.231287][T32635] Dead loop on virtual device ip6_vti0, fix it urgently! [ 988.306886][T32635] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:36:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="48000000100005079085cf09f47645e5c76aac00002cf6c21b1103ea0b0000", @ANYRES32=r7, @ANYBLOB="c40f7cc597da0002000000000014b17c18cbbba5"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x12, 0x10, 0x70bd2c, 0x25dfdbfc, {0x27, 0x20, 0x43, 0x9, {0x4e21, 0x4e22, [0xba, 0x3ff, 0x3, 0xc84], [0x70000000, 0x20, 0x7f, 0x1], r7, [0x3ff, 0x7ce]}, 0x5, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) write$smackfs_cipso(r8, &(0x7f0000000100)={'/dev/kvm\x00', 0x20, 0x3c, 0x20, 0x6, 0x20, [{0x6c}, {0x3b}, {0x44}, {0x8a}, {0x74}, {0x2}]}, 0xb3) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x3) 13:36:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) 13:36:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4020ae46, 0x0) 13:36:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0401006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:36:59 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xae01, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40286608, 0x0) [ 988.501218][T32710] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:59 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xae04, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:36:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x20}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x8080, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:36:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0501006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 988.567448][T32710] Dead loop on virtual device ip6_vti0, fix it urgently! 13:36:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) 13:36:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40305839, 0x0) 13:37:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) 13:37:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0601006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4040ae77, 0x0) 13:37:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x4, 0x5, 0x41, @empty, @private0={0xfc, 0x0, [], 0x1}, 0x80, 0x7, 0x100, 0x3d}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', r2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x10000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) io_destroy(0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r10, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESOCT=r6, @ANYRES16, @ANYRESOCT, @ANYRES64=r7, @ANYRES32=r10], 0x58}}, 0x0) 13:37:00 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xae41, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4090ae82, 0x0) 13:37:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r6}) 13:37:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0701006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601010000000000000000000000000500040000000000090002e872797a3000000000050001"], 0x58}}, 0x0) 13:37:00 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xae80, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x41015500, 0x0) 13:37:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0801006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x4400ae8f, 0x0) 13:37:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r6}) 13:37:01 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000540)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000004c0)={0x4, 0x6, 0x7d, 0x342, 0x2}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ttynull\x00', 0x80, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000005c0)="53ef8c695fd2f2a6b6d46530fbbf0ab38ddecce9ae407e299102e39ef4709a0fd3906619ba4474d57536d581dd15d916010e9ffadd1aa3a2571cfa54270b3d55712568b6f2d3a8768975d39e7e2cf0585d50bac4b616367132905e4a313c") syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000100)={0x60, 0x5, 0xef, {0xef, 0x15, "f181bc787e67663e0a20a6ac70592c929a823872ccf783ab146ff27479a7b142d9793e1f0fd7bebc3ff5c35dd392d2bc22d47a362622fa74e5faeb405f052d3a1fa434f2034b5cc628af39e52f33a2270948b71fc180647d53bdd5773916161774133ba1c916afc5172221f1f657be4d1f6b9f7710036883fe5332c4a21e40c886eb05c7cdf8b5812f7908b35e5751ddea8daa4d65f819143d1992f8900c057a948224775725187218de5f81be0bef6170f82ef7a9803d3325b3761f90b3bc84be653e9babbe6c82503daa0f396c4cef31759e15fb51d2637b99a4dfe7fc1e389f123e8c67f04604c8914b4c59"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0x3, 0x2b, "9d8aae122977af7100422e2e9072f69295d86663629ac4a7879b4a9888bd4b614e3b9134f5ee1321158f3f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xbe}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000300)={0x20, 0x0, 0x92, {0x90, "9bd194bc9b58098dae1e7005aa2cd9fa8a1da479f7ba0aa9eb5f23ea4e0ac3ea54b4b134d2186e7358cc8bf9a165567c438bba376b14345d5ed4fbe6dfdce18376bf51c082adb1726a1dd8b6cc71f9786a3d9cecee66c953098e048a930f6af40e27f771b2ef8b4739f06cacb41b62cf03da3371186a9f6341153c50452c15f4c26636a8ff53fb5f67619ff26de92a67"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x6}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020000000005000400000000000900250073797a000000000005000100"/43], 0x58}}, 0x0) 13:37:01 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x40045010, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 990.478311][ T377] __nla_validate_parse: 35 callbacks suppressed [ 990.478318][ T377] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x80085502, 0x0) 13:37:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r6}) [ 990.650410][ T387] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x80086301, 0x0) [ 990.720747][ T2769] usb 5-1: new high-speed USB device number 2 using dummy_hcd 13:37:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0901006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:01 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x400454ca, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r6}) [ 990.892797][ T403] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 991.005959][ T415] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 991.020670][ T2769] usb 5-1: device descriptor read/64, error 18 13:37:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x8040ae9f, 0x0) 13:37:02 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x40047459, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r6}) [ 991.450654][ T2769] usb 5-1: device descriptor read/64, error 18 [ 991.740511][ T2769] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 992.010434][ T2769] usb 5-1: device descriptor read/64, error 18 [ 992.400455][ T2769] usb 5-1: device descriptor read/64, error 18 [ 992.526551][ T2769] usb usb5-port1: attempt power cycle [ 993.163170][ T0] NOHZ: local_softirq_pending 08 [ 993.240305][ T2769] usb 5-1: new high-speed USB device number 4 using dummy_hcd 13:37:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2600c040}, 0x0) 13:37:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0a01006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r6}) 13:37:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x81a0ae8c, 0x0) 13:37:04 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x40049409, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 993.433382][ T2769] usb 5-1: device descriptor read/8, error -71 [ 993.469494][ T457] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0045878, 0x0) [ 993.509890][ T465] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 993.521058][ T459] net_ratelimit: 54 callbacks suppressed [ 993.521064][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! [ 993.557590][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! [ 993.580327][ T465] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:37:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0045878, 0x0) 13:37:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000004900021e73797a3000000000050001"], 0x58}}, 0x4000) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x20000000010, &(0x7f0000000100)) ptrace$cont(0x20, r1, 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='net/tcp6\x00') ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000080)) [ 993.619475][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! [ 993.648229][ T478] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 993.667414][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! [ 993.674884][ T2769] usb 5-1: device descriptor read/8, error -71 [ 993.697218][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! [ 993.706119][ T485] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:04 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x40085503, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc008ae91, 0x0) [ 993.720320][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0b01006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) [ 993.772010][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! [ 993.797285][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! [ 993.808698][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) [ 993.818183][ T459] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0104320, 0x0) [ 993.854310][ T497] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x58}}, 0x20001080) 13:37:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0c01006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:04 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x40086409, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0189436, 0x0) 13:37:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="a59d0db820193d6c5da6c91801d10dc566bb89032e99f94a117a04a7a8bf2584422cd26366e2243e92054760627e3e065faf6fd31468813a9cd080707f596f904c567140524b354082a339ba154ce59247ce16", 0x53}], 0x2}, 0x8050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r2 = syz_open_dev$vcsu(0x0, 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$inet6(0xa, 0x0, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:37:04 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe8f4, 0x301a80) dup(r3) 13:37:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc020660b, 0x0) 13:37:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0d01006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$dupfd(r0, 0x0, r1) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @dev={[], 0x26}, @empty, @random="901e6fafbb47"]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:37:05 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a1, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:05 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x40086602, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc0481273, 0x0) 13:37:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a30000013f750a9c69cc905139f47ef464351022ab0018f45489658eee8076acf5cee70e33843a4977a539253b317d6d2c1a3838616476f982b6c063733b544929c8920a652b65be946e86c7e55634b7dac440114ac790f7a8b9a6fd0302faf53aafb06b85e7b5ce26a10edf17ded829cb3e1cee98faf60fd61ffd6c3a446f845c66f577681457910eb81afb65d0d0e781b6ac3138b543f234ece14e86a42d6ae47"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r2, 0x3, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) 13:37:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0e01006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0xc06864a1, 0x0) 13:37:05 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a1, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:05 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x40186366, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x41e6c0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:37:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0f01006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4a5, 0x440) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:37:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x3e, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x2200c880}, 0x0) 13:37:06 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a1, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x540) ioctl$SG_GET_VERSION_NUM(r1, 0x2276, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffd, 0x97, 0x3, @scatter={0x2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/73, 0x49}, {&(0x7f0000000080)=""/78, 0x4e}]}, &(0x7f0000000140)="79ccd9ffefc5bbb5631b09aa28dd7b4d190de0029fb175742924633c4650e9d09ff7b5052855104516517cb32a205cf6d19066caabe469e12f20f9d1b84ea6fb82365350200cb87df64319c12d33d6c9a50e5c7fcea1b6db228381595fd23fa111fedb3e6ffe8cf7f7465d3d1b96227c89b71400c39a7022e3c08cfa3666b2f1e3ff747025c76a6a2874931ff55c3c006805488637d501", &(0x7f0000000200)=""/62, 0x1000, 0x10000, 0x3, &(0x7f0000000240)}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) fcntl$dupfd(r4, 0x0, r5) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000400)={0xf000000, 0x8, 0xd188, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x9909ce, 0x1, [], @p_u8=&(0x7f0000000380)=0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000440)={0x101ff, 0x3383e657a83e1aae, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) fcntl$dupfd(r2, 0x0, r3) read$smackfs_cipsonum(r3, &(0x7f0000000340), 0x14) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 995.451169][ C0] sd 0:0:1:0: [sg0] tag#2432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 995.461580][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB: opcode=0x79 (reserved) [ 995.468611][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[00]: 79 cc d9 ff ef c5 bb b5 63 1b 09 aa 28 dd 7b 4d [ 995.478230][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[10]: 19 0d e0 02 9f b1 75 74 29 24 63 3c 46 50 e9 d0 [ 995.492150][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[20]: 9f f7 b5 05 28 55 10 45 16 51 7c b3 2a 20 5c f6 [ 995.501754][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[30]: d1 90 66 ca ab e4 69 e1 2f 20 f9 d1 b8 4e a6 fb [ 995.511332][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[40]: 82 36 53 50 20 0c b8 7d f6 43 19 c1 2d 33 d6 c9 [ 995.520919][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[50]: a5 0e 5c 7f ce a1 b6 db 22 83 81 59 5f d2 3f a1 [ 995.530497][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[60]: 11 fe db 3e 6f fe 8c f7 f7 46 5d 3d 1b 96 22 7c [ 995.540075][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[70]: 89 b7 14 00 c3 9a 70 22 e3 c0 8c fa 36 66 b2 f1 [ 995.549610][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[80]: e3 ff 74 70 25 c7 6a 6a 28 74 93 1f f5 5c 3c 00 [ 995.559188][ C0] sd 0:0:1:0: [sg0] tag#2432 CDB[90]: 68 05 48 86 37 d5 01 [ 995.652956][ C0] sd 0:0:1:0: [sg0] tag#2433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 995.663336][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB: opcode=0x79 (reserved) [ 995.670408][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[00]: 79 cc d9 ff ef c5 bb b5 63 1b 09 aa 28 dd 7b 4d [ 995.679981][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[10]: 19 0d e0 02 9f b1 75 74 29 24 63 3c 46 50 e9 d0 [ 995.689528][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[20]: 9f f7 b5 05 28 55 10 45 16 51 7c b3 2a 20 5c f6 [ 995.699102][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[30]: d1 90 66 ca ab e4 69 e1 2f 20 f9 d1 b8 4e a6 fb [ 995.708675][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[40]: 82 36 53 50 20 0c b8 7d f6 43 19 c1 2d 33 d6 c9 [ 995.718248][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[50]: a5 0e 5c 7f ce a1 b6 db 22 83 81 59 5f d2 3f a1 [ 995.727833][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[60]: 11 fe db 3e 6f fe 8c f7 f7 46 5d 3d 1b 96 22 7c [ 995.737416][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[70]: 89 b7 14 00 c3 9a 70 22 e3 c0 8c fa 36 66 b2 f1 [ 995.746993][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[80]: e3 ff 74 70 25 c7 6a 6a 28 74 93 1f f5 5c 3c 00 [ 995.756587][ C0] sd 0:0:1:0: [sg0] tag#2433 CDB[90]: 68 05 48 86 37 d5 01 13:37:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:06 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x4020940d, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c1001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:06 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$dupfd(r0, 0x0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) sendmsg$AUDIT_GET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x3e8, 0x800, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x6001815}, 0x20000011) fcntl$dupfd(r2, 0x0, r3) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000040)) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=""/160, &(0x7f0000000180)=0xa0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) fcntl$dupfd(r4, 0x0, r5) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060101000000000000000000010200000000000000c35dbf9a5a217022d0b3b476e98e75797c621f000005000500010000000000000000000000098f84c35286664a391c407eae84ebda3e13f4f5a7b3e4"], 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x4044890) 13:37:06 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8980, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:06 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'veth0_macvtap\x00', {}, 0x3}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2276, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) fcntl$dupfd(r3, 0x0, r4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000080)) ioctl$SG_GET_NUM_WAITING(r1, 0x2283, 0x0) [ 996.118057][ T681] __nla_validate_parse: 17 callbacks suppressed [ 996.118063][ T681] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x3c804) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = gettid() r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$setopts(0x4207, r1, 0xfffffffffffffffc, 0x6c) tkill(r2, 0x2) ptrace$cont(0x18, r2, 0x0, 0x2000000000000) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x7) tgkill(r1, r2, 0x2) 13:37:07 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8941, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x200) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x725, 0x9}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) [ 996.265013][ T719] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:07 executing program 3: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) io_destroy(0x0) 13:37:07 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x4020ae46, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c1101006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 996.403024][ T733] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 996.425950][ T737] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 996.500455][ T742] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 996.562835][ T747] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 13:37:07 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8941, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) fcntl$dupfd(r2, 0x0, r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000000c0)={r6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000040)={r6, @in={{0x2, 0x4e21, @local}}, 0x3, 0xfff, 0x5, 0x8, 0x4275}, &(0x7f0000000100)=0x98) r7 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) fcntl$dupfd(r1, 0x0, r7) write$P9_RLCREATE(r7, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x8, 0x2, 0x3}, 0x4}}, 0x18) 13:37:07 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x402c5639, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c1201006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0x0) [ 996.759463][ T766] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:07 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8941, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 996.886442][ T778] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 996.920988][ T788] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x204500, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$dupfd(r0, 0x0, r1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x9, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x2283, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x410400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000000c0)=""/102) 13:37:07 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x4090ae82, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c2501006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x4044000) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa40b05b2408769f9}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) accept(r1, &(0x7f0000000100)=@hci, &(0x7f0000000080)=0x80) r7 = dup(0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000040)=0x5) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) [ 997.105961][ T804] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:08 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:08 executing program 3: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) 13:37:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c6001006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:08 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x41015500, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="588d79cec606010100000000000000000080000005000402000000000900020073795c304d6400000000050001"], 0x58}}, 0x0) 13:37:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x40}, @mcast1, 0x8, 0x200, 0x4, 0x200, 0x2, 0x1100024, r5}) 13:37:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$dupfd(r0, 0x0, r1) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/164, &(0x7f0000000040)=0xa4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000000000000005000400000000000900020073797a6700000000050001"], 0x58}}, 0x0) 13:37:08 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0003006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:08 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x80085502, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x20040091}, 0x1) 13:37:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:09 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0005006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000280)=""/4096, &(0x7f0000000040)=0x1000) 13:37:09 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') r4 = socket(0xa, 0x800000003, 0x20000) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={0x1c, r3, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xffffffffffffff6a}}, 0x410c) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000040), 0x8, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/209) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="0500000000000000785e251166c157d44e35cf0bc8a351b5112c6e30400d08000000000000009ef339bb145cf1d7f327652bcce50317a88fb041043f76e00134a81989db0321a35fa5f8d674f425fa011f195c49b5c58b7629ce4318d880f10c724be55afad7efa4778115bcf5377abc866f0d108aa6d8fa1f0d3156e49e1dcc1fb8ad563ae3fb3effffffff3203000000d0a66703c58de2857f473f06c6c7884ee7c8efd26ad96dec8cb284d082d97e1d7b6660ec6d06ec89ee95376cea55525a990774ac3e6af94954c998dbe33f0e905937a8e7017d94591b0bd558aada1aa302bae34dd609b494cf152ad2ca4c5c8bd2fc2b160a6000000000000000000000000000000000129b754493d533a672b553ba2059ea4ce900000000000000da6e530a8d3d17e3d4bb6272aacba440eba2f019b755645edd4fa451727211f8894dc4e790ae4ab80c8ed409a4d54a721a4359ea6f575ae62a954041894a042d80902acbab3a86275064f7d78fa3dcf494963e22e1507195d98447a75334e07721a1a34ba70aff174aaa762bda74a619b20f5947944f0d9566c279a8f88349f94b81a69fbf9c26e6ea346c3b1acc043b19ad558aa4c695718bacfd70cc2b4f3a7d5ed72c3af3474021cd4dab6a17878befc3c802af0d0919895165d1ea5c5b06d0f6f2ae6e725f7bf4528e5e58728490f9af6a093ed0feee94f94e4322fc2c80f12840813d2096aa9623c7abe17c2b42ca77aeadaa", @ANYRES16=r5, @ANYBLOB="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"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x14c, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x12}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfe85}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x100b}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1f}, {0x8, 0x15, 0x134}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2000003}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x800) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000300)=@netrom) 13:37:09 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x80086301, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000000)=0x2) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 998.647601][ T908] net_ratelimit: 79 callbacks suppressed [ 998.647619][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0006006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:09 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) [ 998.728402][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! [ 998.759097][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206810100ecffffffffffffff0000000500042000000000090002000400000000000000050001"], 0x58}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x10001, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0907000000001a00000001"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x34, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "03e9c93b33"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x44850) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x700c2, 0x4, 0x14}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000700)=r2, 0x1) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="080000000000000002004e23ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e21ac1414aa00000046e83c64486ce8f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f00000100"/656], 0x290) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x4, 0x447, 0x9, 0x9, 0x1a, "b33c8ce903507175"}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000005c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x6, 0x7, 0x10, &(0x7f0000ffc000/0x4000)=nil, 0x9}) [ 998.790067][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:09 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x8008f512, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 998.848494][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! [ 998.865201][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:09 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) [ 998.921398][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! [ 998.988606][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! [ 999.044219][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! [ 999.103104][ T908] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0110006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007070000004007a2a30005100000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x22}, 0x80, r6}) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="e80088d9", @ANYRES16=r8, @ANYBLOB="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"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:37:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000002000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:37:10 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x80108906, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:10 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:37:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x6f, 0x2, 0x6, 0x1f, 0x8, 0x100000000}, &(0x7f0000000080)={0x400, 0x7, 0x2, 0x9, 0x9, 0xff, 0x0, 0x1f}, &(0x7f0000000100)={0x550, 0x7ff0, 0x7fffffff, 0x6, 0xffffffffffff0000, 0x9, 0x1, 0x7}, &(0x7f0000000140)={0x77359400}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:37:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:37:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0014006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:10 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r1}) 13:37:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESHEX=r5, @ANYRESDEC=r4, @ANYRES16=0x0], 0x58}}, 0x20000010) 13:37:10 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x80108907, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c003f006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40a, 0x40a080) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x120) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xff}, @window={0x3, 0x8, 0x7}, @mss={0x2, 0xa288}, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0x2f08, 0x3ff}, @sack_perm, @window={0x3, 0xc9, 0x762d}, @sack_perm], 0xa) 13:37:11 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r1}) 13:37:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020000000000007027e031d4f8952ccbe60005000400000000000900020073ff00300000000005"], 0x58}}, 0x0) 13:37:11 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x4, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = socket(0x100000000011, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) dup3(r2, r5, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:37:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x40080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x128, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4044000}, 0x400c1) 13:37:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0040006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:11 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r1}) 13:37:11 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0xff) mq_open(&(0x7f0000000080)='\x00', 0x0, 0x8, &(0x7f00000000c0)={0x800, 0x2, 0x1f, 0x6}) 13:37:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:12 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$dupfd(r0, 0x0, r1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000221af57bde82685c8f1a80ecd989506b00000073797a3000000000050001dde01c4e17d5fb949e6304"], 0x58}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80, 0x0) 13:37:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c02e0006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:12 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0xffffffffffffff7f, 0x10d000) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x18282, 0x0) bind$ax25(r1, &(0x7f0000000040)={{0x3, @default, 0x7}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 13:37:12 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xc008ae09, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:12 executing program 3: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7}, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 1001.436435][ T1118] __nla_validate_parse: 21 callbacks suppressed [ 1001.436442][ T1118] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) capget(&(0x7f0000000080)={0x19980330, r4}, &(0x7f0000000100)={0x1, 0x1, 0x4, 0xc1d, 0x6, 0x72b}) 13:37:12 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:12 executing program 3: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2276, 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) [ 1001.594391][ T1142] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1001.596279][ T1143] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:12 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xc008ae91, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 1001.670915][ T1142] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:12 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c03ff006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x58}}, 0x4000000) 13:37:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000100)={{{0x1}}, 0xb9, 0x1, &(0x7f00000002c0)="758d1b6edbd3176d3dcf63c7e6419d8eb998ff7994c70fadf42a28a804aa8f2d681fc99602f4cae99268455d4d0cfff115104ba0bf0685c7978c5395c52b220db2d1839fbce9c3d4bdfa7ac7cbfc38d8518ecdce113e604f6a526de6d76bb8fdcba5fa20a5c9acb733734bf6f673decf3b3afb13edd3d340c6b989fe2d20dd86080bb66c6936d0657ea4830edd5061c1650c6155f79bee39ee9e8aa00ea72f7dc0f6609720101b8926178e88c2395636a9865ad9533d94a536"}) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) fcntl$dupfd(r3, 0x0, r4) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x20c, 0x1, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000080) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0xfffffffffffff001, 0x4, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000140)=0x5) 13:37:12 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0189436, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:12 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) [ 1002.024887][ T1194] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:12 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010199180000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xfffffff, 0x9ef0, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909cf, 0xffffff01, [], @ptr=0x20}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r4, 0xbe20000) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000140)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) fcntl$dupfd(r5, 0x0, r6) setsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0xe4f37fb77b87939a, 0x0) 13:37:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffc, 0x18, 0xf9, @buffer={0x0, 0xc6, &(0x7f0000000040)=""/198}, &(0x7f0000000140)="5035fed4b1c48b1f539ce194b91fb9374e14229fc3966b3b", &(0x7f0000000180)=""/125, 0x7, 0x10000, 0x0, &(0x7f0000000200)}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000340)=0x10) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 1002.135667][ T1222] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 13:37:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0002006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 1002.245007][ T1231] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:13 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xc020660b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:13 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) [ 1002.368518][ T1231] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x101001) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:37:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x6045) 13:37:13 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0xc038563b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:13 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0003006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x80900) close(r0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) write$P9_RSTATFS(r2, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x3, 0x2, 0x1, 0x800, 0x800, 0x0, 0x3f, 0x3, 0x5}}, 0x43) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) ioprio_set$uid(0x0, r3, 0x0) 13:37:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601010000000000000000000500040000000000090002007379000000000500010000000000"], 0x58}}, 0x0) 13:37:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0004006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:13 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 1003.125035][ T1304] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x8, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) acct(&(0x7f0000000000)='./file0\x00') 13:37:14 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 1003.666316][ T1293] net_ratelimit: 75 callbacks suppressed [ 1003.666329][ T1293] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1003.720967][ T1293] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40100, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:37:14 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0x0}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0005006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={@none, 0xffffffff}) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 1003.779342][ T1293] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x1111c1) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 1003.873286][ T1338] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1003.894337][ T1341] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 1003.927490][ T1341] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYBLOB="5c4e248b1f52f4a8319d3a13bce61ad339147c0086e09e1ad2392d3f3bb1cc776622cceaf39cac4f4c42f9fabd456c782f07a595382a53217726afb4fd25cdf4787688edfc2edbc8bf279fe873916e3c24821f92a208a6dd541a9797ff50e2784b8fbb9e52b7954f24a3f00ff1d899aa74bf869fa8bbc1fdb1fcf4f25d6a39f3227bfa8487b18b39fd", @ANYRES16=r0, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x40002) 13:37:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0006006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) [ 1003.981660][ T1341] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$dupfd(r0, 0x0, r1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0xff, 0x6, 0x4, 0x0, 0x9, "0b75d47a2c3cbc46"}) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x83, 0x40000) ioctl$SG_GET_NUM_WAITING(r2, 0x2283, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) fcntl$dupfd(r3, 0x0, r4) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x124, 0x7, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xd4, 0x7, 0x1, 0x0, "e74f7e7805063ecea40c1eabfa3ab344be1d3cef7a4fd7613aed97e262c1db68ecb4cc7c7e98543c689b6ca8eb1836296d8867aa6c3b5b93715d20deaea3f5fe03693a417855595fcca98fe2d796cec1f71b3b3182ed386818a418b572059e6b785eafb3b6c0dcff067deee73d1fa2ed111a5271710b9a11ddae68dc33c653724370ef6f46135676cac8ab6b3f51797ebafebfc3b0d942bf0a16bfaf08ef979e7a27f61bdef31494bd37f579936c6aea1a66f109c810fc86d8465101eac97967522add78431f287dea7fe64e6671d12d"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x124}}, 0x0) 13:37:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 1004.048246][ T1341] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1004.111709][ T1341] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1004.140569][ T1341] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1004.200233][ T1341] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:15 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x3}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 13:37:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0008006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x20000) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x2, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4c055}, 0x0) 13:37:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x3ffffffffffffe, 0x428000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "38664bf4dd4d8cf0"}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x5b, 0x8, 0x0, 0x3, 0xfffffffffffffff9, 0x8, 0x9, 0xfffffff8, 0x800, 0xffff0000, 0x1, 0x7, 0xfffffff8, 0xfffffeff, 0xa, 0x1c, {0x6, 0xf5a4}, 0x7f, 0x76}}) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) fcntl$dupfd(r3, 0x0, r4) getsockopt$inet6_dccp_buf(r4, 0x21, 0x80, &(0x7f0000000080)=""/218, &(0x7f0000000180)=0xda) 13:37:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0010006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:15 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x48080) 13:37:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:15 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x4}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0014006d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0xfffffffffffffffd, 0x101840) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:37:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601010000000000000000000000000500000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:37:16 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x5}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000040)) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0xa10000, 0x3, 0x1000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9e0902, 0x6, [], @p_u16=&(0x7f0000000080)=0x6}}) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0x400, 0xffffffff, 0x6, 0x7f]}) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) 13:37:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:16 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:37:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0010016d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) recvmsg$can_j1939(r0, &(0x7f0000000800)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/228, 0xe4}], 0x8}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 13:37:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:17 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x6}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0x3, 0x100, 0x1, {0x8af, 0x16, 0xc7, 0x6}}) 13:37:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) fcntl$dupfd(r3, 0x0, r4) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2d, 'memory'}, {0x2b, 'io'}]}, 0x16) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x890}, 0x20001080) 13:37:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c00e0026d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0000ab6d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x22001, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x8d802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xfffffe74}, {0xc, 0x5, [{0x6, 0x0, 0x0, 0x8}]}}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r7, 0x29, 0x5, 0x8, 0x8, 0x12, @mcast1, @private0, 0x8000, 0x7800, 0x100, 0x5291}}) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) 13:37:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x58}}, 0x0) 13:37:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:17 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x7}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001026d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in=@remote, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0x110) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) tkill(0x0, 0x2) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x7f, 0x8, 0x58, 0xff, 0x0, 0x3, 0x10000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x1000, 0xffffffffffffffff, 0x101, 0x9, 0x20d, 0xcd, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000000)) 13:37:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x9, 0x10}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) fcntl$dupfd(r4, 0x0, r5) setsockopt$packet_buf(r5, 0x107, 0x6, &(0x7f0000000140)="5fd2476072ecbf60e28ad0270b34d17179d9bc4c17b1f96ffac0c0c4e8b4f8b1954247bc03f194b5818d7cbdaa6bff4f0b3371421cc643", 0x37) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) 13:37:18 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x8}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 1007.766336][ T1630] __nla_validate_parse: 3 callbacks suppressed [ 1007.766344][ T1630] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:37:18 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x2, 0x3, 0x4, 0x0, 0x7f}) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x2283, 0x0) [ 1007.927373][ T1665] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001036d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:18 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:37:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a3000000000050001"], 0x58}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xa}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x65}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x27}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x16}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8805) [ 1008.155461][ T1703] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1008.209766][ T1703] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:37:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) 13:37:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x200002) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:37:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001046d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:19 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0x2]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:19 executing program 3: syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2276, 0xffffffffffffffff) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 1008.677006][ T1728] net_ratelimit: 72 callbacks suppressed [ 1008.677024][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x3ffffffffffffe, 0x428000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "38664bf4dd4d8cf0"}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x5b, 0x8, 0x0, 0x3, 0xfffffffffffffff9, 0x8, 0x9, 0xfffffff8, 0x800, 0xffff0000, 0x1, 0x7, 0xfffffff8, 0xfffffeff, 0xa, 0x1c, {0x6, 0xf5a4}, 0x7f, 0x76}}) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) fcntl$dupfd(r3, 0x0, r4) getsockopt$inet6_dccp_buf(r4, 0x21, 0x80, &(0x7f0000000080)=""/218, &(0x7f0000000180)=0xda) 13:37:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001056d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@null, @null, 0x2, 0x44}) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) [ 1008.777836][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1008.815436][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:19 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0x3]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x80000001, 0x8}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x1, 0xfffa, 0x8000, 0x1, 0x9, 0x8000, 0x6, 0xfffffb81, r4}, &(0x7f00000002c0)=0x20) fcntl$dupfd(r1, 0x0, r2) sendmsg$AUDIT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x10, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004000}, 0x4) [ 1008.857416][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1008.896449][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:19 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2276, 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) [ 1008.953747][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1008.966174][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1008.999819][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:19 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2276, 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) [ 1009.063267][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1009.124038][ T1728] Dead loop on virtual device ip6_vti0, fix it urgently! 13:37:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001066d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:20 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2002, 0x0, 0x6b6551edf3a76e82}, 0x18) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x478, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x17, 0x3, "780838bd863ba0ef8a7e32e422fde2aa341971"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49cb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7361}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc3}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2b}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "c23c245dc7b942cf2ead45cca89a849665a05d7a057df0d1843583c3965f4ff79262d60d181e9fb0841c71119662e79d19a095495b9e17273d786ecfff4d7149030ab5a4b464f10daf0521f0dda5073a98a9276f027d16dec8b8fed0b8cc95089b28050eaffc99c0859f8db3d5c374f981892506b3d4fe646924869d51b867295cc086de5c80af"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "14e30041dc90407b31d63eadc1a9c677468f4a03fca755a1c42919"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x40, @mcast1, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @private1, 0x19}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) r2 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x2283, 0x0) 13:37:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:20 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2276, 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:20 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0x4]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:20 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:20 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="7de732518945f9f360777f0772aceaf775bbb1e2140b54803516beb8dc69f45912ee091294ca8b60ac4446b25802afcb28f2bf17bd8738b8e5de3275cfc9c0f8837745619ae81499c0c11c8cc86f5b66f4c37917505b8a35cc0ac0f5f65d9edcca56468e43cc7a35d8714bbcb11a921fa399220a489813ee888e0a8496b2ac46bf17b193f605062942ecc63a7e4ec42d4baad3e1a894a3b332394bace9211cd749b7bde81276e3918364e9f4de12656eb3edb88ccec959817b97771ff440c80f74d6e3", 0xc3}, {&(0x7f0000000100)="127892aaef53e8633646c9804f228acb072d3a7043c6c1a26cb1b4a37d2dc95bb613ad3745ad87dffaf28b14c05a84bf", 0x30}, {&(0x7f0000000140)="4713fdf8a115d025c1121339ce352fc2b3e4244accdd60252b8295b42b3028f1a4b11162627075f37e883332169dd087", 0x30}, {&(0x7f0000000180)="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", 0xfd}], 0x4}, 0x81) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x2283, 0x0) 13:37:20 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001076d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:20 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0x5]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:20 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x100) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) 13:37:21 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001086d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:21 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r2}) 13:37:21 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0x6]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:21 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, 0x0) 13:37:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001096d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:21 executing program 4: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2283, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:21 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0x7]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, 0x0) 13:37:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, 0x0) 13:37:22 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) fcntl$dupfd(r1, 0x0, r2) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000200)) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3901004}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040185a80201050000000000000000000500000408001540000000342595ed400003000008001540000000003c0018800800034000000006080001e300000005080002400040fffffffa0800024020000009080003400000000808000140000000060c001700000000020000008054000d8014000400ff02000000000000000000000000000108000200e00000021c000380889d02004e230000060001004e230000060002004e22000008000100ac1414a20800020064010101080002007f000001080015400800000308000c400000000000060002004e2200fbffffffffffffff020200108008000240a168aa2c"], 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x8016) fsetxattr(r0, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)='/dev/sg#\x00', 0x9, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x2283, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) accept4$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000240)={0x6, r4, 0x1}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000440)="db21b9ed1810fa1003612772835f5d454c5ff6cdcbf2bc9cee", &(0x7f0000000480)=""/16}, 0x20) 13:37:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c00010a6d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:22 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0x8]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) 13:37:22 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c00010b6d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 13:37:22 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0x9]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) 13:37:22 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x35f941) ioctl$SG_GET_NUM_WAITING(r0, 0x2205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9f, 0x7f, "d4d9f3b29ef215de47d0aa7a715f9ea3223ed092dc238aedf5ac70fc1100b7ef98618740c3cd98268af16e9e15f46190b97388b7a13d290d5af17dc56f609a", 0x15}, 0x80, 0x0}, 0x8050) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$ppp(r1, &(0x7f0000000300)="e1e1be0f18edd810434e7668dc145569a983f235f85116680083c5f77cfea4daf5c61068fd8e5acc16588ae1d100be2512a282c7cff3f91dfd43742732f8a3bb40e9392fc8940819ba4a37a6ae3f6c1fab71", 0x52) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x8400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r7}) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 13:37:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2283, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc008ae91, &(0x7f00000000c0)={0x0, 0x0, [0xc0010055, 0x0, 0x3, 0x8, 0x4b564d06]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r4, 0x80000001, 0x0, 0x80000001}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}, @in6={0xa, 0x4e23, 0x10000, @loopback, 0x927}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e23, @remote}], 0x58) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getgid() setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000000c0)={r8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r8, 0x5, 0x200, 0x7}, 0x10) 13:37:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}}) 13:37:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c00010c6d6163766c616e00480002800800010008000000340005800a0004000180c200000200000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa200000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x88}}, 0x800) 13:37:23 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x53, 0x18, @buffer={0x0, 0x71, &(0x7f0000000000)=""/113}, &(0x7f0000000080)="555494c9e6bd20c61afb539b330a5560a94c0e153188ec9cb8c9e2adf400bb20c175b16aca6c9504a38e7fb518a0891f628345a22582cea38452d347183328023ed5e890f72c55ce3f1193e5684ed84d105941", &(0x7f0000000100)=""/150, 0x4, 0x14, 0x2003, &(0x7f00000001c0)}) 13:37:23 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2={0xff, 0x2, [0xa]}, @ipv4={[0x0, 0x0, 0x8], [], @private}, @initdev={0xfe, 0x88, [0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x24c20082, r3}) [ 1012.435188][ T1963] ------------[ cut here ]------------ [ 1012.440989][ T1963] WARNING: CPU: 1 PID: 1963 at drivers/net/netdevsim/fib.c:448 nsim_fib6_rt_nh_del+0x154/0x290 [ 1012.451367][ T1963] Kernel panic - not syncing: panic_on_warn set ... [ 1012.457947][ T1963] CPU: 1 PID: 1963 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1012.466520][ T1963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.476557][ T1963] Call Trace: [ 1012.479823][ T1963] dump_stack+0x1f0/0x31e [ 1012.484132][ T1963] panic+0x264/0x7a0 [ 1012.488143][ T1963] ? __warn+0x102/0x250 [ 1012.492293][ T1963] ? nsim_fib6_rt_nh_del+0x154/0x290 [ 1012.497559][ T1963] ? nsim_fib6_rt_nh_del+0x154/0x290 [ 1012.502836][ T1963] __warn+0x227/0x250 [ 1012.506795][ T1963] ? nsim_fib6_rt_nh_del+0x154/0x290 [ 1012.512052][ T1963] report_bug+0x1b1/0x2e0 [ 1012.516360][ T1963] handle_bug+0x42/0x80 [ 1012.520486][ T1963] exc_invalid_op+0x16/0x40 [ 1012.524959][ T1963] asm_exc_invalid_op+0x12/0x20 [ 1012.529785][ T1963] RIP: 0010:nsim_fib6_rt_nh_del+0x154/0x290 [ 1012.535647][ T1963] Code: 89 fc 4d 89 2c 24 4c 89 e8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ef e8 7b ce 89 fc 48 8b 04 24 49 89 45 00 eb 1b e8 1c c0 4a fc <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 06 c0 4a fc [ 1012.555225][ T1963] RSP: 0018:ffffc900160878e0 EFLAGS: 00010283 [ 1012.561261][ T1963] RAX: ffffffff8529cea4 RBX: ffff8880881d7c38 RCX: 0000000000040000 [ 1012.569205][ T1963] RDX: ffffc900094f1000 RSI: 0000000000001193 RDI: 0000000000001194 [ 1012.577146][ T1963] RBP: dffffc0000000000 R08: ffffffff852965b7 R09: fffffbfff131a7d6 [ 1012.585089][ T1963] R10: fffffbfff131a7d6 R11: 0000000000000000 R12: ffff888054aa1800 [ 1012.593031][ T1963] R13: ffff8880881d7c38 R14: 1ffff11014274342 R15: ffff8880a13a1a10 [ 1012.600988][ T1963] ? nsim_fib_event_nb+0x7c7/0x3680 [ 1012.606376][ T1963] ? nsim_fib6_rt_nh_del+0x154/0x290 [ 1012.611654][ T1963] nsim_fib_event_nb+0x18b1/0x3680 [ 1012.616746][ T1963] ? rcu_lock_acquire+0x9/0x30 [ 1012.621489][ T1963] __atomic_notifier_call_chain+0x17f/0x2c0 [ 1012.627354][ T1963] call_fib_notifiers+0x2d/0x60 [ 1012.632176][ T1963] fib6_del+0xf24/0x1360 [ 1012.636400][ T1963] ? fib6_del+0xf41/0x1360 [ 1012.640809][ T1963] ip6_route_del+0x1ac9/0x2360 [ 1012.645548][ T1963] ? ipv6_route_ioctl+0x350/0x820 [ 1012.650565][ T1963] ipv6_route_ioctl+0x4a3/0x820 [ 1012.655386][ T1963] ? __might_fault+0xf5/0x150 [ 1012.660047][ T1963] inet6_ioctl+0x168/0x1a0 [ 1012.664443][ T1963] sock_do_ioctl+0x7b/0x260 [ 1012.668925][ T1963] sock_ioctl+0x4aa/0x690 [ 1012.673234][ T1963] ? sock_poll+0x2f0/0x2f0 [ 1012.677626][ T1963] __se_sys_ioctl+0xf9/0x160 [ 1012.682193][ T1963] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1012.688229][ T1963] do_syscall_64+0x73/0xe0 [ 1012.692619][ T1963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1012.698493][ T1963] RIP: 0033:0x45c1d9 [ 1012.702357][ T1963] Code: Bad RIP value. [ 1012.706495][ T1963] RSP: 002b:00007f1604e58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.714877][ T1963] RAX: ffffffffffffffda RBX: 000000000001c440 RCX: 000000000045c1d9 [ 1012.722828][ T1963] RDX: 0000000020000240 RSI: 000000000000890c RDI: 0000000000000003 [ 1012.730775][ T1963] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 1012.738721][ T1963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 1012.746664][ T1963] R13: 00007ffd6eadaeef R14: 00007f1604e599c0 R15: 000000000078bf0c [ 1012.756118][ T1963] Kernel Offset: disabled [ 1012.760551][ T1963] Rebooting in 86400 seconds..