984.651324] team0 (unregistering): Port device team_slave_1 removed [ 984.665206] team0 (unregistering): Port device team_slave_0 removed [ 984.676775] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 984.740960] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 984.831240] bond0 (unregistering): Released all slaves 01:35:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) accept(r0, 0x0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x3, 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f00000002c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x381}}], 0x6fdaec, 0x22, 0x0) 01:35:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:14 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x3) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchmod(r2, 0x1a) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:35:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:14 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x3, r2) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x28e5f28132f3c9ea}, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 986.798120] Unknown ioctl 4701 01:35:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 986.859052] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:14 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req={0x2, 0x8, 0xff, 0xd}, 0xffffffffffffff63) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000002c0)={0x9, 0x0, {0xfffffffffdffffff, 0x3, 0x7, 0x2, 0x7}}) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x1, 0x70, 0xffffffffffffffc0, 0x8000, 0x0, 0x6c7d80000000, 0x0, 0x4, 0x91201, 0x2, 0x8, 0x400, 0x1ff, 0x5, 0x3, 0x1ff, 0x2, 0x2, 0x5, 0x2, 0x8, 0x4, 0x2, 0x5, 0x6, 0x7, 0x462, 0xfffffffffffffffe, 0x2b0, 0x80000001, 0x4, 0x2, 0x5, 0x7f, 0x20, 0x81, 0x3f, 0x3, 0x0, 0x7, 0x0, @perf_config_ext={0x10000, 0xb867}, 0xd020, 0x4, 0x82b3, 0x4, 0xf5b, 0x9, 0x365}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000180)) [ 986.957797] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 987.059478] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:14 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) r4 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x120) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38021800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x0, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x401, 0x10001, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xa0b72f1c9a3be633}, 0x4044010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 987.414072] Unknown ioctl 4701 [ 987.481290] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:14 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:14 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:14 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)={0xffff, {{0xa, 0x4e21, 0x9, @local, 0x5bee}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x7, @empty, 0x401}}, {{0xa, 0x4e23, 0x81, @mcast1, 0x3f}}, {{0xa, 0x4e20, 0x0, @empty, 0x400}}]}, 0x210) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:14 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 987.676270] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:15 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x9, 0x3, 0x400, 0x2}, 0x9) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x6, 0x1f, 0x6, 0x5, 0x9, 0x100000000, 0xa96}, 0x1c) listen(r1, 0x800) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) accept4(r1, 0x0, 0x0, 0x0) 01:35:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 987.895895] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:15 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 988.093269] netlink: 'syz-executor4': attribute type 10 has an invalid length. 01:35:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 988.269925] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:15 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x81, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000200)={0x7, 0x100}) ioctl$void(r0, 0xc0045c79) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000080)={{0x401, 0x7}, 'port0\x00', 0x6, 0x40001, 0x6, 0x80000001, 0xb6, 0x0, 0x3, 0x0, 0x1, 0xffff}) setsockopt(r0, 0x65, 0x2, 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) 01:35:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x10020000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$getownex(r4, 0x10, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x4000) write$P9_RREADDIR(r6, &(0x7f0000000580)={0x2a, 0x29, 0x2, {0x360, [{{}, 0x1, 0x3, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x800, 0x8, 0x8, 0x0, 0x0, 0x65, 0x40303, 0x0, 0x40, 0x8000, 0x8001, 0x7, 0x0, 0xb3, 0x100000000, 0x0, 0x0, 0x0, 0x6, 0x1e3, 0xffffffffffffff80, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x652f, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x10, 0x3, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0x9, r5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000240), 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x4a0, 0x280, 0x0, 0x280, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@local, @multicast2, @multicast2, 0x4}}}, {{@arp={@broadcast, @remote, 0x0, 0xffffffff, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}, @mac=@remote, {[0xff, 0xff, 0xff]}, 0x1, 0x9, 0x7ff, 0x8, 0xffff, 0x6, 'veth0_to_bond\x00', 'eql\x00', {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @broadcast, @broadcast, 0x2}}}, {{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x7, 0x100000001}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) write$binfmt_elf32(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75adde08e55100ccc787198f570d1cf8416e898239ed43d19c4bb3eaa5c9495e9305721ff13922f38aac16073c8ed471718d8943a11d37dbb346aecaf54c732bc635c7a8ede"], 0xed) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07008ff83e19be89b454959f5553b3438f9cb3ce041fd3b791a37b5fdcf714230101000000000000d167b5c6d599073a1a431f5221390600c113689285da40160fafe4bf0831120010000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, 0x0, &(0x7f00000000c0)) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 988.751837] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x7ff, 0x8040) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100, 0x101000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000300)={{0x5, 0x7, 0x3, 0x80000001, 'syz0\x00', 0x7}, 0x6, 0xfffffff, 0x9e000000, r5, 0x2, 0x2, 'syz1\x00', &(0x7f0000000180)=['*eth0\x00', 'eth0-c)nodevwlan0:\x00'], 0x19, [], [0x4, 0x7fff, 0x0, 0x7fd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:16 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x5, 0xffffffff80000000, 0x8, 0x400}, 0xfffffffffffffe7b) listen(r0, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:16 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:16 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f00000000c0)=0x4) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:16 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, 0x0, &(0x7f00000000c0)) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x2, 0x8004) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x400c050}, 0x40000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYRES64=r5]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 989.290228] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 989.694478] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:17 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:17 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, 0x0, &(0x7f00000000c0)) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:17 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x20080, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000300)={0x0, 0x7, 0xbd1, [], &(0x7f00000002c0)=0x8}) r2 = socket(0x1e, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0xffffffc9, 0x0, 0xfffffffffffffe43, 0x0, 0xffffff0a}, 0x3fffc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, 0x4) accept4(r2, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000240)) 01:35:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) setsockopt$inet6_buf(r3, 0x29, 0x2d, &(0x7f00000000c0)="f10c19627f1329f46bbc82c84b9203ea1669b71b5e5015a8f0b046ca74d4ec5748f6431d3b997bf9b549f680fe4e0e0502713b8cbffc6caab238", 0x3a) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000018000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="ea00000000810065660f6145220f20e035800000000f22e0c4e1f9d8293ef684aafe8f0000000f09b9690200000f3266b898000f00d03e670ffced0f09", 0x3d}], 0x1, 0x4, &(0x7f0000000200), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:35:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 990.034803] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 990.078780] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getqdisc={0x44, 0x26, 0x334, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0xfff6, 0xfffe}, {0xb, 0xfff2}, {0x1, 0xffed}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="c83d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x8, {0x7, 0x1c, 0x200000000, 0x0, 0x1, 0x3, 0x81, 0xf800000000000000}}, 0x50) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000000180)={0x0, 0x1, 0x80}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 01:35:17 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 990.514312] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 'ovf\x00', 0x20, 0xfffffffffffff902, 0x4b}, {@loopback, 0x4e21, 0x2000, 0xffff, 0x2, 0x2}}, 0x44) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x14000) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 990.610637] netlink: 'syz-executor4': attribute type 10 has an invalid length. [ 990.822520] IPVS: set_ctl: invalid protocol: 1 172.30.0.4:20001 01:35:18 executing program 4: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xfffffffffffffffe, @local, 0x2}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffffffff1e71}], 0x38) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200000, 0x0) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) 01:35:18 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x232}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:18 executing program 5: sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 01:35:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20481, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000000c0)={0x4, 0xffff, 0x81}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000180)={0x200}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:35:18 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 991.156003] Unknown ioctl 4701 01:35:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 991.241808] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$RTC_WIE_OFF(r0, 0x7010) sendto$inet(r1, &(0x7f0000000e40)="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", 0x481, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)={0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f00000003c0)={{0xffffffffffffffff, 0x3, 0x717c20f5, 0x1, 0x7fff}, 0x101, 0x7, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x75, 0xffff, 0x10001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={r2, 0x7ffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000040)={0xa1, &(0x7f0000000180)="91e4bbb5fd907ed07af6b729d8150f0508269b0efa02388ab53c97385f0cee732b536c8e4baff728f7dc0669752ac53c4969aee13662af0c67dc09f965bef39e49672bcdc1bb238a5760de65562f4ba0ca07dc4e6f66e816bd0e9291bfc9a64088ff5d9cc6b60fa2948e5cf027e3100bf0e65731557d9037bd056f03c4615d40d5152c6b46c6e1e254eb604464ce115916fa84f23f1b63ad16732ed7d59c35fba3"}) sendto$inet(r1, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000080)=""/168, 0xa8}}], 0x1, 0x0, &(0x7f0000004540)={0x77359400}) 01:35:18 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000000)=0x68) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f2f8a797d5d80e1f7b6dbfe2346f1e4307d2cd7ce823fe701c7ddef0364b4f6f280d8760238a73077736d6d5619d7bb8370514887670079c9e1ccaf493b1d842d6c10007a6870bd33196eb702f41b78717629843b3bc04f3369f8cd73e2ef9d5d1d3df52f33d23f52655eca89ffbba53e84904e72f1bba65118e1508d7126391c0137f37efac299489e7e68c89cec02690e3fa9f70db4e4f4540e1e1475f5fc7ca22afdb0bb9f6a67158b76b5a42d3037393b54bdc863b1f4d8d008a33af54d355ee2e7b4a0c85e35e07e04150d57f0211809000000000000003722614b55"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$RTC_WIE_OFF(r0, 0x7010) sendto$inet(r1, &(0x7f0000000e40)="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", 0x481, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)={0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f00000003c0)={{0xffffffffffffffff, 0x3, 0x717c20f5, 0x1, 0x7fff}, 0x101, 0x7, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x75, 0xffff, 0x10001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={r2, 0x7ffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000040)={0xa1, &(0x7f0000000180)="91e4bbb5fd907ed07af6b729d8150f0508269b0efa02388ab53c97385f0cee732b536c8e4baff728f7dc0669752ac53c4969aee13662af0c67dc09f965bef39e49672bcdc1bb238a5760de65562f4ba0ca07dc4e6f66e816bd0e9291bfc9a64088ff5d9cc6b60fa2948e5cf027e3100bf0e65731557d9037bd056f03c4615d40d5152c6b46c6e1e254eb604464ce115916fa84f23f1b63ad16732ed7d59c35fba3"}) sendto$inet(r1, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000080)=""/168, 0xa8}}], 0x1, 0x0, &(0x7f0000004540)={0x77359400}) 01:35:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 991.866051] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:19 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x10680, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x0, 0xfffffffffffffd0f, &(0x7f00000000c0)='%\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r3, &(0x7f0000000280)='net/raw\x00') setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000180)=@v2={0x3, 0x3, 0x5, 0x9, 0x80, "54edbfc546c4313851e2bde1d43afc6021214f53a99dcb8af7ac8a67872929f1ad0ca004a614cc59a53b5bf62cf475472cae0d162841809237cabfd3b9eebbe0c45b8bf446ef508c435f728792e6438c0e6846d07064f0acf39f8672bed6613f1f76aae48eb425214c519f1e2fe779db9aafd1be97406cb24e22f6fbf6b42386"}, 0x8a, 0x3) 01:35:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x212) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2000000000800, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000c440)={0x0, 0x0, 0x0, 0x0, &(0x7f000000a180)}, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000002c0)=""/213) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x2d) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000100)=0x8) clone(0x20020102100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000140)={0x2, 0x2, 0x0, [], 0x0}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000800)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)={0x89, 0xc, [0x8, 0x1, 0x4]}) r3 = socket(0x10, 0x2, 0xc) write(r3, &(0x7f0000000180)="1f0000000104ffce9e67fa5eaca27100f305010008000100010423dcffdf00", 0x1f) lookup_dcookie(0x4, 0x0, 0xb2) 01:35:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10400, 0x0) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)="3dc86d4b53be0e77df3514ab99d4fe32e0dad4ec5416b530cca4dac7ceefd5986c3f9ff530ee44e6f7ff9392d68db8bd22c259e6d69762d63122839cd1389660f16e5d10c22f25dd9858ab8d281d4b347d3aac3bdb5ea3c786f34bc54558ac3fafa13ef6071ef2d75252efea8383d77a73831151b615dd601970d8711d19c83067e347ff29157b4d5255", 0x8a}, {&(0x7f00000003c0)="eea3f7b2866611e3493b3cf0475530b0dc2cd52570c499109af63f3b01f81842df1dd8f9b371d487288bbe01620c802f5dbf2b8e2ab138ddf4813388c24f5f32d3fb3621509a2e0ec487bd528d72f69147c80aed59ede7bf82f4f3adbee6374e7e9402be8b2587647dc1fead8d813f6633d4e846dd2a7c5f91cc915ea87c0d0bc039b8de32766e4e789b273060737f6c7fdd2ec98be1b1efd62901ba12c58a83f0e5529183f33d7dcf8eef3d42cd9eb3c71feec6bc", 0xb5}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="e77f4513a0dd0f9d66adae550ab2f4c7a5f29aa76ae60d571c1fad0a7c539abe1142577505c1c5cde3bc31e3cea301cbf4ecd48183c6083643e374418b8d958fc63529a121fd840ae033d3b17fb20c6a173177e0250d76f7f89a579092b36437d92c12d6d0d0a98c91999039a48454d909a137b9a06589891243c0b3cc68e569f3a9", 0x82}, {&(0x7f0000001540)="99b1eb6abf482f3318bf35d8aeafcc56af06b21f4b120ab4037e98d2ecb357b510599086110f6ad7c466b5841e5c730bd1eb24a8366aa3b1085c1e7f768660c1f196867b0be0d5a2fa0c5762f46f240b17a85d69a5cb76a6e179eb86da580848e3ee8d74e87212c92fe8ad558b56a4c6e08bd6d456666f5c043459b37258596152484e22b1e5066326bff188671dde0c2784978d7cd860cd38340ab04b62f8321d769b451109f924a1ff11f09b9f87a1ef463d9ee8a9adc3d4f9cc3fe606472c3e7c17ee41e74018f692b976d634f9a2", 0xd0}], 0x5}, 0x8000) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @multicast2}, 0x1}, @in6={0xa, 0x4e23, 0x9, @local, 0x17}, @in6={0xa, 0x4e24, 0x9, @rand_addr="686dcfc5ea2fb9745d274189abc20c91", 0x5}, @in6={0xa, 0x4e21, 0x9, @ipv4={[], [], @rand_addr=0x1}}], 0xa0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000240)=ANY=[@ANYBLOB="4765b52bc5172d5c6207be4ba47bdbf47befca7fab43dd97f1dc40f9948c5d61c016d2ef0e4c71c4adea58543ca68cd27bfc7ec40f636da8ee82fd4bb6b950fde170e6b598251a5c6e94040aa854638f254170c804b39fc5013e25832c6da3000000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x40) 01:35:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:19 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 992.238776] Unknown ioctl 4701 [ 992.271268] binder: 9566:9578 ioctl c0306201 0 returned -14 [ 992.330203] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 992.393592] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 992.436040] binder: 9566:9567 ioctl c0306201 0 returned -14 [ 992.463394] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 992.496874] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:20 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:20 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xff, 0xfffffffffffffffc, 0x3, 0x80, 0x8001}) r1 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @remote}}, [0x3f, 0x80000001, 0x2, 0x7f, 0x8, 0x4, 0x3, 0x1f, 0x3, 0xd0d, 0x6, 0x80000001, 0xff, 0x8000, 0x4a]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r2, 0xeb8}, &(0x7f00000002c0)=0x8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'wlc\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x80000}, &(0x7f0000000100)=0x8) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000380)) 01:35:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 992.843714] Unknown ioctl 4701 01:35:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt(r3, 0x10d, 0x8000000010, &(0x7f0000000080)="01", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="3cf5048e7163ea27da961b58abc6fdd726a3e3c95cad1de31c363355c8e1713e51fe7f59651cc3ac45abe4d057f5137c675ed1994a77351dee893cd34df281c9a23f002a9478039ed67f7b156245f27916f826813ec250d85c0192c16f21dd81efe95b0b969ce99dbf198ee2555098027269016440658583e3662d46fe23e2f3d45c0bc9e61731c225d30af8b12b7608313d88f7a0bdcc6fbdb3c103d6c7ecb56197a96d2c5bdeb8105bab16f495a2016c4eac846d256f43ecfe3604edd6e6c3166a78125ac00878f6e74eebf28e9f31e2eea3ae45c16456ddee6203708bad5a11d90a06dad500942c3c7de6c7e2e6ea754ffce452d745214d4e010f4be714a9ece73e14d28ed7cf52fcebaf48deff2638488d1eddcbdc9aea0d5750bc0b88a8ee86f08747e8817fd62d0c5dccd4006c529949725bbfcca2686601f5d220eb6312ee9b5a4550ad2b7e635cc741cf3981965a252825924fd94f0f0f187653512e74217df2d079465950ab782c00861fd93814a32b59cb33213e2e12f790a331a8cc402208b9da2079efa3e880f69c2836b713245e3c4d0aa7c241469ae701e88c3db83f24a7fe1af322f8821fb3fec1497fb9c6f1ea1c0732d8d9f7c6e1e671a7f4eecc4391bb1d4cbaed353d3e56d6ffd2f21b8bc5368bb85ec382ce13f92aa9f1b242a19db0ce84c822a246a949156187fe0176c3d58f8e012aa17fa0988cbcd85e8d928a3f491e81e2f943f2dad5c1f5c9a7890bf05d78a2be476c52aa75569f28c1144a7bac3465cba51b81b034fca3a9034c64ded7615e8a3a0712c45e0eb0f936ea6bbe35deae994ca8a5e48d74520900e295e55af7c5f893249a230a76779ae8978b10ba296f6a68bbdf732b77d258ebda9fed5d628f8401400e72c471d8b76e08471c7778cc22ff69eca42099069eda6d80eff70e032c7735727866ca75b83db9d740ece0263d56a9dfda7bff84643a7de6f7d677f5b5baf1409080b132dac45d8dd4b9c64b66bc4d177ae8e311f6520ca8173e01b3e8343461214aaa5cddbc01a3f6f9b18c68bb33f98a025ce67aaae25e69208b378925780d96fe76f8306b2dd1a28ea0eaad4095144399f80a85e2fbb8f982361cb7e7e61ad89deb2c6ddc014a14685360f1aa39fbf2dc574543d606d6afd18922c8cf16a62e0a45d6adafde216473039edc7001e9f8aed45eaddd89c2b1df832dafa9988fba8e795c911ed2706db4adf3b1a7db02994a43be04b9c66268aba436c6ba24c6671b19fec3e032c2216d33909ce1cd140fde160a222acac813bfdfdecd18d289d8073287a2f920bd2e1a75725ff4b805acf9fc249be0634c26193bf03555ccfc3008ef2001570bf72d5127236de2bb776069b9c5d6051e28c0f5f7f55d5e4cf04822b52434ff0ce7c9912ea49b692bd1895701be813cf94fad9dbbf3d303a234e2164014259e51e1795d4383baa8d977cfe07e2fbf215549d9d4667ae273227b85ea8de7d7c874b6d5463d2451f4253df0d86fde47f8a138d6cdc616e2bfbd32269bcd0a87e473b7a4349aacc40e795fbc909143d72472b4b1f3742e3f5b119a75b48632eb3f67c90bcf606526f39b72647c8343031b29c2cde6576c3a1dfa8677efea6c7f1904410f9c1170dce23bd4fb64bec2010f44109a83cbbdcaa3f391731e8e0f410c9588fef26e792b76beb6174d5a3b87848f051825e06d06838edc102271970d326c74065089a658f0354027a8da470bdcf7f9548fe1ab24adf12d3bd1427134de4c3aa039c11af4c74bf111e12953ffa17ffbded8945b1cd1dba33753cdb9fc3a14393b8ec4f8497ce27cafe19ba44fa38549b8f052f83dace969f7801358f41caf2a02a01fcd362f8a9c6469fb843ae4718cf5d7f92558865546879b344d9a489c983187592fd116b94835828247b46a43ddd8306c23d23c1b0f5e3388c1af04f5144252dd216fd56f54336ebf0c15e6f7614c42eb184c0d0e741050a8f01f05663e2b214649167419ec62cf342d4286f0b31398bfd93ff2896ade403a6b72e031a9839d21a82ecc8cec3f477c3cedcacf466881201d22c305794491a9ec595af5fcbac6189114e285282753e17651d395d51fab8750607db79c5b41a69d273d9f186688207e8cf1c2000b52db649bfea760fa80178f33c65123f84369cb4c1f5ead16544af44fd5d7889d347868995f873b53777ff94e167813859f019cfb5a9bb29bdf14bfdbf82349d2b146e95e1245701ffa957d2b8320d3bf198e2f8346cb3a1d237c958f8357df9e8859b68a94974a36ed7b2c32744b9b5e7597a7e5064bbd3a1bb326ccabb4ebefdd6348e3054dcfe9a8ccbf959151f43fc15697d4899dcda889663d0d724afe4c802ff0e9c13d3c0bf2372909d4a640882fd9bc12b63d94e7ad4583e8b95245fa7084118fe594e39cf8cb61033f6602a1c679687b5594db16c9e74611be366af5c8d4ad07831dc3e2123253af0f68fd1711bf608f5515a471301b64329c51b2011a03a8ad6c4e399b3245eb218083351e9a621d713187a65368f94205f17d6870527ff14fdc2577d2f6c15077deb2e7ab0ecc869a05d48d8cdc1dd7ea8456a0bb60e70d78f253ef417d8a386dcc255f1b14227ac7ab4de5a9e0158945767431b5e86c8dd00342aa12b27f98676a278f326b4256f19ecdd3d8fae6c4a815f1fb7df919e74b6a5003ae8d14f1d2b614ac6b02355765922f506f097602ee202eb55e3b45907b461692a4a1afbec463b9d19a81cdc93885596ec465220840c21cdbc30a778e26569416c454d117c003c8b0788332341685fad7357a1a3a3672949a7161d28f4f73b7e01d01e133541f3246bb9eb8f4b26dc149e4295b49c7c8fbcacd4c3e02e77f08283d310a5b56bc0630f33b857589de15d2d6bdda73b7ae6dc37d9bd64fe84178f02873861b060b6ac2f91a3ed84c44d8e03deb87d632fd06d93b8c841d5a2fdaf338142d7e54a120b2e162fe0e4b170bb97762fb172a30cc31b1f679be796f0b4865c0704850969a6c741eb3b9ad2fb059fe5da6cf6d3ef3c4c4aad4dbb578da214a57f334db2128769a7f961542e61cece3c24cefe9f6ffe75db1ec936aaa034e4a0486a1850ff4edceed6ac9d6468033b620373e421b42575af337585ed0d08f5b3f91557c8b5e7b515bb15c957213ce31787a9ec274eeb88ddbcc15396355e37f0239b0cc8867d35bc7f8a719ec415f69833feea59e1d7ec6ea8ea2b5efaacd3b1b53651e6e0983faa60950b92514f0d582b4f214a80101a0784d155b1dc2b2cba21fddb31eb10e8af70352a47c1c8eb90fba97d93d75608acdc8465c6907bbf36f3f36e59bfb1eeafbed14726fd34c2354785f1aa65422cce50bac7a9a51a7ecbd4d1d97ae65ebcc1414eaf000165fb15e037539cdfe0bbff3100395d2a6834fbfae1dad1f269ed290316ee18a0666fe682fdeb832c2e4d7818c0f0896d55e696dfababb0f561afc802cb43fb88fac2f5f8ecc18fa40a9d53b7a3bcc19f193e535b89ea96aab74c39c4928f72ba3a88941043a6a6e87db746b42fcc7e575c25c45694d54d6205abbc33331a869b4c4ecf50528d0fa3dc50ea15873ed2f7ee500194203525f70b70094b4c7280e5e6e325d2493273b4acc8d71352fa64d3bd944a79975f5dd597a85d2ad639b55f5f72ce6dd554f48b9236f5d8652c65b5c3a909b420eb60b8330fe43c17ab31eb2ebe54fb906ffe166c86b29fed4947a97117d2eafce1b20d6485d525b948a906c2864c63005cc0571e386a263fc2b68f03ed2377a0a81a48ff726fecc5c476eb3e36fd796e11bb4f8612b57ad8b9ebc7d3e7a2be68380d9e4a447d590d82713504dc0658525ea88400811753fa6234a01f46d9fa7df62b266b5c889f5286b7c72eff18b0425dd9c2e6f1f9778ffa1d14ceeff7d76e05c93e5215a0b8084e2e4d25984a835534453bd7e0ca7579edbabb8fec973978b37c4e70cb2796a2fba6e6235063857851f94b7cbab38ec1297f89dbaaec4b3a11f86b69b273fcecaa1ba1c6c52bf455be9e495e75651e8e6c7f03874f96596a9deb61c14eb68049f3f07bac5becf8ae8add48a4a1b8ce5776a5debee0738b4d7750865606e747ab7f9a86b6d933220c4771d2277c1ab68b6b24d4238ca83a3e4247d13fcda8af5087848f7aa4d8ccf5347f7041ac5ee4429c64f2aa653ae0e7b7c16d2e35d186b20fa7109a193f38a002ad5fbb18a52810b7278ba3c0a0d831dd350730c1c255f2fa639aab2537115e1ac60be26a9d88c8bfa1100c2ae9fa9b245033b010050065a89a7384a572f5b2f121e77bca3e71a881ab8433bc77f63f0629a6eb9ff395b96576a57e75e583fb085786ebd482db53648ab02486abfd600efca097a68f561e43d3ba027fcb2fe1d0fa6612b066a3c95b0177c78b2bb0c99310a3f51ab8a8290507bb5256afe8e67a31b7c2bb643dbf2cfbeedbbde00d3dc481d8c8bdfcf540e85c9cc1d4c2bccdb13bfd5f3d2a4a320043582af152ca716a1d097a7496e0e040ba7446e1ea8d9f22cdda1835960ddbc64d4828745909b865fcb28025d8769f847783b10f50db50e5de2de3e0c5bedff9b928387cf43c1a621001d5903e5e60c9bdfa01f023b134f224533faaf7f218b9797787ceacd7b96853c58e4247634d4faadf56f9a4480c4673d656758aedca41707e6b3753db3db09f7c3be9233bf429c6a0603a14ca44d78a3a3802e3edf7fe1595fc5870637a262eb2e36473e5520b3ba9af4d46fe5b49d1e3a2812e1f502b58a2aa0a472925ab1f4c8bc3687ef1f7a82700021e70f50edef894bf902285e3c087a7f980289c62c8b282fa52072966131f3f3f33686f270ffe938c3cce1eb0623837ae1ffcceb62c95bfc33a06e45db21a2d46e5a8891fa37b8edf93255d6f4441c3ed4b551b7a949f28cec5e001cc31f9a4057cf79485bea15438f42fed35633674249a9e52b17c2434db28612e7a8060016baef0739c34478df046c9c9959de176ba3a52037cc36410d84a5889ad48e42c509ba21c38d8a561ed2689ffa232554491ea9c0fddb3920c37fc4ced61621a879a6003eddb104a84d11143e31ba57a611112469789eecb0bfa58e6d86b98b0cb2369de8e4032112d70ed3c95032b37d49947d222ab8d91f3a79183c7ea9edd581cf00a2a57928b06ba3511009d8bdbe378084d871eb5ca88885559980c994f0d8d8d8b20f3f9a49705d5a56ba42647a5db3ca3775bc7979512d24b01f27a74a7f2de01ddc92c4f562676f361f5c579954907bf4b99c3a8963777cc2a551aa69873d631cf5d32674a8cfc751cfdab1da79412aacc166e776f512e350849c2250b36e1585f8eaecb515f156a7171c2ab615436105a9095becc24e1370a7409e4c35137c984c146dba9a6e6261ec6e56168756a440818eb58db3a53b60e7735f354956d4b71ee0b9782d1e6dc36a6999a877bc67a75fdecf5eab32f721da105a76a94c24738bbdd2e6603fc71a051e3108f680b2346e215b05364e43a8c4fe2723178e154289681e4078e955bd53858fa04bbe82dcab9c3ce7439f6293ad74dec15f8425d251158edcd7c664d47ad9285978df107a15fb6dd090aeb37a0975dd584ecd987ed494f7a28c32222765aa5147eef2c03bced05a802ce9568fb0a1cd58ba3c9fcce1a925868265a0daffaecb2a0289c7294881fc5519c8425eb201cda5ceafc81c1cc04f2039c1f3cf57a7209d32b23a01e7c146e9e8b6609b8238beff2470cbf300e1c249e5f4a3e965ec5cdd21ea6434429606faa6f96e7e", 0x1000}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0xf, &(0x7f00000000c0)='selfppp0vmnet0\x00'}, 0x30) getpgid(0xffffffffffffffff) getpgrp(0x0) gettid() fcntl$getownex(r2, 0x10, &(0x7f00000002c0)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) getpgid(0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000002240)) fcntl$getownex(r0, 0x10, &(0x7f0000000840)) fstat(r3, &(0x7f0000002340)) getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d00), &(0x7f0000002d40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d80), &(0x7f00000003c0)=0xfffffffffffffe44) gettid() socket$key(0xf, 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003680)=[{&(0x7f0000002f80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003580)=[{&(0x7f00000034c0)="a2ab64ab4fd8bcb82c3cf7daebde4f3fd111f48e938302a44bcb3696910d543dfd6b74328a27b187d9a11267129ecc701537726588d5334565ec7ff52038d3752f9022dd6ac5b8e72b650f2cb203da41f16aaa240712d6c0fbfb840d482ff5d36e2ed4245a2fd9ccd9042748ec9cd2a40d4a0e14c2153d89d5945e5f09235996139325f68675a557b517ced282", 0x8d}], 0x1, 0x0, 0x0, 0x8810}], 0x1, 0x40084) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x245, &(0x7f0000003bc0)}}], 0x3a6, 0x0) [ 992.947288] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:20 executing program 5: r0 = socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000180)=""/100, 0x2}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 993.229219] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x10000, 0x0) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f00000001c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00u']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x3) ioctl$KVM_NMI(r3, 0xae9a) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000200)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 993.391185] device bridge_slave_1 left promiscuous mode [ 993.411180] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.511108] IPVS: ftp: loaded support on port[0] = 21 [ 993.560580] device bridge_slave_0 left promiscuous mode [ 993.566194] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.902051] device hsr_slave_1 left promiscuous mode [ 993.950731] device hsr_slave_0 left promiscuous mode [ 993.993078] team0 (unregistering): Port device team_slave_1 removed [ 994.022450] team0 (unregistering): Port device team_slave_0 removed [ 994.043612] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 994.072068] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 994.164736] bond0 (unregistering): Released all slaves [ 994.392120] chnl_net:caif_netlink_parms(): no params data found [ 994.467631] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.474063] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.484822] device bridge_slave_0 entered promiscuous mode [ 994.493104] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.507487] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.515050] device bridge_slave_1 entered promiscuous mode [ 994.560728] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 994.579636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 994.621768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 994.638171] team0: Port device team_slave_0 added [ 994.643904] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 994.659638] team0: Port device team_slave_1 added [ 994.665183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 994.680798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 994.759630] device hsr_slave_0 entered promiscuous mode [ 994.796576] device hsr_slave_1 entered promiscuous mode [ 994.838001] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 994.845061] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 994.880807] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.887231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.893903] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.900331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.982462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.000308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 995.019751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 995.034250] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.043497] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.067223] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 995.073361] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.093978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 995.110272] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.116737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.146077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 995.162853] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.169332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.207109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 995.215660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 995.232149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.250147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 995.270716] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 995.282727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 995.294313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 995.309933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.339620] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 995.353981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.634476] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:23 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:23 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x10001) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:23 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:23 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040), 0x1000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) write$P9_RAUTH(r1, &(0x7f0000001200)={0x14, 0x67, 0x2, {0x82, 0x3, 0x3}}, 0x14) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = syz_open_dev$amidi(&(0x7f0000001100)='/dev/amidi#\x00', 0x1, 0x2002) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000001340)={&(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) write$FUSE_ENTRY(r0, &(0x7f0000001040)={0x90, 0x0, 0x2, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}}, 0x90) write$P9_RUNLINKAT(r3, &(0x7f00000011c0)={0x7, 0x4d, 0x2}, 0x7) 01:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20bffb, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000000c0)=0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000180)=0x80000001) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3202}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0xfff, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000340)="59000000140019232b834b80043f679a10ff6400940005002a925aaa000000000100008400f0fffeff2c707f8f00ff050000000010000100090a1000410400000000fcff00000000000000000000000000000000000000000f", 0x22}], 0x1) 01:35:23 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x4, 0x84, 0x9ddc, 0xfffffffffffffff9, 0x8}, 0x14) accept4(r1, 0x0, 0x0, 0x0) [ 996.177099] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xda5, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x6, 0xb000}, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891a, &(0x7f0000000040)={'\xd3\t\x00'}) 01:35:23 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r2, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:23 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) modify_ldt$write(0x1, &(0x7f0000000000), 0x10) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0xc, 'ctr-camellia-aesni-avx2\x00'}, 0x58) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x14}, 0x14) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000180)={'bpq0\x00', {0x2, 0x4e22, @rand_addr=0x8}}) 01:35:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="af23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000740)={0xf, 0x8, 0xfa00, {r1, 0xf}}, 0x10) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000500)=[{}, {}, {}], 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x1d, r2}, 0x10, &(0x7f0000000a80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="000500a001000000000000843402000000363d2d6c0500a143fd24083aac1837c02336a09a61d8d6d8bdc877e1040000ed8704c795ee577bd9d7358321599b730d82ff052f0873f162b8f3611f24fed6c3372cb2b0cb1045528d01e6524394b97913c6fbfcc47532859401231bbe27148249537de7fe26aaace3ca9a7964232a0a3afdf1450a0c6543ed5fa1c16d09cca8d45f698c5635db084717ea25ee2d03756f4830150460"], 0x1}, 0x1, 0x0, 0x0, 0x4880}, 0x0) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x6, &(0x7f0000000400)={0x0, 0x1d, 0x5, @thr={&(0x7f00000001c0), 0x0}}, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000480)={0x0, 0x27, 0x6, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x6, &(0x7f0000000800)={0x0, 0x2c, 0x0, @thr={&(0x7f0000000540)="b3203a6f14430760e965d21ebab35c56a07a579566c241898d8c9c6cb8bfc8af42ff6d26baa2e2341ade8f3c9cb38ac0767b8475345a3a48ef84c24ed2b07c5b48c88810b49e070b4581dec6b45ab770489df6ffe5038501caab0f5c8e1eb5a40f3a55038d46ef9dc92daadaf591f789fea84bb595d23adb4a7767470c2f33eb4c9a36d01f525946716bd0f8b931ad232b0d6c58976dd4d4c6ba95a7f9622a7835efef1763f0f2c8e825989b8e19401d0b07de7793d1b866641178300bd9cbcc03b3c7446df7866bc747fa2a75a0e165f1bce0605770cc7ed96b857fcd7bbad0bfe7d08b6750b394fb42828ceaaaaca334ac", 0x0}}, &(0x7f0000000840)) timer_create(0x9, &(0x7f0000000640)={0x0, 0x5, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000680)) timer_create(0x0, &(0x7f0000000900)={0x0, 0x37, 0x2}, &(0x7f0000000a00)) timer_create(0x6, &(0x7f0000000a40)={0x0, 0x21, 0x5, @thr={&(0x7f0000000b00)="7ec1359b8a205526d3904ce8ff13fccd1faba4ebedf28826a040a96b4ac9188087272ec7b833c6f22b35c8f206740861d13d7272a95a4f2a2382304f28476dc50fdd024c09144fb66d83321c01c3", 0x0}}, &(0x7f0000000c00)) timer_create(0x7, &(0x7f0000000c40)={0x0, 0x1, 0x0, @thr={&(0x7f00000001c0)="b23f9a6281aed67aca8a352b4fb31c6b2f6a3a05f3330519851ff9efc754ee2a3df9b417d2cdfa38e3aecc78d2d17b9409eb85648252ec3586ff74", &(0x7f00000002c0)="86142f46d9f7df864b838d94973996143275745d7e57fa1a5acb930732bc4d1a5e6fc21ad032453e26c4c8667f967639d70c"}}, &(0x7f0000000c80)) timer_create(0x5, &(0x7f0000000cc0)={0x0, 0x2, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000d00)=0x0) timer_delete(r3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x13f, 0x8}}, 0x20) unshare(0x40000000) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000200)={0x7}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2e0402, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x3, @mcast1, 0x1}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x58, @mcast2, 0x80000000}, @in6={0xa, 0x4e23, 0x97c, @mcast2, 0x3}], 0x64) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000000)={0x0, 0x7fff, 0x1002, &(0x7f0000000040)}) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000180)={0xfb4, 0xfff, 0x8000000000002}) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) fchdir(r0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x4000, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup2(r0, r0) fchown(r4, 0x0, 0x0) 01:35:24 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r2, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:24 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x414000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000180)={0xfffffffffffffff7, 0xe8569359ba3d3e9a, {0x1, 0x1, 0xc53, 0x1, 0x2}}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0xfffffffffffffffe, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:24 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 997.372366] IPVS: ftp: loaded support on port[0] = 21 01:35:24 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r2, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:24 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e92a755b62390787a38bbe9d4d6b228cf6be23e0a4a97d608bf596b6eace8cd85b944dd794721db34e774e7d0998e20b391a7f7f21037"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 997.616665] Unknown ioctl 4701 01:35:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 997.913077] IPVS: ftp: loaded support on port[0] = 21 01:35:27 executing program 4: clock_getres(0x3, 0x0) 01:35:27 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:27 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="4fe3"]) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000300)={{0x4, 0x1, 0x5aa, 0x3, '\x00', 0xfffffffffffffffc}, 0x0, 0x20, 0x400, r5, 0x1, 0x52f, 'syz0\x00', &(0x7f00000001c0)=['ppp0\x00'], 0x5, [], [0x3, 0x9, 0x9, 0x9]}) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000000)=0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:35:27 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000180)={0x5, 0x200, 0xff, 'queue0\x00', 0x6}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7ff, 0x7fff, 0xbc8, 0x9}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 01:35:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1000.218984] Unknown ioctl 4701 01:35:27 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x10, 0x1, 0x5}}, 0x14) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(tnepres-generic)\x00'}, 0xffffffffffffffc2) dup3(r0, r1, 0x0) 01:35:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffe) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) io_setup(0x1f, &(0x7f0000000000)=0x0) r3 = eventfd(0xffff) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000080)="13428a6e7db39a1564400f4873e8772789ee7eaca31bc8", 0x17, 0x2, 0x0, 0x0, r3}, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x6, 0x0, 0x2, 0xab02}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x1000}, &(0x7f0000000240)=0x8) 01:35:27 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0, 0x98}, 0x10) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket(0x1e, 0x5, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x1) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x8}}, 0x3, 0xffffffffffff8b3a, 0x1f, 0x6, 0x14}, 0x98) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x4e21, 0x3ff, @loopback, 0x20}}}, 0x88) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r3 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x6, 0x1) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={&(0x7f0000ffb000/0x2000)=nil, 0x3, 0x7, 0x20, &(0x7f0000ffc000/0x1000)=nil, 0x6}) socket$inet(0x2, 0x80000, 0x2) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$inet_int(r3, 0x0, 0x1f, &(0x7f00000002c0)=0x80, 0x4) accept4(r1, 0x0, 0x0, 0x0) 01:35:27 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 01:35:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:28 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1000.745911] Unknown ioctl 4701 [ 1000.868561] *** Guest State *** [ 1000.889340] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 01:35:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1000.951230] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1001.016565] CR3 = 0x0000000000000000 [ 1001.026015] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 1001.051937] RFLAGS=0x00000002 DR7 = 0x0000000000000400 01:35:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1001.077605] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 01:35:28 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1001.123213] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1001.147445] Unknown ioctl 4701 [ 1001.152979] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:35:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1001.195913] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 01:35:28 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000100)={'b\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/100, &(0x7f0000000080)=0x64) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00F\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 1001.279436] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1001.316696] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:35:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1001.394602] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 01:35:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1001.453178] bond0: Error: Device is in use and cannot be enslaved [ 1001.474814] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1001.497753] bond0: Error: Device is in use and cannot be enslaved [ 1001.619142] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 01:35:28 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) listen(r1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sched_getparam(r3, &(0x7f0000000200)) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000180)=r4) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x80800) 01:35:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1001.708934] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1001.758678] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1001.826358] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1001.850161] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1001.872949] Interruptibility = 00000000 ActivityState = 00000000 [ 1001.890850] *** Host State *** [ 1001.899348] RIP = 0xffffffff811f99a0 RSP = 0xffff88809546f670 [ 1001.908248] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1001.916510] FSBase=00007ff0ead8f700 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 1001.925996] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1001.933661] CR0=0000000080050033 CR3=000000005b7bd000 CR4=00000000001426f0 [ 1001.944264] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 1001.954243] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1001.965209] *** Control State *** [ 1001.971115] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1001.983639] EntryControls=0000d1ff ExitControls=002fefff [ 1001.992673] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1002.004754] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 1002.011613] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1002.018483] reason=80000021 qualification=0000000000000000 01:35:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x20000, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x400000, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x14000, 0x0) r8 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x1b) ioctl$UI_DEV_DESTROY(r8, 0x5502) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x80040, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000300)={0x1, 0x8, [{r4, 0x0, 0x1000000, 0xfffffffffffff000}, {r5, 0x0, 0x1000, 0x4000}, {r0, 0x0, 0xfffffffff0000000, 0x1000100014000}, {r6, 0x0, 0xfffffffff0004000, 0x1000}, {r7, 0x0, 0x2000, 0xfffffffffffff000}, {r2, 0x0, 0x8000, 0x1000000}, {r8, 0x0, 0xfffff000}, {r9, 0x0, 0x10000, 0xfffffffff0006000}]}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000440)={r10, 0x1}) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="baf80c66b8e0ffa38b66efbafc0c66eda90080dbeb673e0fc769110fc71e3900bad004b80000efb8b1008ed066b8010000000f01d90fca0f09", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) 01:35:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x1}, 0x1dd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x9, 0x2, r0, 0x5}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x18) 01:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:29 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1002.024840] IDTVectoring: info=00000000 errcode=00000000 [ 1002.031289] TSC Offset = 0xfffffde56216c1d1 [ 1002.035621] EPT pointer = 0x000000005542801e 01:35:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x1}, 0x1dd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x9, 0x2, r0, 0x5}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x18) 01:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1002.247886] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:29 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x1, 0x10000, 0x1c}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000080)=""/51) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e24, @multicast2}}) 01:35:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:29 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:29 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x20d, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0xc000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0xffc5) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) listen(r2, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 01:35:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400040, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f2372aa5f67003469d6d9014456abdb2bdf369fdf4e7fad05fb1c7dacb61e780698e31c472e4c13a1e8dad5dacb1d0de0fa05ef229f331c09101d159c62ca7f718f11c5dfb5fac08e22025f46b1849e777031223617da3a29023c4d23301c465a32a7568702e80e3382cfde"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x12, 0x2) write(r3, &(0x7f0000000340), 0x41395527) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac9b}], 0x1, 0x0) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 01:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1002.707831] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1002.778444] device bridge_slave_1 left promiscuous mode [ 1002.784521] bridge0: port 2(bridge_slave_1) entered disabled state 01:35:30 executing program 5: r0 = socket(0x1, 0x0, 0x3) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000200)="d9e6f3ba7eb1230fbf5a91223f109c647bfcdda26af5bfc03b153a2052cfe1092e090fac33", 0x25) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x9, 0x0, 0x1, 0x4, 0x1}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x5017ff, 0x4001) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000240)=0x8) r2 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000280)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x80001) 01:35:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:30 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1002.859818] device bridge_slave_0 left promiscuous mode [ 1002.865354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.957617] IPVS: ftp: loaded support on port[0] = 21 01:35:30 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name, 0xd6, 0x0, 0x327, 0x0, 0xfffffffffffffc8c, 0x4}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) listen(r0, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 1003.230016] device hsr_slave_1 left promiscuous mode [ 1003.270725] device hsr_slave_0 left promiscuous mode [ 1003.330590] team0 (unregistering): Port device team_slave_1 removed [ 1003.342644] team0 (unregistering): Port device team_slave_0 removed [ 1003.358297] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1003.392052] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1003.488303] bond0 (unregistering): Released all slaves [ 1003.618634] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1003.831385] chnl_net:caif_netlink_parms(): no params data found [ 1003.865583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.875938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.885030] device bridge_slave_0 entered promiscuous mode [ 1003.902150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.912692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.924074] device bridge_slave_1 entered promiscuous mode [ 1003.971841] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1003.990462] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1004.027971] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1004.035515] team0: Port device team_slave_0 added [ 1004.041853] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1004.049833] team0: Port device team_slave_1 added [ 1004.055831] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1004.063596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1004.129451] device hsr_slave_0 entered promiscuous mode [ 1004.186755] device hsr_slave_1 entered promiscuous mode [ 1004.296962] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1004.304020] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1004.334202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.340621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.347343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.353713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.405630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.415471] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1004.427520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1004.435392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.443603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.462705] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1004.469178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.480048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1004.488433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.494788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.513296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1004.521315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.527761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.550995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1004.559610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1004.577274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1004.589485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1004.600789] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1004.607251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1004.614682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1004.623203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1004.638700] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1004.655961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.704457] Unknown ioctl 4701 [ 1004.758328] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1004.800557] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32020000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:32 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x5, 0xf, 0x3, "dc77e5cccb1a5afec882d1000f18796a0e6572af925a3945d0bfb405a7058b4d"}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x4d8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:32 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1046000, 0x200000) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000000c0)={0x2010}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:35:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$peek(0x3, r0, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:35:32 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1004.961580] Unknown ioctl 4701 01:35:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)={0x2000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="eb7c4903d9ac3a95d571bcd63bcd75363d2baecdbc0ed049068c0000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1005.027272] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:32 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3) r1 = userfaultfd(0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000280)={0x16, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e22, 0xffffffff, 'lblcr\x00', 0x5, 0xa0, 0x6d}, 0x2c) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) userfaultfd(0x80800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000100)={@in6={0xa, 0x4e23, 0x80000000, @mcast1, 0x9}, {&(0x7f0000000040)=""/118, 0x76}, &(0x7f00000000c0)}, 0xfc63da57524c3b33) clone(0x0, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x8400c) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) 01:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:32 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1005.216437] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1005.607060] Unknown ioctl 4701 [ 1005.668288] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:33 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x220100) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x50, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r3, 0x4) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x377, 0x400) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xb) 01:35:33 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={0x0}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:33 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x100000001, &(0x7f00000000c0)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:35:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f23"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000035000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="3e2e0f320fc758790f30baa000ed2e0f00db3e3e0f742d0f015f0c0fc5ea002e3ed9f1baf80c66b83c8a9a8e66efbafc0c66ed", 0x33}], 0x1, 0x2, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x40, 0x0, 0x6146, 0x0, 0x3, 0x0, 0x3ff}, @cr0={0x0, 0x20000000}], 0x2) 01:35:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:33 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={0x0}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x410040, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x2, 0x0, 0xf1df, 0x401, r2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd, 0x0) [ 1005.913151] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000001100)={{0x3, @addr=0x2}, 0x8, 0x8000, 0x7}) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b0f, &(0x7f0000000040)='wlan0\x00\xd3\xeb\x180x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x20000, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x27}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@fsname={'fsname', 0x3d, '\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%'}}]}}) ptrace$setregset(0x4205, r2, 0xcd895ed4e644c2ea, &(0x7f0000000600)={&(0x7f00000005c0)="7398c38b6bbf58904b29cb39efeffe48c29ac535f0c45c13d40b9009a87ddd", 0x1f}) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r4 = mq_open(&(0x7f0000000000)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r4, &(0x7f0000738fc0), &(0x7f0000356000)) 01:35:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:34 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1006.798812] Unknown ioctl 4701 [ 1006.801583] Unknown ioctl 4701 01:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1006.873231] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1006.911768] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. 01:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:34 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x3f) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:34 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:34 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x501}, 0x20}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1007.203877] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 1007.320770] netlink: 'syz-executor3': attribute type 10 has an invalid length. 01:35:34 executing program 3: io_setup(0x480000000000000, &(0x7f0000000100)=0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x20000000400000, 0x40000) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xb, 0xfffffffffffffad4, r1, &(0x7f0000000180)="9c6b8b26b1dad154cbb1fbd41c610192cc29823a8e4b4e2837b42985988fedd9e983ac183562c2bb929677b028ac6d775314860b3da818e9158a5085f76244d16ace88766d19a58560576f8c7e4b5cac70c2fdc4a180973202b74ff29a658aa10d8746d9d4f68bf0e58991126d11c411d7f2c4251eae2b5993b2dfa856550db84b0c", 0x82, 0xe9c, 0x0, 0x2, r2}, &(0x7f00000002c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x5834}, 0x1c) listen(r4, 0x8) r5 = socket$inet6(0xa, 0x10000008, 0x10000) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r4, 0x0, 0x0, 0x0) connect(r4, &(0x7f0000000080)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) recvmsg(r5, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 01:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:34 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x501}, 0x20}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x101}, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r3, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000500)=@ipx={0x4, 0x0, 0x0, "9944868b9c8c", 0x33}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000340)='team_slave_0\x00') ioctl$sock_ifreq(r2, 0x897f, &(0x7f0000000300)={'gre0\x00', @ifru_flags=0x400}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246) r4 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x2000000000, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x400, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r4, 0x800455d1, &(0x7f0000000080)) [ 1007.493950] Unknown ioctl 4701 01:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:34 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x501}, 0x20}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:34 executing program 3: io_setup(0x480000000000000, &(0x7f0000000100)=0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x20000000400000, 0x40000) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xb, 0xfffffffffffffad4, r1, &(0x7f0000000180)="9c6b8b26b1dad154cbb1fbd41c610192cc29823a8e4b4e2837b42985988fedd9e983ac183562c2bb929677b028ac6d775314860b3da818e9158a5085f76244d16ace88766d19a58560576f8c7e4b5cac70c2fdc4a180973202b74ff29a658aa10d8746d9d4f68bf0e58991126d11c411d7f2c4251eae2b5993b2dfa856550db84b0c", 0x82, 0xe9c, 0x0, 0x2, r2}, &(0x7f00000002c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x5834}, 0x1c) listen(r4, 0x8) r5 = socket$inet6(0xa, 0x10000008, 0x10000) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r4, 0x0, 0x0, 0x0) connect(r4, &(0x7f0000000080)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) recvmsg(r5, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) [ 1007.564414] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1007.665849] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:35 executing program 5: sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r0 = socket(0x1e, 0x5, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:insmod_exec_t:s0\x00', 0x23, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000001c0)={0x0, {0x8001, 0xcd26}}) listen(r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 01:35:35 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x102, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 01:35:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1008.073246] Unknown ioctl 4701 01:35:35 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:35 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1008.136470] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1008.266659] Unknown ioctl 4701 [ 1008.277509] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 1008.325935] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. 01:35:35 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:35 executing program 4: r0 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0002040000000001000000000000000000000000000000"], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 01:35:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1008.570167] netlink: 'syz-executor3': attribute type 10 has an invalid length. 01:35:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1008.698463] Unknown ioctl 4701 [ 1008.792596] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:36 executing program 5: r0 = socket(0x9, 0x805, 0x40) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) listen(r1, 0x400000) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x140, 0x1) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x200, 0x9, 0x1, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x4}, 0x8) accept4(r1, 0x0, 0x0, 0x0) 01:35:36 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4, 0x2, [@tunl_policy]}}}]}, 0x30}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x3, 0x5, 0x80, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) sendmsg$can_bcm(r3, &(0x7f0000000500)={&(0x7f00000003c0), 0x10, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000e001000000020000a0020100b4cb200392f7d247f5"], 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000810) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x8400, 0x0) ioctl$int_in(r6, 0x800000c0045002, &(0x7f0000000580)=0x100040000) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x4}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400)={0x1, 0x5, 0x3a, 0xffff, 0xffffffffffffffe0, 0x0, 0x8000, 0x20, 0x7, 0x8000, 0x5}, 0xb) r7 = fcntl$dupfd(r2, 0x0, r2) r8 = socket$bt_rfcomm(0x1f, 0x1, 0x3) dup2(r8, 0xffffffffffffffff) splice(r7, &(0x7f0000000080), r7, &(0x7f0000000240), 0x766, 0xb) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000600)={0x0, 0xfa, "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"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 01:35:36 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x1f, &(0x7f0000000080)={@remote}, 0x8) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) [ 1008.956084] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000018912, &(0x7f0000000380)="0a5c8896704d69e3ba93d4f0b0073a92b70b0b6cacefd92350e9066b2db29a4d78e7392fa4b684f5046bfe761142229efdb49f0f488634996c7e66e0e6896c016b260b98") pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3ffffffe}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x0) ioctl$int_in(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000180), 0x1) sendto$packet(r4, &(0x7f0000000040)='R', 0x1, 0x3ffffff, 0x0, 0x0) 01:35:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:36 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4, 0x2, [@tunl_policy]}}}]}, 0x30}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:36 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:36 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4, 0x2, [@tunl_policy]}}}]}, 0x30}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1009.332016] Unknown ioctl 4701 01:35:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:36 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000939ff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4$unix(r1, 0x0, 0x0, 0x0) [ 1009.433440] Unknown ioctl 1074287107 01:35:37 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x9, 0x3, 0x10000, 0x9}, 0xfffffffffffffeb9) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:37 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(0x0, 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1009.880366] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1009.911357] Unknown ioctl 1074287107 [ 1009.987026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.012053] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:37 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000380)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') 01:35:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local, 0xffffffffffffffff}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @ipv4={[], [], @initdev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:35:37 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(0x0, 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:37 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1010.418581] Unknown ioctl 4701 01:35:37 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(0x0, 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1010.486809] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp\x00') sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="99", 0x1}], 0x1}, 0x8000) sendfile(r1, r2, 0x0, 0x40040000000200) 01:35:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e430e00000000fffffff08ef9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) [ 1010.548422] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 1010.697701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1010.709854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1010.718533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:35:38 executing program 5: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_hsr\x00', 0x10) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 01:35:38 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup2(r1, r0) 01:35:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x13102041ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x24, 0xfffffeffffffffff, 0x3e}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) ptrace(0xfffffffffffffbff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 01:35:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000040)='R', 0x1, 0x3ffffff, 0x0, 0x0) [ 1010.840909] Unknown ioctl 4701 [ 1010.840976] ptrace attach of "/root/syz-executor3"[10316] was attempted by "/root/syz-executor3"[10322] 01:35:38 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1010.965489] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:38 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = semget$private(0x0, 0x3, 0x300) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000180)=""/251) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x800000004, 0x101006) write$evdev(r0, &(0x7f00006f7fe8)=[{{}, 0x1, 0x12, 0x400000002}], 0x210) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x9, 0x0, 0x4, 0x20000000, {0x0, 0x2710}, {0x7, 0x2, 0x0, 0x101, 0x10001, 0x8000, "e8c789ad"}, 0x3, 0x4, @userptr=0x3, 0x4}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x401, 0x400) 01:35:38 executing program 3: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) sync_file_range(r0, 0x1, 0x2, 0x5) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x400) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x80) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0) r5 = request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000440)='\xcf\x00', 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) keyctl$chown(0x4, r5, r6, 0x0) fsetxattr(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000600)=0x1, 0x4) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000240)={0xff, {{0xa, 0x4e23, 0x8, @mcast2}}}, 0x88) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000003c0)=""/83) 01:35:38 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 1011.332298] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x84000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x81, &(0x7f0000000000)="bc14ca413c5488b5aec6ac600913b30b52292ef1d7c3f87935c8d7ee79af1a630990fa6ae295f7ee9653b3cf7d5bab44ea9d7eee3b7777fbe32623da10d0bc5b763737d33d17f2d2dd5ac2c8de80fb9a67ffc9c591d824a3b12e90f32e0d6abf62f7ffdf8d19ab1e126106588ffa09821c9c9429"}) getsockname$tipc(r0, &(0x7f0000000280)=@name, &(0x7f0000000200)=0xffc0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2, &(0x7f0000000180)='\np\x00\x00\x00\x00\x00\x00\x00\x00\x00') r2 = socket$inet6(0xa, 0x1, 0x81) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x50, r3, 0x914, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7a6e}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfc8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000850) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000240)) getsockopt$inet6_buf(r2, 0x29, 0x21, &(0x7f00000003c0), &(0x7f0000000380)) alarm(0x4) 01:35:38 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'sit0\x00', 0xe401}) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 1011.639214] Unknown ioctl 4701 [ 1011.705519] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1011.884335] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:39 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x82, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 01:35:39 executing program 5: r0 = socket(0x1e, 0x805, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x1, 0x4, 0x4, 0x8107000c, {r2, r3/1000+10000}, {0x2, 0xe, 0x4c, 0x138b, 0x3d, 0x0, "2f6b3792"}, 0x4, 0x0, @fd=0xffffffffffffff9c, 0x4}) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r4, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r4, 0x0, 0x0, 0x0) 01:35:39 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00\x00\x00\x00\x00\x00\xae\'\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f00000002c0)="030300000200600000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e285472da7222a2bb401000000c3b50035110d118d0000f5f0d8dcf8120fb6cfe606f6925cbf34658ea132797b1abc5dc62600009b001c00faffff", 0x6c, 0x0, 0x0, 0x0) 01:35:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:39 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1012.381959] Unknown ioctl 4701 01:35:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1012.452531] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1012.549068] Unknown ioctl 4701 01:35:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe27, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x2, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000006c0)={0x7fffffff, 0xbc6e}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {0x0, r4}}, 0x18) r5 = getpgrp(0x0) process_vm_writev(r5, &(0x7f0000001940)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000640)=""/50, 0x32}, {&(0x7f0000001740)=""/207, 0xcf}, {&(0x7f0000001840)=""/228, 0xe4}], 0x5, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x1f, 0x2, r3}) socketpair(0x1d, 0x80807, 0x9, &(0x7f0000000100)) [ 1012.614657] IPVS: ftp: loaded support on port[0] = 21 [ 1012.622077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. [ 1012.637383] device bridge_slave_1 left promiscuous mode [ 1012.642969] bridge0: port 2(bridge_slave_1) entered disabled state 01:35:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3202000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1012.727737] device bridge_slave_0 left promiscuous mode [ 1012.733323] bridge0: port 1(bridge_slave_0) entered disabled state 01:35:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1013.060844] device hsr_slave_1 left promiscuous mode [ 1013.139712] device hsr_slave_0 left promiscuous mode [ 1013.182443] team0 (unregistering): Port device team_slave_1 removed [ 1013.221798] team0 (unregistering): Port device team_slave_0 removed [ 1013.260564] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1013.316072] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1013.468343] bond0 (unregistering): Released all slaves [ 1013.579457] netlink: 'syz-executor3': attribute type 10 has an invalid length. [ 1013.590250] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 1013.939461] chnl_net:caif_netlink_parms(): no params data found [ 1013.994674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.001214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.017020] device bridge_slave_0 entered promiscuous mode [ 1014.024827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.040243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.051525] device bridge_slave_1 entered promiscuous mode [ 1014.089879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1014.103765] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1014.142544] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1014.154151] team0: Port device team_slave_0 added [ 1014.163771] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1014.180174] team0: Port device team_slave_1 added [ 1014.185638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1014.200872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1014.271935] device hsr_slave_0 entered promiscuous mode [ 1014.326574] device hsr_slave_1 entered promiscuous mode [ 1014.366884] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1014.373989] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1014.405179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.411590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.418306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.424681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.514278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.533675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1014.552961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1014.564574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.581203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.605132] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1014.615630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.634584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1014.645527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1014.662185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1014.672772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.679185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.699251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1014.715788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1014.724489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1014.741464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.747933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.768755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1014.784713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1014.804489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1014.811942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1014.833454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1014.850748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1014.860063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1014.878910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1014.895163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1014.903246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1014.919838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1014.936379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1014.945981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1014.955823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1014.971389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1014.981567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1014.992040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1015.001990] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1015.010877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1015.027379] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1015.040179] 8021q: adding VLAN 0 to HW filter on device batadv0 01:35:42 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:42 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, 0x0, 0xffffffffffffff04, 0x0, 0x4b3}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:42 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x111400, 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@ng={0x4, 0xb, "dbb8e2adcf6ce28b18"}, 0xb, 0x1) write$UHID_INPUT2(r0, &(0x7f0000000180)={0xc, 0x21, "1bdbd44842ddf10586bb27724594d66333154482047ce32116586127282edb19bc"}, 0x27) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) r1 = socket(0x10, 0x802, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x5}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x2, 0x7, 0x8}, 0xa) 01:35:42 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1015.208308] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1015.269844] Unknown ioctl 4701 [ 1015.284165] Unknown ioctl 4701 01:35:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x2800, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000001c0)=0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x6, 0x101, 0x5, @empty, 'ipddp0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @mcast1, 0xb7}, @in6={0xa, 0x4e20, 0x80000000, @remote}, @in6={0xa, 0x4e20, 0xffffffff, @rand_addr="89b9742c3f3f6a8a6b2b0a283cf1c6a0", 0x31300000000000}, @in={0x2, 0x4e22, @empty}], 0x64) iopl(0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000dddfc8)={0x0, 0x21a, &(0x7f00008a7000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000009060501ff0080fffdff1b2f0a0000000c000100fb0000007d0a00010c000200040000000000000035"], 0x2d}}, 0x0) 01:35:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1015.345043] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. [ 1015.371007] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1015.473208] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 1015.528457] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1015.550447] netlink: 'syz-executor4': attribute type 1 has an invalid length. 01:35:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:42 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1015.710283] netlink: 'syz-executor3': attribute type 10 has an invalid length. 01:35:43 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x8040) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x2, 0x8, 0x0, 0x5, 0xfa}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb9, &(0x7f00000000c0)) 01:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1015.860455] Unknown ioctl 4701 01:35:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, 0x0}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000740)={0x0, 0x7fff}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x4000000000000005, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)=0x4) ioctl(r2, 0x8912, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getresuid(&(0x7f0000000440), 0x0, &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) utime(0x0, &(0x7f0000000100)={0x0, 0x6}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getownex(r0, 0x10, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x403, 0xffcd) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {r3, r4/1000+10000}}) socket$inet6_sctp(0xa, 0x0, 0x84) syz_emit_ethernet(0x0, &(0x7f0000000340)=ANY=[], 0x0) [ 1015.934502] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1016.005373] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:43 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x0, @loopback, 0x4e20, 0x2, 'wlc\x00', 0x20, 0x6373, 0x1d}, 0x2c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffff6ee9) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0xc, &(0x7f0000000080)='eth0selinux\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000000240)='/dev/vcs\x00'}, 0x30) r3 = getpgid(r2) getpriority(0x1, r3) 01:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1016.286680] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:43 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:43 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1016.601798] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:44 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:44 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:44 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x3, &(0x7f00000002c0)={0x0, 0x0}) connect$pptp(r0, 0x0, 0x0) unshare(0x8000400) mq_open(&(0x7f0000000100)='user#vboxnet1\x00', 0x6e93ebbbcc0884f1, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:35:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:44 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x1) accept4(r1, 0x0, 0x0, 0x0) exit(0x3f) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$rxrpc(r2, &(0x7f0000000280)=@in6={0x21, 0x35cf, 0x2, 0x1c, {0xa, 0x4e23, 0x20, @rand_addr="e99104e85acd7cd0630651a71f0cbc26"}}, 0x24) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000dda81901d0e6df4a19a45ece8c80ff00000000000000000000000000008dcbe0a0aba4eed39a58b6e894bbd02c539291c8156ddd881bcacf9db6b3b372d249f1e0886ee6ac4245e6a73ac2a68ccee04d38a6018c7b99259004cd915e24951b6078f5cc3f266d34e0c4f7f0181aec2993dbe74e7702f40cc354ad8d82764e9046fd2e28b7a9b11c545f68ac79b4af9795397f8101a8c9b255abb9d6e2663cc7714c1d662d39c7891bb7"]) 01:35:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x600080, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x150, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0x21}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x268400d3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8e5}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1b}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x84) recvfrom$inet(r1, &(0x7f0000000340)=""/69, 0x45, 0x2000, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_emit_ethernet(0x198781, &(0x7f0000000140)={@local, @empty, [], {@arp={0x8864, @ether_ipv4={0xf, 0x800, 0x6, 0x4, 0x0, @random="56df23d50800", @dev, @empty, @remote}}}}, 0x0) 01:35:44 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:44 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1017.381285] Unknown ioctl 4701 01:35:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1017.452393] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='logfs\x00', 0x24e8, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400000) 01:35:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffefb2, &(0x7f0000000040)) r2 = accept(0xffffffffffffff9c, &(0x7f0000000140)=@xdp, &(0x7f0000000000)=0x80) r3 = gettid() sendmsg$nl_generic(r2, &(0x7f00000019c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)={&(0x7f0000000200)={0x1744, 0x26, 0x200, 0x70bd28, 0x25dfdbfc, {0xb}, [@typed={0x8, 0x1a, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @generic="9320ff5587c417ccc77ff9b6b44870cb61503fdcc20ffb5b3753b98d3e8ef4ccedd52ed3bd5b3dbe646c0ad2cececfedae0d8da34f92ff122421989661f43d4a51a1d5eefa6da76fea9a3a8280d0afc793d14340bbdf8072f4c08f5437a7f88fde72", @nested={0x328, 0x4f, [@generic="58042b8fcc88bc49baad44b41142e401ca60a0a5573d4133007919433dada77bf95e53afaad6748031c790fc1d16cc9fd875e39083a165112ca491eb550f6d79f6a5f2b9d5ba9d493c3dbe08888c485988bcdb85df912f16da038894f172e81af8319161f06d2e26c4c0dbb417a1f99cb7de0b6a8ee81ac28a6aaf4764b0a3883cb8", @generic="e634b1c37a7bd651a761d4176b4ca00647c9c9c937c4159d75", @generic="8584df43683b296d9080ac268df7ed3315ae7511eb5552a39c3d6d89274d6696349230824ccb9ace70822c3684a4d4779103a82715e98f66cbf6ed256b2d9f5c1c97125026eeb44036419397abcf7093966a9efd290149b526a0997e88a65eb4aa1302fdc74403d23504f2266d7ff841f0", @typed={0x10, 0x13, @str='/dev/ppp\x00'}, @typed={0xa4, 0x17, @binary="fe312b3e10436239c59e2488922006e3118737e9b44242cdcca8ce09cda80c6be486b272e6f589e1316045d51c3fe1cb7f203d29719faf968cc893d5e496b76babf24c187d36bd65a4e939479fd5f5e9aeefb6ae2d2dbdd7ca2f1f78db347537591946dbe34d5ddf795de52ca51bf86217e4baab6bb051075b99f25bc75d3d934b2f5719bf6ce676f8c09c928ed3c7a56556ea11464f7f0957513e42fc0554"}, @typed={0x8, 0x78, @str='\x00'}, @typed={0x8, 0x6, @u32=0x3ff}, @typed={0xa4, 0x68, @binary="227399b55e08ccbeb0b811a6adb2cc0dfec08d4d5f18e05ff8bbdedaec1045115df4520cc735538097e830d184a041919a70fcf93c4dc72f9e85da28b5a3a253f94cd99507ff314d2a1a301717bd476d1bc57893c432e88d31f6ccd3dbe664837cf7790979eac55c864072e0b4fd88abceaeebce78e2e65df0115dd9889c78c4d44e6c55a17af62c6eea1326cab8e4c5368ac524b2b7c4f798e31e135526b1"}, @typed={0x14, 0x8e, @ipv6=@ipv4={[], [], @multicast2}}, @generic="eb50c754846c16bae7426534a0d6ec4237b409dac4371ed1edf7741797d3c4488ca787dea78a228cffbcfa8b65400a01b340eb36e863bbcd2a17c7de6c8125ee2b5cd89ca1ea63958486404cc3d1eeee51b86be2823ace11e593a34fe868b4c0e85b67cf8d519ef3204dcf1a434cb9254e853b922d8fd409a7342d8fad837ee71c9f725e69e5b01a35fc6b5310c3bed0f4a1cdb3decbd7c69ac4b7"]}, @nested={0x1378, 0x56, [@typed={0xc, 0x3f, @u64=0x8000}, @typed={0x14, 0x4f, @str='/dev/dri/card#\x00'}, @typed={0x8, 0x6f, @pid=r3}, @generic="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", @generic="836620530e2e13a63750cc5418edfd3f77af84fbd79c23d1ac8db3fd974bf470fd9ca2355c320cf4f30d1381003c227ebcc46d8b42d05c761a57c7b78b23f35e9146bb4b7124521748b530ffd312c813e77998bc896f297e862052e4a9597de27b2d39632ef120aec8d91644cf14a1e0f7fd6cd20b145b4f32e745a0385592077b11552c18f9fef3bfa6157522b3ebcabfa83f51e49cb0d8222e2321013a7e5f49d059374b05b4d2d1d95030d602370eda810b3319d8b0a9f0e2e31bede98110bcee380a32e17d39c656cac3562e4186e012b37fe7aa0161377912cab95e4919a13603d87be879c7c6d1cf96c92958e34e", @typed={0x4, 0x3c}, @generic="7b4eb416a1583fbe6fb2ce7941eabb3f0df16b26e2043f2174017d9d7a3476ca3ada96a5c1f2737f71d5bec6cf8cf37204c8420e2bcdf5a7b8c6040ff3e2e555070994e848e44cf3af803344436bfa3760a93bb7ea3df54f58c144c1cd299aee219c05fb886d1d50c215df588aad019c2e8d5bcadb8d1b94a61f984186919f5df2ef583d785fb936cac76c03c109df93642276bfffd9eb09e0bfb5d8022e6bbb99f828ab41b86026543caccb743ceeb4d844f56b5354f088d8a4ea185f4c2946f27fe6ac76076aa1fc76015d27f02e522d7666648b6e3a1cdca7362572f76d6edaa1ea33cdc1d58ad5249fa755e0304dc3c2541e9c9b76c3", @generic="16df9db2367a7ddfae151cb37339d5b615063ce02e1be33c609916367484c597568b919809380fb479855997582de99bd10ae218db731581e4d8c878756a2295b02797ca9a569abcab874ef55807a581df70b2a5173cbe87134e33d60d4ccde624c7a98b4d468ebce2ee3b094a6845be84387cad96c5bebfd7a816201ae70d0a5056265036f8609a50bee8a09d95e24116fe4bff2a9fc24bce57d02670c1eebacb", @typed={0xbc, 0x45, @binary="0aeaddf387c9bf7bc627450821a732620a44cfadba8e47a17652e3c965a4342d6b3557ed46ca105db9fb5206db36de5e4d0bd9510908d939455b6a26755a233183af3f909200e51a37bf537651c255fce4f78c10a3fff125396899c97626ef75eca7992ea6b0f161a8e64f532d899ff7ffcf602357c6d2f475eb60fd607527f0e1f9cbb3061d369d4417f1e21116b0fe6c62118b33b57340e5f0565b8f48aaa9970f3e947b78ff839409b44159286a5ac0edbb6275"}]}, @nested={0x24, 0x48, [@typed={0x8, 0x53, @u32=0x9}, @typed={0x10, 0x58, @str='trusted.\x00'}, @typed={0x8, 0x3a, @str='\x00'}]}]}, 0x1744}}, 0x8000) r4 = socket$alg(0x26, 0x5, 0x0) dup2(r4, r1) 01:35:45 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x100) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0xc7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_getnetconf={0x14, 0x52, 0x101}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x8, 0xd, 0x0, 0x6, 0x2, 0x1c}, @exit], &(0x7f00000001c0)='GPL\x00', 0x3, 0x4f, &(0x7f0000000200)=""/79, 0x0, 0x1, [], 0x0, 0x1}, 0x48) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1d9f838c1cb2d4b, 0x0) 01:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:45 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044df9, &(0x7f0000000180)) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) 01:35:45 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:45 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00004f5000)=@pppoe={0x18, 0x0, {0x1, @remote, 'veth0_to_bridge\x00'}}, 0x1d, 0x0}, 0x1) accept4(r1, 0x0, 0x0, 0x0) [ 1018.326702] Unknown ioctl 4701 01:35:45 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000200060cbfe0562ab21b454f25969e8c44a04aa1450b2cd59af9697941706443c483ea4df3e94403150c11254f02ecd", @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) 01:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1018.419845] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:45 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='batadv0\x00', 0x10) r2 = accept(r0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, [], [{0xfffffffffffffe00, 0xe975, 0x88, 0x59}, {0x4, 0x720, 0x9, 0x0, 0x5, 0x2}], [[]]}) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="fc"], 0x1) 01:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:45 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0xc0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x100000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x8, 0xffff, 0x201, 0x2, 0x9, 0x8, 0x6, 0x2, r1}, &(0x7f0000000100)=0x20) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000003060501ee00000c000100060000007d5500010c000200000022ff02f10000000000000000000000"], 0x2c}}, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) [ 1018.627967] validate_nla: 4 callbacks suppressed [ 1018.627998] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1018.748454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor4'. [ 1018.768668] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x10) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000340)=0x3, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x800, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:35:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1018.870813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor4'. 01:35:46 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1018.990575] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:35:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xffff0020, 0x1000000000000000, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0xffff0020, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 1019.260670] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0x6940000}) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) syncfs(r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000180)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000140)={0x100000001, 0x100}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x3}) socket$inet6_sctp(0xa, 0x200000000000005, 0x84) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000400)=@req={0x127a, 0xce43, 0x8, 0x6}, 0x10) shmget(0x0, 0x1000, 0x80, &(0x7f0000bfa000/0x1000)=nil) 01:35:46 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) accept4(r1, 0x0, 0x0, 0x0) 01:35:46 executing program 4: remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xfffffffffffffffd) 01:35:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1019.412624] Unknown ioctl 4701 01:35:46 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 1019.501329] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:46 executing program 4: syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x57dc, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 01:35:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:47 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80801, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f00000000c0)) 01:35:47 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x0, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1020.001900] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 1020.066838] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:47 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x400000) ioctl$BLKTRACESTART(r0, 0x2286, 0x7fffffffefff) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000280)=0xfffffffffffffe83) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r2, 0x19, "faa8c2dd84b391232e9bd5486da86aa6edd19ff02ea68322ac"}, &(0x7f0000000100)=0x21) setxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x3f, 0xffffffffffffff81}, 0x8) 01:35:47 executing program 3: r0 = socket$inet6(0xa, 0x4000000000000a, 0x4000000000000) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x178, 0x10001, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x200) 01:35:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:47 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x0, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:47 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x0, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1020.624338] Unknown ioctl 4701 01:35:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0xe220fc2967c533a3}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x102, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000002c0)=""/4096, &(0x7f0000000100)=0x1000) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000000c0)={0x400000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 01:35:47 executing program 4: prctl$PR_SET_ENDIAN(0x14, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="fba1416cdd03dd15734d4e6a59b8fc5c", 0x10) [ 1020.704744] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:48 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @ioapic={0x0, 0x5, 0x2, 0x4, 0x0, [{0x1, 0x73ff, 0x101, [], 0x8}, {0x449, 0x4, 0x7400000000000000, [], 0x4}, {0x1000, 0x81, 0x7ff, [], 0x7ff}, {0x8, 0x0, 0x100000001, [], 0xc000000}, {0x1000, 0x1, 0x2, [], 0xdb3c}, {0x6, 0xcf4, 0x3, [], 0x3}, {0x8, 0x5, 0x51a, [], 0x7f}, {0x3, 0x2a7c, 0xff, [], 0xa00000000000000}, {0x200, 0x4, 0x7, [], 0x6}, {0xf9, 0xfffffffffffffdc5, 0x6, [], 0x8000}, {0x8d21, 0xffffffff, 0x3, [], 0x3ff}, {0x0, 0x8, 0x1cd0, [], 0x80000000}, {0xffffffffffff8000, 0x3, 0x8, [], 0x5}, {0x2e, 0x4, 0x7, [], 0x4}, {0xff, 0x20, 0x7, [], 0x2}, {0x7000000000, 0x40000000, 0x0, [], 0xc343}, {0x4, 0x0, 0x9, [], 0x5}, {0x9, 0x10001, 0x1f, [], 0x4}, {0xd2, 0xd9, 0x7ff, [], 0x7fffffff}, {0xf6d1, 0x7, 0x40, [], 0x5}, {0x5, 0x7, 0x6, [], 0x7ff}, {0x96d, 0xfff, 0x8, [], 0x1}, {0x72dc1508, 0x0, 0x8, [], 0x3}, {0x907a, 0x200, 0x5, [], 0x7fff}]}}) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) finit_module(r1, &(0x7f00000001c0)='vmnet0vboxnet0Uwlan1\x00', 0x2) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 01:35:48 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:48 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:48 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x1000, 0x7f}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x200001, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2080031, 0x0) 01:35:48 executing program 4: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x1, 0x8000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x10000032, 0x829, 0x0, 0x0, {0x2804, 0x1000000}, [@nested={0xc, 0x0, [@typed={0x8, 0x9, @uid}]}]}, 0x20}}, 0x0) 01:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x232}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:48 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x21, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x6, 0x2, 0x10000}) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 01:35:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:48 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1021.350261] Unknown ioctl 4701 01:35:48 executing program 3: r0 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000680)={0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x4, 0x101, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x3, 0x9, 0x7, 0x400, 0xfffffffffffeffff, 0x6, 0xc0b, 0x101, 0x9, 0x4, 0x800, 0x10001, 0x4, 0xfffffffffffffff7, 0x5, 0x891, 0x2, 0x4, 0x1, 0x7a6, 0x1000, 0xffffffff, 0x80000000, 0x6512, 0xf5, 0x7, 0x2, 0x800, 0x0, 0x80, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x22000, 0x9, 0x7112, 0x7, 0x4, 0x5, 0x5}, r2, 0x4, r1, 0xa) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="f30f088fe978d10c8066b825000f00d0b9800000c00f3235008000000f30b9d30a0000b8e471ef8aba000000000f30c583030000000fc759020f01d1b9110800000f32b9800000c00f3235001000000f30", 0x51}], 0x1, 0x1, &(0x7f0000000500), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x32001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x80, 0x800) fcntl$addseals(r8, 0x409, 0x8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r10) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in=@rand_addr=0x5, 0x4e24, 0xd9, 0x4e21, 0xd63d, 0x2, 0x20, 0x80, 0xff, r9, r10}, {0xfff, 0x80000001, 0x87, 0x8, 0x5, 0x5, 0x101, 0x1000}, {0x400, 0x1, 0xa94, 0x3}, 0x9, 0x6e6bb3, 0x2, 0x1, 0x3, 0x1}, {{@in6=@rand_addr="1cbbe31f7581f8e0e5c8d97a036bb3dc", 0x4d5, 0x3e}, 0xa, @in=@local, 0x3501, 0x0, 0x1, 0x10000, 0x24, 0x5, 0x2a90f9c}}, 0xe8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x7fffffff}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={r12, 0x400, 0x80000000, 0x2}, 0x10) sched_rr_get_interval(r11, &(0x7f0000000080)) 01:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:48 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 01:35:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) 01:35:48 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1021.448472] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"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"}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x8, 0x7}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) write$P9_RSTATFS(r3, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x7fffffff, 0x1e, 0xf06, 0xcb66, 0x1, 0x4, 0x3, 0x5, 0x3}}, 0x43) 01:35:48 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'caif0\x00', 0x2}, 0x18) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x11010, r0, 0x180000000) socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 01:35:48 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:49 executing program 3: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 01:35:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0e, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) r4 = dup2(r3, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000440)={{0x6, 0x7, 0x1000, 0x80, 'syz0\x00', 0x6}, 0x0, [0x1, 0x5, 0x4, 0x5, 0xffffffff, 0x9, 0xfff, 0x9, 0x0, 0xc8e1, 0x1f, 0x3f, 0x0, 0x0, 0x2, 0x40, 0x1da47420, 0x2, 0x80, 0x7, 0x1, 0x7fff, 0x100, 0x1, 0x3, 0xffffffffffff409e, 0x3, 0x5, 0x2, 0x0, 0x6, 0xffffffffffff00bd, 0x9, 0x9f89, 0x9, 0x0, 0x80000000, 0x80, 0x9, 0x2, 0x0, 0x7f, 0x8000, 0x4, 0x1f, 0xfffffffffffffff9, 0x8d, 0x9, 0xfffffffffffffffa, 0x7fffffff, 0x1, 0x3, 0x4, 0x0, 0x9, 0x2800000, 0x9, 0x747, 0x100000001, 0x96, 0x0, 0x76d19e6c, 0x800, 0x1, 0x53f3, 0x10001, 0x5, 0x7fffffff, 0x3f, 0x8001, 0x0, 0x8001, 0x2, 0xffffffffffffff00, 0x4, 0xfffffffffffffffb, 0x1, 0x60, 0x80, 0x0, 0x5, 0x3f, 0x0, 0x5, 0x80000001, 0x9, 0x3, 0x800, 0xaf, 0x4, 0x80000001, 0x9, 0x2, 0x80000000, 0x7, 0x1, 0x7, 0x51, 0xc619, 0x5, 0x4, 0x6, 0x6, 0x0, 0x2, 0x2, 0x10001, 0x8, 0x1, 0x8000, 0x20, 0xdd, 0x8934, 0x6, 0x4, 0x4, 0x2, 0x5fa3, 0x9, 0x1000, 0x7f, 0x8, 0xffff, 0x1, 0x6, 0x101, 0x2, 0x7f]}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = semget(0x1, 0x4, 0x94) acct(&(0x7f00000001c0)='./file0\x00') semop(r5, &(0x7f0000000000)=[{0x2, 0x7, 0x1000}, {0x3, 0x3ff, 0x1000}, {0x0, 0x101, 0x1000}, {0x769d07455d3d6968, 0x3, 0x1800}, {0x4, 0x33b5}], 0x5) 01:35:49 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0xd, 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) syncfs(r0) 01:35:49 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:49 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x0) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8c3, 0x20000) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) rmdir(&(0x7f0000000200)='./file0\x00') 01:35:49 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) getsockname(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000000)=0x80) listen(r1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, &(0x7f0000000280)=0x4) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:49 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x0) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:49 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80040, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000140)={0x0, 0x0, 0x4, 0xa50, 0x5, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\xd8\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0x10001, 0x2c}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000100)={'lo\x00\x1e\x00', {0x2, 0x0, @empty}}) perf_event_open$cgroup(&(0x7f0000000300)={0x7, 0x70, 0x1, 0x100, 0xffffffffffffffff, 0x20, 0x0, 0x5, 0x400, 0x3, 0x2cf, 0x3f, 0x2, 0x10001, 0xf956, 0x8, 0x1, 0x0, 0x1d, 0x9, 0x9, 0x4, 0xb14c, 0x8, 0xfffffffffffffffa, 0x10001, 0x100000000, 0xc0000000, 0x40, 0x7, 0x100000001, 0xfffffffffffffffc, 0x1000, 0x0, 0x5, 0x3, 0x1f, 0x4, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x100, 0x96f, 0xe11e, 0xb, 0x683f, 0x1000, 0x4}, r0, 0x7, 0xffffffffffffffff, 0x0) [ 1022.727790] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={@remote, @broadcast, 0x0}, &(0x7f0000000400)=0xc) shmget(0x3, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmget(0x0, 0x4000, 0x0, &(0x7f0000ff4000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff6000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff6000/0x3000)=nil) r2 = shmat(r1, &(0x7f0000ff7000/0x2000)=nil, 0x5000) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x141) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xdc, r4, 0x9, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0xc0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xb7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) shmdt(r2) r5 = getpgid(0xffffffffffffffff) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/tcp6\x00') ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000740)='syz1\x00') ioctl$TIOCSCTTY(r6, 0x540e, 0xe3c) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffa000/0x1000)=nil) shmat(0x0, &(0x7f0000ff7000/0x6000)=nil, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000440)=""/203, 0xcb}], 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x8) ptrace$getsig(0x4202, 0x0, 0xfffffffffffffffb, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') 01:35:50 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x0) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:50 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x1, 0x0, {0xa, 0x4e21, 0x7, @mcast1, 0x3}}}, 0x3a) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1023.059555] Unknown ioctl 4701 01:35:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:50 executing program 3: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) getsockname(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000000)=0x80) listen(r1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, &(0x7f0000000280)=0x4) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 01:35:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000480)=0x3) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) clock_gettime(0x0, 0x0) ptrace(0x10, r1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0xc200) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080)=0x7a2a, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x158, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xdc, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc9f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff00000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2ce10eb9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) 01:35:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1023.920045] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000050000000000000000000000000800000000000000000000002400000000000000000000000000000000a2ed33036cf75612fb6f5164b9b9fa6945e05fab061e6101a6e595027498f5e7baa3187d1285a6d992af1820fef4b14e2f41ed0588e0b8b6a8f44d4a9f95158b3a2a8ec26559000000000000000000000000000000003ccf038c894b7c1d77591899e161c3a6684a4a2332cfbdab758b90b81f0d52a5cfb0408a14083813372c21b8296f1ecfc53a72f01bcd5857c40322"], 0x0, 0x10000000, 0x0}) 01:35:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x24}, 0x3ff}}, 0x0, 0x2, 0x0, "904aaf118c25104f7b9f1412f11960976030a61bfa52dafd69b4209f56c33d5f797dbb5c6496747576b1ce1a20588dcd632cdb8d5bd2908720b5eb178bd97b2c5b3976d32f2acd755aa048f9b976031c"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @dev}}, 0x0, 0x6, 0x0, "b6f73b6e690dfa12c023fe736a343f8b70bbfadd0b2b7917794acb5f197a68d966aa0b5a5f41ca2b6204d8bac209c26d4b213ba809a1c6e983a2b18c3657b1710a93895ee1e98fb8566092d73d71d352"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000014c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x0, "4ae9645a4bdbefd0187f1e35cba955127c7ca8b982f7408054208a36ee7b341bc01b6d8d52e8ee57c61ec7f041e965466b7a2d4cec6a16d568c9683cac6791e3bef5d31b03d40e4f5f68137e44379c3b"}, 0xd8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) [ 1024.248712] binder_alloc: 10957: binder_alloc_buf, no vma [ 1024.257315] binder: 10957:10958 transaction failed 29189/-3, size 134217728-2594073385365405696 line 3035 [ 1024.272349] binder: BINDER_SET_CONTEXT_MGR already set [ 1024.278594] binder: 10957:10958 ioctl 40046207 0 returned -16 [ 1024.284663] binder_alloc: 10957: binder_alloc_buf, no vma [ 1024.290764] binder: 10957:10961 transaction failed 29189/-3, size 134217728-2594073385365405696 line 3035 [ 1024.311142] binder: undelivered TRANSACTION_ERROR: 29189 01:35:51 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(0x0) 01:35:51 executing program 5: r0 = socket(0x1b, 0x7fc, 0x3) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x200000) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x2) 01:35:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1024.360516] binder: undelivered TRANSACTION_ERROR: 29189 01:35:51 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r5 = syz_open_dev$cec(&(0x7f0000000500)='/dev/cec#\x00', 0x3, 0x2) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x1, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x880, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x101000, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0xe123, 0x8002) r10 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x91568bf9911c616d, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 01:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010500000000000000000100000000000000014100000018001700000000000000006c64703a73637a3200000000"], 0x34}}, 0x0) [ 1024.470810] Unknown ioctl 4701 01:35:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3202}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1024.504252] Enabling of bearer rejected, media not registered [ 1024.565093] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x6e22}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0x3, 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003fffffffffffff000cfb193e7ee00000000000000000000000000", 0x58}], 0x1) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x14200, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000100)) 01:35:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000900)) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000054000/0x2000)=nil) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000600)=0x8, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000005c0)) r5 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) rt_sigsuspend(0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x4000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000edc000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000001500), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) sync() accept4(r4, 0x0, &(0x7f0000000080), 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 01:35:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x40000) r2 = eventfd(0x5) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x2, 0xfffffffffffffff8, 0x0, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={r5, 0x0, 0x1, [0xfffffffffffffe01]}, 0xa) utimensat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r3, r4/1000+10000}, {0x77359400}}, 0x100) fcntl$notify(r0, 0x402, 0x8000002c) [ 1024.847740] device bridge_slave_1 left promiscuous mode [ 1024.853441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.951378] device bridge_slave_0 left promiscuous mode [ 1024.957571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.029193] IPVS: ftp: loaded support on port[0] = 21 [ 1025.340414] device hsr_slave_1 left promiscuous mode [ 1025.393284] device hsr_slave_0 left promiscuous mode [ 1025.473764] team0 (unregistering): Port device team_slave_1 removed [ 1025.486232] team0 (unregistering): Port device team_slave_0 removed [ 1025.498873] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1025.553836] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1025.634949] bond0 (unregistering): Released all slaves [ 1025.741778] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 1025.925473] chnl_net:caif_netlink_parms(): no params data found [ 1026.018309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.024818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.032581] device bridge_slave_0 entered promiscuous mode [ 1026.040069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.046478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.053900] device bridge_slave_1 entered promiscuous mode [ 1026.153138] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1026.163141] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1026.185277] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1026.196094] team0: Port device team_slave_0 added [ 1026.202317] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1026.217585] team0: Port device team_slave_1 added [ 1026.223063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1026.238584] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1026.309447] device hsr_slave_0 entered promiscuous mode [ 1026.346541] device hsr_slave_1 entered promiscuous mode [ 1026.386824] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1026.393855] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1026.424598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.431018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.437759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.444129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.525384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.544399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1026.565034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1026.575606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.592156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.615427] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1026.622090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.632900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1026.641476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.647895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.678029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.685739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.692154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.701513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1026.724026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.731705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.747281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.758560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.777496] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1026.783535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1026.800020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.820956] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1026.836920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.087127] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:54 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(0x0) 01:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) pread64(r1, &(0x7f00000000c0)=""/147, 0x93, 0x7ffffffffffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 01:35:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000900)) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000054000/0x2000)=nil) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000600)=0x8, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000005c0)) r5 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) rt_sigsuspend(0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x4000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000edc000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000001500), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) sync() accept4(r4, 0x0, &(0x7f0000000080), 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 01:35:54 executing program 5: r0 = semget$private(0x0, 0x0, 0x48) semop(r0, &(0x7f00000000c0)=[{0x0, 0x7f, 0x1800}], 0x1) r1 = socket(0x1e, 0x80005, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) listen(r2, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 01:35:54 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1027.325151] Unknown ioctl 4701 01:35:54 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x1}], 0x10) listen(r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r2, 0x7, &(0x7f00000001c0)=0x5) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 01:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1027.420385] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1027.537794] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1027.587102] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:54 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x3ffff) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe83}) msgget$private(0x0, 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fcntl$dupfd(0xffffffffffffffff, 0x1, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x3, &(0x7f0000000380)="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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r3, 0x0) bind$inet(r3, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r3, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x1000000, &(0x7f0000000040)="6546dcb23acf10f6417308960043665d7d1627a424be9c64e596b59351c874fb7f8e69098563224d5ee12114f951d8fb4603a63ddf582a382ce1fc475275ea890225cf18923e50848ee4f0", 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) fcntl$getown(r5, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000280)={0x3, 0x0, 0x17, 0x1, 0x2, 0x100, 0x2, 0x78, 0xffffffffffffffff}) 01:35:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:55 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(0x0) 01:35:55 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@remote, @loopback}, &(0x7f0000000040)=0xc) r1 = socket(0x1e, 0x805, 0x0) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x1ff}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f0000000080)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="60e62ae7a3b8d4e8ad513504c6d448f8ef2869009a4a85852571328a5f5a78493a56a5cccd302c7f545dffa77856422e0a8e1b570e440fa4b37f89219eccc7d1214c759002a4ec1aa47c4c843fcb553a154d9174210afb28ac5404fedf93ba7f4e", 0x61}, {&(0x7f00000001c0)="ec2d9dfd0e9c1ba0875757159bf9c7450b9186fe752f122b5f2fb60ed0e33f72f1ef29e1f4639265523816132ad4cad586871f3c7828464b834d1c7489bfdc6051dc2ffc4d490bbbaba0342d4ec206bb2e03c66b46c7e594e059dee0cc0628844d9475efb637221d16b915ed6bf0b084ab336057c5662689a2d74aa1deb82e1ac5", 0x81}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="2000400000000000840000ffffff7f0000200000000000bd3bd30b7ff100", @ANYRES32=r2, @ANYBLOB="20000000000000008400000008000000fe88000000000000000000000000000118000000000000008400000005000000200000000000000020000000000000008400000008000000000000000000000000000000000000001800000000000000840000000600000006000000000000001800000000000000840000000000000000102000ccaa060018000000000000008400000007000000ac1e00010000000020000000000000008400000008000000fe8000000000000000000000000000aa"], 0xe0, 0x4000000}, 0x1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f00000004c0)=""/93) [ 1028.044322] Unknown ioctl 4701 [ 1028.131759] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:35:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:55 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1480c2000000aaaaaaaaaabb86dd60093a0600083a00feef5985a765f57f9c1a00917a6e80000000000000000000000000dc0bf30d5e262dc442f4b29a3a6800bbff02000000000000000000"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x80000000, 0x4) 01:35:55 executing program 4: recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000a00)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000740)=""/108, 0x6c}, {&(0x7f00000007c0)=""/223, 0xdf}, {&(0x7f00000008c0)=""/186, 0xba}], 0x3, &(0x7f00000009c0)=""/29, 0x1d}, 0x40) getpeername$inet(r0, &(0x7f0000000a40)={0x2, 0x0, @initdev}, &(0x7f0000000a80)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x470240, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x1, 0x297, 0x2, 0x8d0, 0x1, 0xfff, 0x78, 0x5, 0x3, 0x2, 0xffff, 0x1, 0x1d8000, 0xfffffffffffff66f, 0x8, 0x6fb}}) epoll_wait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0xfffffffffffffff8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'irlan0\x00', 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=@newsa={0x1e8, 0x10, 0x10, 0x70bd29, 0x25dfdbfc, {{@in6=@local, @in=@multicast1, 0x4e23, 0x400, 0x4e23, 0x5d545d40, 0xa, 0x20, 0x80, 0x3b, r3, r4}, {@in6=@mcast2, 0x4d2, 0x2b}, @in=@local, {0xfffffffffffffffb, 0x0, 0x3f, 0x7, 0x1c, 0x8, 0xffff, 0xfff}, {0x2, 0x4, 0x1, 0x1}, {0x4, 0x40, 0xf648}, 0x70bd2b, 0x3500, 0x2, 0x5722c5df0978b23c, 0x6}, [@algo_aead={0xf8, 0x12, {{'morus1280-generic\x00'}, 0x558, 0xc0, "2151d6ccee968472b61ec88833808c7926750827608f6e2fe37d0dfbbe83cd012f6d4efce60045cd3551e2f7c20d2a5c12edc2b77cafaebf646e2f3e7bce88ad9f9d5d86d87fdea4efcd93bf65ab14630d28e02c14a182fb953911d783cd51ae7eb57962e7e4796188529dfa1f9d9b3f86888ada53cd997c7b2e64c1534b4ee24b8a07ef74259c98d76c441a097dc896a33c5898f8f4b37825e7688a79efffbcb4b54d8925301dd27ed252"}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000ac0)=0x0) getpgrp(r5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000b80)={0x4, &(0x7f0000000b00)=[{}, {}, {}, {}]}) r6 = socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x6, &(0x7f0000000000), 0x2c) setsockopt$sock_attach_bpf(r6, 0x10d, 0x2, &(0x7f0000000000)=r6, 0x36) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f00000000c0)=""/237, &(0x7f0000000040)=0xed) [ 1028.299091] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:35:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x3, 0xc082, 0xfffffffffffffffb}) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r2, 0x1ffc000000000000}, 0x8) syz_emit_ethernet(0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60ca819d001f8400fe800000000000000000000000005add0000000000000000aa8000907800000000333ad7425b349d8bd5766981765916aec33c67a69c6b06e049ca4b58d76717255d6e8818b5f18a9e"], 0x0) 01:35:55 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003600)=""/253, 0xfd}], 0x1, 0x0, 0x0, 0x10001}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'rose0\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x62000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x101, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, [0x4, 0x6, 0x1, 0x3, 0x7, 0x0, 0x10001, 0x3e, 0x9, 0x0, 0x7fffffff, 0xf, 0x2, 0x4, 0x4]}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r2, 0xd3}, 0x8) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000004c0)={{0x6, 0x4, 0x6, 0x0, '\x00', 0x40}, 0x4, 0x400, 0x5, r4, 0x1, 0x7ff, 'syz0\x00', &(0x7f00000001c0)=['/dev/sequencer2\x00'], 0x10, [], [0x8, 0x3, 0x7fff, 0x2]}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000300)={0x7f, 0xffff, 0x0, 0x0, 0x0, 0x22, &(0x7f0000000100)=""/34, 0x6b, &(0x7f0000000140)=""/107}) [ 1028.653764] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:35:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000a08990039966a7d5c037dc1250200000000000007496e6866856b76b501000000000000000a060000000118fa1efd9b0b"}, 0x38}}, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0xfdaa}, 0x8) 01:35:56 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x82c1, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x6, &(0x7f0000000040)}) capset(&(0x7f00000000c0)={0x8019980330}, &(0x7f0000000140)={0x3}) r1 = semget$private(0x0, 0x100002, 0x0) semctl$GETZCNT(r1, 0x800000000003, 0xf, 0x0) 01:35:56 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x0) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:56 executing program 1 (fault-call:17 fault-nth:0): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x6a, 0x4, 0xa683, 0xf09, 0x0}, &(0x7f00000000c0)=0x10) mount(&(0x7f0000000240)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='btrfs\x00', 0x804, &(0x7f0000000300)='\xa8em0/\x00') setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2, 0x7f}, 0x8) r3 = dup(r0) r4 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) sendfile(r5, r4, &(0x7f0000000240), 0x7fffffff) semtimedop(0x0, &(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e22, 0x7ff, @remote, 0x1}, {0xa, 0x4e23, 0x1ff, @mcast1, 0x8}, 0x3, [0x1000, 0x5, 0x7d, 0x600000000, 0x10000, 0x8, 0x80, 0x11ef]}, 0x5c) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) [ 1029.670986] Unknown ioctl 4701 01:35:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1029.747363] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1029.762660] FAULT_INJECTION: forcing a failure. [ 1029.762660] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.814419] CPU: 0 PID: 11116 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #43 [ 1029.821681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.831055] Call Trace: [ 1029.833663] dump_stack+0x1db/0x2d0 [ 1029.837346] ? dump_stack_print_info.cold+0x20/0x20 [ 1029.842387] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1029.847167] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1029.852665] should_fail.cold+0xa/0x15 [ 1029.856568] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1029.861687] ? retint_kernel+0x2d/0x2d [ 1029.865601] ? __should_failslab+0xe7/0x190 [ 1029.869967] __should_failslab+0x121/0x190 [ 1029.874255] should_failslab+0x9/0x14 [ 1029.878079] kmem_cache_alloc_node+0x265/0x710 [ 1029.882694] ? __local_bh_enable_ip+0x15a/0x270 [ 1029.887378] ? _raw_spin_unlock_bh+0x31/0x40 [ 1029.891822] __alloc_skb+0xf4/0x730 [ 1029.895476] ? skb_scrub_packet+0x440/0x440 [ 1029.899819] ? netlink_insert+0x103/0x240 [ 1029.903983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1029.909543] ? netlink_autobind.isra.0+0x228/0x310 [ 1029.914491] netlink_sendmsg+0xb11/0xf90 [ 1029.918574] ? netlink_unicast+0x770/0x770 [ 1029.922824] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1029.927695] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1029.932474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1029.938023] ? security_socket_sendmsg+0x93/0xc0 [ 1029.942824] ? netlink_unicast+0x770/0x770 [ 1029.947073] sock_sendmsg+0xdd/0x130 [ 1029.950816] ___sys_sendmsg+0x7ec/0x910 [ 1029.954803] ? copy_msghdr_from_user+0x570/0x570 [ 1029.956333] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.959560] ? iterate_fd+0x4b0/0x4b0 [ 1029.959596] ? lock_downgrade+0x910/0x910 [ 1029.964667] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.968406] ? fget_raw+0x20/0x20 [ 1029.968430] ? __mutex_unlock_slowpath+0x195/0x870 [ 1029.968454] ? wait_for_completion+0x810/0x810 [ 1029.968478] ? __fdget+0x1b/0x20 [ 1029.993925] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1029.999476] ? sockfd_lookup_light+0xc2/0x160 [ 1030.004005] __sys_sendmsg+0x112/0x270 [ 1030.007906] ? __ia32_sys_shutdown+0x80/0x80 [ 1030.012369] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1030.017740] ? trace_hardirqs_off_caller+0x300/0x300 [ 1030.022852] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1030.027623] __x64_sys_sendmsg+0x78/0xb0 [ 1030.031697] do_syscall_64+0x1a3/0x800 [ 1030.035596] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1030.040535] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1030.045569] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1030.050434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1030.055731] RIP: 0033:0x458099 [ 1030.058938] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1030.077846] RSP: 002b:00007f7aa1fe7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1030.085558] RAX: ffffffffffffffda RBX: 00007f7aa1fe7c90 RCX: 0000000000458099 [ 1030.092834] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000007 [ 1030.100106] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1030.107379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aa1fe86d4 01:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1030.114654] R13: 00000000004c5687 R14: 00000000004d93f0 R15: 0000000000000008 01:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x9, 0x80007, 0x3ff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000300)=0x8) r3 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x1, 0x4042) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={r2, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}]}, &(0x7f0000000540)=0x10) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000be1000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x111}}, 0x20) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380), 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000480)={r7, 0x8000}, &(0x7f0000000440)=0x8) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)=r6) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6}, &(0x7f00000001c0)=0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000600, 0x1, 0x2000000000002) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) 01:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) clone(0xfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000400)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000040)="a27c7c992ce4570d7491d90900852089bb4c77cc") r1 = getpid() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) ptrace(0x4206, r1) tkill(r1, 0x16) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:35:57 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180), 0x8402) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000100)=0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000000340)=0x100000001, 0x4) close(r2) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, 0xfffffffffffffed2) sendto$inet(r3, &(0x7f0000000100)="b5", 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), 0x14) recvmmsg(r3, &(0x7f0000000200)=[{{&(0x7f0000001d80)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1}}], 0x4000000000000d4, 0x6, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000440)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, 0x0) close(0xffffffffffffffff) 01:35:57 executing program 1 (fault-call:17 fault-nth:1): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:57 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x0) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1030.604937] Unknown ioctl 4701 [ 1030.689505] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1030.693636] FAULT_INJECTION: forcing a failure. [ 1030.693636] name failslab, interval 1, probability 0, space 0, times 0 01:35:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1030.810873] CPU: 1 PID: 11169 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #43 [ 1030.818133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.827482] Call Trace: [ 1030.830088] dump_stack+0x1db/0x2d0 [ 1030.833723] ? dump_stack_print_info.cold+0x20/0x20 [ 1030.838816] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1030.843938] ? kasan_slab_alloc+0xf/0x20 [ 1030.848012] ? kmem_cache_alloc_node+0x144/0x710 [ 1030.854474] ? __alloc_skb+0xf4/0x730 [ 1030.858289] ? sock_sendmsg+0xdd/0x130 [ 1030.862189] should_fail.cold+0xa/0x15 [ 1030.866109] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1030.871235] ? ___might_sleep+0x1e7/0x310 [ 1030.875395] ? arch_local_save_flags+0x50/0x50 [ 1030.880004] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1030.885550] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1030.891104] __should_failslab+0x121/0x190 [ 1030.895352] should_failslab+0x9/0x14 [ 1030.899172] kmem_cache_alloc_node_trace+0x270/0x720 [ 1030.904287] ? __alloc_skb+0xf4/0x730 [ 1030.908108] __kmalloc_node_track_caller+0x3d/0x70 [ 1030.913055] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1030.917739] __alloc_skb+0x12d/0x730 [ 1030.921466] ? __local_bh_enable_ip+0x15a/0x270 [ 1030.926372] ? skb_scrub_packet+0x440/0x440 [ 1030.930717] ? netlink_insert+0x103/0x240 [ 1030.934879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1030.940436] ? netlink_autobind.isra.0+0x228/0x310 [ 1030.945395] netlink_sendmsg+0xb11/0xf90 [ 1030.949484] ? netlink_unicast+0x770/0x770 [ 1030.953730] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1030.953751] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1030.963338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1030.968882] ? security_socket_sendmsg+0x93/0xc0 [ 1030.973685] ? netlink_unicast+0x770/0x770 [ 1030.977944] sock_sendmsg+0xdd/0x130 [ 1030.981684] ___sys_sendmsg+0x7ec/0x910 [ 1030.985686] ? copy_msghdr_from_user+0x570/0x570 [ 1030.990454] ? iterate_fd+0x4b0/0x4b0 [ 1030.994278] ? lock_downgrade+0x910/0x910 [ 1030.998478] ? fget_raw+0x20/0x20 [ 1031.001965] ? __mutex_unlock_slowpath+0x195/0x870 [ 1031.006925] ? wait_for_completion+0x810/0x810 [ 1031.011529] ? __fdget+0x1b/0x20 [ 1031.014945] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1031.020497] ? sockfd_lookup_light+0xc2/0x160 [ 1031.025006] __sys_sendmsg+0x112/0x270 [ 1031.028923] ? __ia32_sys_shutdown+0x80/0x80 [ 1031.033364] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1031.038744] ? trace_hardirqs_off_caller+0x300/0x300 [ 1031.043964] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1031.048738] __x64_sys_sendmsg+0x78/0xb0 [ 1031.052817] do_syscall_64+0x1a3/0x800 [ 1031.056721] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1031.061666] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1031.066713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1031.071575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1031.076774] RIP: 0033:0x458099 [ 1031.079996] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1031.098908] RSP: 002b:00007f7aa1fc6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:35:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x200000) ioctl$UI_DEV_CREATE(r3, 0x5501) 01:35:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x0) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1031.106639] RAX: ffffffffffffffda RBX: 00007f7aa1fc6c90 RCX: 0000000000458099 [ 1031.113933] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000007 [ 1031.121224] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.128572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aa1fc76d4 [ 1031.135876] R13: 00000000004c5687 R14: 00000000004d93f0 R15: 0000000000000008 01:35:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:35:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:35:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = getpid() capset(&(0x7f00000003c0)={0x0, r1}, &(0x7f0000000400)={0xe609, 0xfffffffffffff026, 0x5, 0x4, 0x0, 0x5}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000000300)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$isdn(0x22, 0x3, 0x27) r5 = fcntl$dupfd(r4, 0x406, r3) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000140)) r7 = gettid() write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r3, &(0x7f0000000000)) close(r3) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x18000000, 0x180, 0x40}) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000040), 0x10) close(r9) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000180)=""/158) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x6) ioctl$DRM_IOCTL_MODESET_CTL(r8, 0x40086408, &(0x7f0000000080)={0x6077acfe, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x4000, 0x0) write$FUSE_LSEEK(r2, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x6}, 0x18) [ 1031.307749] Unknown ioctl 4701 01:35:58 executing program 5: socket$unix(0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000140)={0x88, 0x0, 0x9, 0xfff, 0x1, 0xbe8}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c4c379146600006543a02d0000000000000064670f01cab8010000000f01d946d8f1e1b066ba400066edb9f60800000f32f2400f0964460f35", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000180)=""/43) getgid() [ 1031.374870] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:36:00 executing program 3: pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="fffffffffffff44337778cfb888feaae23b4ff0da3ba86dd60500000000000bbfe80000000000000aa000000000008907800000000000000"], &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r0) preadv(0xffffffffffffffff, &(0x7f0000000a00), 0x100000000000015e, 0xffffffffffffffff) 01:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:00 executing program 1 (fault-call:17 fault-nth:2): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0x400000003, 0x0) poll(&(0x7f0000000380)=[{r0, 0x459}], 0x1, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @vbi={0x5, 0x2, 0x800, 0x30314742, [0x2400000000000000, 0xff], [0x2, 0xff], 0x13a}}) 01:36:00 executing program 5: socket$unix(0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000140)={0x88, 0x0, 0x9, 0xfff, 0x1, 0xbe8}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c4c379146600006543a02d0000000000000064670f01cab8010000000f01d946d8f1e1b066ba400066edb9f60800000f32f2400f0964460f35", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000180)=""/43) getgid() [ 1033.511370] Unknown ioctl 4701 01:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:00 executing program 4: syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x70415, 0x0, 0x0, 0x0, 0xffffa888, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200), 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xb06, 0x20, 0x1, 0x400}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x8, 0xffffffff}, 0xc) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa00) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000001c0)=0x210004) [ 1033.595952] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 1033.686808] FAULT_INJECTION: forcing a failure. [ 1033.686808] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.736532] CPU: 1 PID: 11215 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #43 [ 1033.743777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.753151] Call Trace: [ 1033.755765] dump_stack+0x1db/0x2d0 [ 1033.759424] ? dump_stack_print_info.cold+0x20/0x20 [ 1033.764477] should_fail.cold+0xa/0x15 [ 1033.768389] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1033.773510] ? perf_trace_lock_acquire+0x138/0x7d0 [ 1033.778468] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1033.783256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1033.788033] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1033.792629] ? retint_kernel+0x2d/0x2d [ 1033.796540] __should_failslab+0x121/0x190 [ 1033.800791] should_failslab+0x9/0x14 [ 1033.804608] kmem_cache_alloc+0x47/0x710 [ 1033.804640] skb_clone+0x1c5/0x510 [ 1033.804661] ? skb_split+0x1210/0x1210 [ 1033.804703] netlink_deliver_tap+0xbc0/0xf40 [ 1033.816161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1033.816190] ? netlink_remove_tap+0x630/0x630 [ 1033.816208] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 01:36:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x200, 0x1, 0x2) remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x10000000, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x10301, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000001c0)=""/4096) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) [ 1033.816238] ? kasan_check_write+0x14/0x20 [ 1033.816257] netlink_unicast+0x5e2/0x770 [ 1033.816282] ? netlink_attachskb+0x980/0x980 [ 1033.848663] netlink_sendmsg+0xa05/0xf90 [ 1033.852754] ? netlink_unicast+0x770/0x770 [ 1033.857003] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1033.861864] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1033.866629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1033.872177] ? security_socket_sendmsg+0x93/0xc0 [ 1033.876951] ? netlink_unicast+0x770/0x770 [ 1033.881204] sock_sendmsg+0xdd/0x130 [ 1033.884943] ___sys_sendmsg+0x7ec/0x910 [ 1033.888942] ? copy_msghdr_from_user+0x570/0x570 [ 1033.893706] ? iterate_fd+0x4b0/0x4b0 [ 1033.897535] ? lock_downgrade+0x910/0x910 [ 1033.901714] ? fget_raw+0x20/0x20 [ 1033.905186] ? __mutex_unlock_slowpath+0x195/0x870 [ 1033.910133] ? wait_for_completion+0x810/0x810 [ 1033.914729] ? __fdget+0x1b/0x20 [ 1033.918100] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1033.923643] ? sockfd_lookup_light+0xc2/0x160 [ 1033.928210] __sys_sendmsg+0x112/0x270 [ 1033.932111] ? __ia32_sys_shutdown+0x80/0x80 [ 1033.936551] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1033.941930] ? trace_hardirqs_off_caller+0x300/0x300 [ 1033.947044] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1033.951814] __x64_sys_sendmsg+0x78/0xb0 [ 1033.955885] do_syscall_64+0x1a3/0x800 [ 1033.959789] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1033.964731] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1033.969767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1033.974633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1033.979829] RIP: 0033:0x458099 [ 1033.983036] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1034.001952] RSP: 002b:00007f7aa1fe7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.009669] RAX: ffffffffffffffda RBX: 00007f7aa1fe7c90 RCX: 0000000000458099 [ 1034.016951] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000007 [ 1034.024231] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 01:36:01 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1a101) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x15, 0x3, 0x4}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x400000002, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) poll(&(0x7f0000000000)=[{r1}], 0xf, 0x0) [ 1034.031507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aa1fe86d4 [ 1034.038779] R13: 00000000004c5687 R14: 00000000004d93f0 R15: 0000000000000008 01:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:01 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'veQ\x01\x00\x00\x00\x00\x00\x00\x02\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x20001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmget$private(0x0, 0x3000, 0xa, &(0x7f0000ffc000/0x3000)=nil) shmget(0x3, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r3 = shmget$private(0x0, 0x4000, 0xa00, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000440)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ipx, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000002000)={@local, 0x7e, r5}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0x6, 0x8) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080)=0x10001, 0x4) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="e3327caf9fe0b45637616f748c42f318541ae1faa79d6b") r6 = dup2(r4, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000003c0)) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000000c0)='team_slave_0\x00') r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000200)='bcsh0\x00') pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0) fcntl$dupfd(r4, 0x0, r8) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000340)=ANY=[@ANYBLOB="a5373204a2dfc8e880f70a985048d931ce1c9d2ae16ac9d8ec495b758bb3c3b9579f2e879a0d11"]) [ 1034.206487] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1034.256804] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:01 executing program 1 (fault-call:17 fault-nth:3): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:01 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x200, 0x1, 0x2) remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x10000000, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x10301, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000001c0)=""/4096) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 01:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32020000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x200, 0x1, 0x2) remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x10000000, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x10301, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000001c0)=""/4096) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) [ 1034.795527] Unknown ioctl 4701 01:36:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1034.843400] FAULT_INJECTION: forcing a failure. [ 1034.843400] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.876652] CPU: 0 PID: 11271 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #43 [ 1034.883875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.893255] Call Trace: [ 1034.895839] dump_stack+0x1db/0x2d0 [ 1034.899459] ? dump_stack_print_info.cold+0x20/0x20 [ 1034.904475] should_fail.cold+0xa/0x15 [ 1034.908374] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1034.913496] ? ___might_sleep+0x1e7/0x310 [ 1034.917652] ? arch_local_save_flags+0x50/0x50 [ 1034.922253] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1034.927229] __should_failslab+0x121/0x190 [ 1034.931483] should_failslab+0x9/0x14 [ 1034.935303] kmem_cache_alloc_trace+0x2d1/0x760 [ 1034.940057] ? rtnl_dump_all+0x5b0/0x5b0 [ 1034.944141] rtnl_newlink+0x4b/0xa0 [ 1034.947777] ? __rtnl_newlink+0x1a70/0x1a70 [ 1034.947795] rtnetlink_rcv_msg+0x481/0xc30 [ 1034.947816] ? rtnetlink_put_metrics+0x640/0x640 [ 1034.947846] ? retint_kernel+0x2d/0x2d [ 1034.947885] ? rtnetlink_put_metrics+0x640/0x640 [ 1034.947907] netlink_rcv_skb+0x17d/0x410 [ 1034.973890] ? rtnetlink_put_metrics+0x640/0x640 [ 1034.978667] ? netlink_ack+0xba0/0xba0 [ 1034.982590] rtnetlink_rcv+0x1d/0x30 [ 1034.986317] netlink_unicast+0x574/0x770 01:36:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cbc-aes-ce)\x00'}, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ab553fec94248c34e2688c7d04000000", 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x30e) r2 = geteuid() ioprio_set$uid(0x3, r2, 0x1f) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x1, 0x164000, 0x4, 0x4, 0x80000000, 0x30}}, 0x50) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 01:36:02 executing program 4: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup2(r1, r0) ppoll(&(0x7f0000000040)=[{r1, 0x2102, 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 01:36:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1034.990398] ? netlink_attachskb+0x980/0x980 [ 1034.994819] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1034.994836] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1034.994858] netlink_sendmsg+0xa05/0xf90 [ 1034.994884] ? netlink_unicast+0x770/0x770 [ 1034.994904] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1035.018577] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1035.023345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1035.028895] ? security_socket_sendmsg+0x93/0xc0 [ 1035.033677] ? netlink_unicast+0x770/0x770 [ 1035.037937] sock_sendmsg+0xdd/0x130 [ 1035.041670] ___sys_sendmsg+0x7ec/0x910 [ 1035.045663] ? copy_msghdr_from_user+0x570/0x570 [ 1035.050429] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1035.055040] ? retint_kernel+0x2d/0x2d [ 1035.058952] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1035.063928] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1035.069403] ? lock_downgrade+0x910/0x910 [ 1035.073573] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1035.078357] ? retint_kernel+0x2d/0x2d [ 1035.082267] ? sockfd_lookup_light+0x104/0x160 [ 1035.086864] ? __sanitizer_cov_trace_pc+0x8/0x50 [ 1035.091639] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1035.097201] ? sockfd_lookup_light+0xc2/0x160 [ 1035.101711] __sys_sendmsg+0x112/0x270 [ 1035.105619] ? __ia32_sys_shutdown+0x80/0x80 [ 1035.110060] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1035.115439] ? trace_hardirqs_off_caller+0x300/0x300 [ 1035.120554] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1035.125337] __x64_sys_sendmsg+0x78/0xb0 [ 1035.129430] do_syscall_64+0x1a3/0x800 [ 1035.133338] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1035.138288] ? prepare_exit_to_usermode+0x232/0x3b0 01:36:02 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x250, 0x2]}) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x28400) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/81, &(0x7f0000000240)=0x51) r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x10000, 0x40) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x25, 0x0, 0x3, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f00000000c0)={0x1, r6}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f00000002c0)={{0x9, 0x4, 0x3f, 0x27, 0x100, 0xffff}, 0x7, 0x3f, 0x9}) [ 1035.143328] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1035.148203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1035.153401] RIP: 0033:0x458099 [ 1035.156605] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1035.175528] RSP: 002b:00007f7aa1fe7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1035.175544] RAX: ffffffffffffffda RBX: 00007f7aa1fe7c90 RCX: 0000000000458099 01:36:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:02 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil) shmget$private(0x0, 0x4000, 0xa, &(0x7f0000ffb000/0x4000)=nil) shmget(0x3, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r2 = shmget$private(0x0, 0x4000, 0xa00, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000440)=""/19) r3 = socket$inet(0x2, 0x3, 0x2) r4 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000480)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002000)={@local, 0x7e, r6}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x6, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r7 = dup2(r3, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f00000003c0)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r3, 0x0, r9) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000004c0)=ANY=[]) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380) [ 1035.175553] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000007 [ 1035.175562] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1035.175572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aa1fe86d4 [ 1035.175581] R13: 00000000004c5687 R14: 00000000004d93f0 R15: 0000000000000008 [ 1035.347082] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:36:02 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x342, r1, 0x1, 0x4, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1}}}}, 0x30}}, 0x0) 01:36:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:02 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1035.708223] Unknown ioctl 4701 01:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x88, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'gre0\x00'}) finit_module(r0, &(0x7f0000000040)='GPLproc%GPL\x00', 0x2) [ 1035.779930] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:36:03 executing program 3: accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x800) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001740)={0x0, @in6={{0xa, 0x0, 0x5, @ipv4={[], [], @loopback}, 0x2}}, 0x100}, 0x88) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') [ 1035.934196] device lo left promiscuous mode 01:36:03 executing program 4: r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) 01:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1036.079620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1036.107248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:36:03 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)=ANY=[], 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getattr(r1, &(0x7f0000000100), 0x30, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(r2, 0x4b60, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='btrfs\x00', 0xc202, &(0x7f0000000000)) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1d) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000280)=""/206, 0xce) 01:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1036.197405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1036.301894] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:36:03 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:03 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x2502001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) write$P9_RCREATE(r0, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x61, 0x4, 0x2}, 0x8}}, 0x18) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1}}, 0x1e) syslog(0x0, &(0x7f0000000080)=""/99, 0x63) 01:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:04 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1037.014265] Unknown ioctl 4701 [ 1037.338913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:36:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x100f253eab087596, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) ioctl$SIOCSIFHWADDR(r1, 0x8994, &(0x7f00000000c0)={'bond0\x00', @random="00e07000"}) 01:36:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="07300fe83ae221", 0x7}], 0x1}, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)=ANY=[@ANYBLOB="aaaaaaaaaaaacf2bb43c40b80800450002220000ffff00069078ac14ffaae000003db600007b", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="f000000090780000"], 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f00000000c0)='attr/current\x00') 01:36:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x3}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:04 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x1, 0x10c00) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setpipe(r0, 0x407, 0x80008) [ 1037.376845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1037.400172] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:36:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:04 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="021695e86acae88243bb252572a43aef56e7b8b4e002691203eda0e96f40091473b88bd05c3c77e519c4d50f71ddcdaeadac019f74069ef5a2e4b1e2be8e95f0a38727ea7bbd7335995e1972e4c85bae3aab7feaa4f6c54a551445a71297fda8eb07a1c447b346d9adf00ee3556a42f51b239eb69b2e2bf5365152510bb958f3ca7619b69686d5957534476daf70748c1c5c920e46cafb6f61ff643c556c313b40a51edf63729356e33adc5c7234a3ea", 0xb0}, {&(0x7f0000000080)="444d183ef0996b504289340db9f884a7b716dfa6bade1ca8b9963b3a439a003ddf24e7138f", 0x25}, {&(0x7f00000002c0)="5034135e6acc0d6f2be1a8463243b24face6169662ad75df95f51556b05063179f2061ae23ee0155dfc0fc767dba13c14e063011a20e6c0d3b7bb5088b80eb586d1ca840944a7e25cf984f5bde3a1f398f34f5418bc0717e99ae1419ecdae59a660a33668e2e959665031dc766115140d3125ac59e3b707003f16b204ac155f39e0f3ce52ae177b75abf48ba955d56c700a09319cc0c2ef502d5e892149f55f82358e50a35130ed84b9b1cabf6a2e4c57cd9e7d4909900455333c5bd06f0d2a972c35bec294b87e8ab4bb0afebe19015426f788b4b", 0xd5}, {&(0x7f00000003c0)="327b0328dfd402ae32c75c3038eff9fa2fbf2078ea3a06ce1bf083534f3f9226940436f1cdde33f753f8611010089c280f8b988c82ccd22256796caf9d7ace272805af9bbf4910ec345a3485bb34684d218e189b7d4f0041361c30e9ad9d2216238ee5b2ab04030b2cfb59a7a9d4a7cc75e4ecbf138a025b40de0ff0f1a9c47a243bb7f9283ae14fc095b0f147337879655f8b405f151bae581ae417fa10e7bfc9561c42e3c95782b6d6af0ac7b4d058dbcdd9ee6305e77a65424a2c3c11992b985d285abe82fd3f3640a9a78d8497ff513e4cceacd874656a012694b8e114ae4d5239114ddb54c7840b6ed77817c1ebc111a6fb566409448d", 0xf9}, {&(0x7f00000000c0)="27d4ca718ca210fb0500", 0xa}], 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000500)=@req={0x28, &(0x7f00000004c0)={'bcsh0\x00', @ifru_flags=0x1201}}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x4}}}]}, 0x30}}, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000540)=0xfffffffffffffff9, &(0x7f0000000580)=0x2) 01:36:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="08df6e1a1b6bab6e7d1d38d16716e04bcd9b8cee23a00279c42cefeed5a7e74e3d193c0f225ed5d85075391b4dc1bf1d524823bfc46f0d23a6604d61a89d13f432e4497579231368be381d9b00083cc04c7638e1bba6b99e3b963b3706d13b67deec71766727da625709c90da65b0735a0a209f7eb277ba7ad9f207566e8d3d4b1275e410022b4eeafea79a4838a62ed6300565570691b606bfe3147e89135e673ad359f7de5afecb222c0c2645bb3fa73eece758dc5590709a427ed5a1f06ea9736e2f00479028763010800458324dd2841f3419765edaba461abc3158350"], 0x1}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x9a1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:05 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:05 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:05 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x11c, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000000c0)=0x9) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000003c0)={r4, &(0x7f0000000380)=""/50}) close(r2) write$P9_RCREATE(r0, &(0x7f00000001c0)={0x18, 0x73, 0x2, {{0x49fdfcf56b553f1b, 0x3, 0x8}, 0x20}}, 0x18) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 01:36:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1038.142609] Unknown ioctl 4701 01:36:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1038.206732] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 01:36:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mq_open(&(0x7f0000000100)='lo+E\x00', 0x42, 0x8c, &(0x7f00000001c0)={0x77fe, 0xcf99, 0x0, 0x7f, 0x3, 0x3ff, 0x45, 0x2}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x201) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e21, 0x18, @mcast2, 0x7fff}}, 0x3, 0x715a1a5a, 0x7fff, 0x101, 0x3}, &(0x7f00000007c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x95, "2fc34eebf4228b3932e865633ac7a3feb6a9e24a45a05501608f8c7f75f64f2c28afe160a23835fc752df9edaedc1d5d2da8e4501724f724cb01903b069ac499d1fe12815172f3cc4c397b93382daeaf4fe89ef7e8442f3beea03f941eda1fd68480375ef49e6be0d6127f8536bde82e70cb2b86abe34522aa280df6e01ceeb6897e1edf31c657bed25b4579b2c58a65ee55e243cc"}, &(0x7f0000000b40)=0x9d) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000b80)={0x0, 0xde, "53d364856362aa54e3193285a138fc4af0374102ed93e201a4d9d43a4b26c4440e3839de4f3a5cd88c4eee8d5b7f94b866c3e7c9507b1e1a27e97b4221fb074ca32c147e00537dd101ec355d96ed9275c137e60bd10ac8a0755c0a2336874008099940365dfe28cba24c958d1b1db186ce8f77410c33be7f7c1b5693aab4dc65a97410a3467aa07e495c9d831425853527cb48a3b0a554364f372c763eec8615175bf060b1ed873c9e55429042f17c21c6e8168c08f51552d8b5a24389f5af46187876948c31aaabd6ca753ec0af777e2065a5dcb9eacb766d4502a195ad"}, &(0x7f0000000c80)=0xe6) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000cc0)={0x0, 0x8001, 0x3, 0x2fd, 0xff, 0x464, 0xffffffff, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr="9ac0f52b9d769fdb7d4ded1950700f28", 0x6}}, 0x101, 0x8000, 0x1, 0x1, 0x8}}, &(0x7f0000000d80)=0xb0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000019c0)={0x3, [0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000dc0)=@assoc_id=0x0, &(0x7f0000000e00)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001180)={0x0, 0x8c, &(0x7f00000010c0)=[@in={0x2, 0x4e24, @rand_addr=0x8}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x4, @empty, 0x1ff}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000011c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001200)={0x0, 0x8, 0x80, 0x6}, &(0x7f0000001240)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002e00)={0x0, 0x1, 0xff, 0x1, 0x3, 0x8, 0x81, 0x7fff, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x401, 0x9, 0xffffffff, 0x95}}, &(0x7f0000002ec0)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000002f00)={0x0, 0xb6, 0x712a}, &(0x7f0000002f40)=0x8) inotify_add_watch(r2, &(0x7f0000001040)='./file1\x00', 0x0) write$UHID_INPUT(r1, &(0x7f0000003740)={0x8, "8ecdf3b4602bd7383e5f116651d7ca52d4b4be6aa5d680ebcfcc8681cbae5521ff451e2baa52e634557d4d46f3786e49a9648586b49cadaf83764bb2c889530ddee37b6acfe8b0dbf18245a31cd418101c8119aad49384b148f14190ac1ebc0e03fe6c1070b83e46b3eb3c4af522f24c9976f229990e565b6dfa3c8392a28a3b5db71aa272d841cce4a339ee3d0701856a7577f903de761e4515aa5c4258622c14b157a81aa2c4c1b2fe58ea846a7b6425358e4d538f16636c47e0d8d6c26a6686388b2af78c4ae8ac3f22d659040cb2f5700f45e315398fbdbca205229bb9e4f1b43d77b0c38afa4d265fb998596613c52cbe0130616eddc12dfbd5481945aee7df3d09818117b2ac61a8b831d399822ae48ab7ca9ed4be7fb738a67d5cd1ac917e838e52e839149d3aac1ddc1c7aaec439210dc75bdcd277d6d6850daa244a2bc1352be2e5ac252845579505cfc76c8c752cb78b8f8512011f4a487db26c954c3ba1bbbc9d0a81438d761fd401ac1cc3c35d3c677d02ec01dc4cdcf86dc03b156279930a3ec38d30265e1211448b864f71198b9500be0c8cb88e4e858a4e4b692be03c089e934aee09fba0d338733c39873707e238c3dcd4ce9b78156d3fa89d5c8e4ad8fdd3a64fd57a243f10b92b5124f628b819968e187438664fd7cadc8add3137797e55f3f2b48a7be65d82f98cdc1ea30b7fedf38744ea4ef51a71d94a344d6ca2546ba1a5f1d53a0393865e4fdc97181fb254fcf16455e974e0bfacf2e9c1e7adc6dd9b68ab795d6750a20eeb7266c5c6d3cbd0c1d4b64f3181d37c322a2a173d0dfac1da0b8a704c948f09ff68ab158f124a505b11657fbcebab55397f298de263c8c47213859b1f480541490ba546913d88da4eca0e42ce2a23ab61e1ef078e4db1586a4e22405567b76a9f9be82e2fb8ee47047cd8269c64526a6acbdbe87346dcaf8ed15bab229e9b6bcd82d6b4d08d4fdb3b2f9aa7be9047773aa597a7c0207f77c81019919b08b9d91e8f8628582f5941a18c580cc6ca4c17e26cc76901fae57a325262756e505d355101d63416ef9c9a099c11cdd3498996abe4853946d0409ff2e02f6fb8717f960ed982a0fbb8b8d7e986c9acfc6efa0c96db078ea46a9a003c133bafee8192b41c022fa5fce6569a570bb09cf9203493c228ea178850ce18f7208e4fa9989498a9f12b5b79acebbbefd5e0d28a914377e93d722d97a6c5f6b203c99653566dd53ac437f42bb622487babba02f8f1f596c0cc9af72fca522515fae7ea5e48d8e7e483efb7636a20292e40d430ea7ab2e22bd5c6cb13dbdd168d5c12def663d1dee096826778f959decfd81ad95e8f33e7a76e3d9252da0e9269b14f6ea96aac0b3b98e2fe24c20d805314ed11fe5c44cf3b982391661cbd8a67ff9e695152519c88fbf75d69bf067232c0a0e8ffbd9cc660313dded2aa398ba4043ce5064785c21de2eb67720aac156e8d5845dcf8191cf39d235a9dce5f07ad63aa09bdb5994b318c04c0a83bf9b375747a8a86b85d1c914d3aa82352da484fe28696f97b1ac070e1cbf6977644565ce16e84691a71dfcdf65ecdafe44d90adc50fe46610ef9254805592dfeca2b65b08ed3e77130260befcabe4ba09528bf3f40921539affe009269261cbfa9a13facc4a196b31c50b110f9a2dc45d2cfa35b9b120c57a83b24bd7eb55dd5e2b3827f2dbcfc9a1b90a5e0a2465ca41bdccf254743a2263d07df34cb5cfd0dbb55c5d77f31d98cc160ded2b9f704cd61a78cf76544279b6c6e36a23c652495463c20640263acea3bcbb6763e36ba3456f95438e6cc3869b29694936e60d6c218574ba3eacfb754dbfc068b48aab88f1817425871ef34d95d138ac7ac57b8af7100194057070d30acc7cb8f8f605ba8eb52b05d7eae8dbe4edaf1e68815098bfece3e461af5ae08211c5a5f51a11c6d81536368c5027f5e8b17fb94f96598667bc371676710c52601d866e5c0ffafc79eddec996b7dbbf0ac71f62eda1a8ca10a4a996a4900241882ec209f33e1bb29a129133891bf3b100ca6efc3c6a13d9b0191ccf168b3bb208f16defbe0583fca255de3cf1892f253776f4cf95fe501ced893877ac576c2b18fa904a8e44e4992200cb574462526670b3fb90dce203db6c0049b8a3a63fbc2b98f2b931eeda2d276af01e181f1c9e9f829c52eaca5c64fd233e6e5e68ca52b982d0d887c939e87ab3ee260aac55662158fa584ab3ae6e9572d58912991d4f91640cd1cf0b2b9747817700326fc1c224a65577af555fc5c100e8eca5bfeaa677aa4ee15c4754fad24a90e82146b6a266452ea8905d8c1b72ed83c48ed12d1f0f05a51ddcaa3428e66f699bc1802ec2ecac4e12721cb835f52c625343203e941d27596d9d96c4faa558f38c1d3b897d5c499fa4d4e9d591f6f06f73a20d840e23e097645b0a19f82740c6e1dffaf24ca19a46ee4550e46f9e58b0e72a2f0142289835f07a7ab9596e787c2c80cdab072bf803b7dcef10de3435fb98a15dcd842b7bc50a2a09a760086636026ac46bb940dde4caa487cc39596091e3fae8e9be57aae1a6764f959d21c91593e2988a2e2337761d8d5699149ed71166192745227c2e4525f8bb0085880e414cde5512d31675cf309721547ffb0a87b8276d3d657fe00eb85b1bf9a53557447658694585cfe1f484c869b375804705ce941cbb036126ade3323ce57e9de7120be3821ec2f147b11fe258342b38e7036e0b3153388f6864470977d646eb2032393e2cfb2382cd45c2efee2f84e6893d553c781b0c8f22ee94bee6afada62c27fbc4ca036dc0a299e7fbb49081b45e573d52eb4c52692709a2fd3f4c5e5c7d22469f06ef0b0a48fa23912345cafd180f20bd830f3335ee01f7f5f7a1abf0c66985b3950fce4e997801753ee3577a24364c8ea57673aaadcca2cf27836f8e379c836c290e20354b7976a4c66b82265a40c2eb4ec3a228b381056171f0bc15692e55c86b8db5d678bf2208fb976c86d1c7e5f21d113d6c082e011f724e7beaec28a0d7440bdde81b32f883b77ff6c974c5a2df23bcff089fb97b4e01522d296f6d107bea82dd5c5c7ff897e1aa7bf0737025a400d1b027fe18812a0def7cacb0e736deccf478dfe4df139d683c9847d30dd8f928d373ced0aea10943e901cf77715e9bf21a8151bdca7ef24b02229a2af1b6ccf1ea127265bf759130dd76f01df918bd80ad38feb73a7bbeb675428abfd16666dd9b0d3264b598b9551dea23f1a42d5b47016b7cd492d6e1ca88989b5f390c9238a332aee6fed30b8f360a974105154680f2170ef19b12f2b39622c83e1ec7b26d6c36b86a3bf4f15e20dafba287c18f9655ef9b2c6a5df4724f25f21101cfb396efb8319b83ea2caf5c9fd3bcd431a95ed6511b50d2d389ecaba8db7ccf2288c0026387c9c2a8471854a1bfdf07a73b6951df377fbc46d2e816f0053ad68737c00cff0ba28278b39766328931bf4e7ab7d4e726f72eb0a27f8deb8634680fa31c327358ed9c3b2f960e72ef8b4a66413faea254c255770bbcb86a48d546067b57f57ca8fea0fcbad7caa00aad35d438ebb4db592485a2cdc65c165df38c044a11b93ca162fe43f295fd6063bcf80f9361011dda7826a586e8da04736046e0a57653908d6b6951bd90782fc4c25bfed695a664d548cdfa889c10ea69ef7e570093d25b3f179399513f11f3a0eb84bdcea279777fb38dcd1736281df20bc344449ec98bdd9d246054961d40eb5b96b564c3643e52aa9cf8280f06d6c40a0862d71fd281ffe8f3a1fa0c5b39e078ff3c4c96e137af0040676fb39b7afc00a1f3f6ff0c7a92b8841eb8c2a42b5a34909ff2c576e277cbc58a744b03ed045017b26c8cf541f054f94e23f1fa78d7afd54053aff91a8f8ae51ff2ae8dd8e6b42e2989fd3fb6420e3ea3795eeae1d9b6e5c2f0fd3452d828f637de6553ba137ad2dad50a9cdbd972a5b0b0bd4309c7452a6ad13f89982080769bac2f2d44347094f23866d5cfee891a2fe86feaa97be5bfe2d2c0f8a44d58e95b9dc0b31359b67828f0c0a718c995bd5f2a6612010762083cd8aecbd1127a93514fc7819cb27251eb9b69afabdb354b472234204b0f96381f8b4509465f7074052bdd2eb99f256728ee08f51324507ea8875e199e17c91f4ee2c937e1729afae555912f2478fe40b2a9b8cd99a2eaf431c58f8d971d83c230894beea8a7fd16789107e7963d5c044335e27da87dfab5f13ad0ebd7a9d882c01042de1092c227823ace99d6f4a6d15d00551381e351332d3847504db7ee5c6a93dadc7635ff55108c8f4fef1cb03d1c82fdfc40f45ba0aacf4597dcecd3c94d91a9f1c2d30823482f3ea8ca3d3054cd8703b3e185bcbba532baa21dd07ed6d631e6082991430025eba0d9337ec2eb3a39c83ca0a3ee54a4336760bdc08e8ab113a49c013c4f378b26877c70f59367524d92ea6c3411bd86e74d27e459ab82e44d9c87892402dad230fd3894ab5676de96dfd697b1c9c23296a30cf37cfb233ebe946cca5bf14b07449849838e962120e1b52477f805344c246785d00ffcbc0e5423304d4d2fb70b67edad7fa2e1c807cf53d6cc46cb5e6b0faf47d3f2d31269079a20d0521af2dd0040a7afe1b23b59e0e3c3ddf88564228f9608794ef4e21df4e18dc28123b8a2e0d3c24c4e59e152699f556f2eb91e0dd330bba923ac4f30e1f9e0740bb9e514f6d2329c2d038535d986ebe216cc5646392ab67f791270a77d811e426c6adcae54bf9388d2ffa75fd3709d4a37cfe77984d682b3e96484dc376e1a15c89a2633098622743893695fbbaf807574e2ffe749699043b61ffe3992d72a0aedabad6ab515915b55ee9eba4a226b75123e31c2421aa6b4796b38499e8e8423ef9b245ff249b666a9f52313ff66ac36601951766d579950e696d3facead8737f18b578413a603384260e8587703cf0c829977da408838bc16db00544cd999363dbad089483e69e7f85afc0071fcae4521d1c27a3c1adfbe7901001e2217c43678f36ab9b4beba80788ea68cd6c27b2fad76557e326e6bdfd0108a6a9e5848fc6d4532af15bbc7f80628f084135fa15e6ec0ab1fe5e1a9dc75afc49678b8967da43e4e9114d300ab264b7071fd910201949f9814f5a50d4b762f693a3ab0e7d3498ddf7309d3c59e64278107da34ae0f706945f578a1620e4702e0fa09ad72537e972a2e25f234ce730bec863d45b8b0c7a950df25583262da2bc4cfa1534cfdb812641d631c4e257664a57211db2f2712443f58c7520777f534a636b89b67e98697a577fdeac78ee44ee9218db91abb48af113fd13b8a5de4c44535f5fe8cf30e5c6ca7d7781ce4138cb9963323704affffec672d5532e5e21c99ba94dec70a376cd80612859e6d559b22e2d3478fbd3cac3f8f20398ec97d359dfaaf060fc95f6581bc6bdfee0ec1981759bd75248ec8cbb0425f5c8ebacc1891f71f342ff478619eac608c918b8eb008a4793c958f020961de271d4d4f9f086965538a5384254d4279e8b7f15ba45781d2da8f1f168d689ab3a4c47de94bb3586200baa8bac9567e3bc8aa3e8f11cc38ba80f48f8820d4dd6458dc72aee0e4b26a075b88251ba458a59fb8e00561828b98403f9e84cca08ce8f3e5d03889fb40dde02cf1f8c2397749dee9c6400a5e9362e63811dbcb857fefe18d2d7eade3877bf8b7c40866f619c7546296df4b827f8f5861749e31401eaec27e2d954f4bd65825b74660e5245fdeb1e3bbdbda063098204115272488e2", 0x1000}, 0x1006) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000003400)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000003280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5a, 0x2d, 0x4, 0x4, 0x20}, &(0x7f0000003340)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000003440)={0x0, 0x7, 0x3, 0x1, 0x3f, 0xbd6}, &(0x7f0000003480)=0x14) sendmmsg$inet_sctp(r2, &(0x7f0000003580)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x2b}}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000300)="e6ea6f89921375e75099742f2bf144122c76de71b3798cf633", 0x19}, {&(0x7f0000000340)="c352c593d0d2ac70038588fe38fdcb40c1a9c07b24fc68fca68b5bf69109a78b662aaeb270fee02b95d92881e8b55acf944188b533699226e02f447cdb36bb80ab7b91df897fff51edfad87c6e5443278f69e3bd967244e75b45cd59bc32e7a44880b5b0018e868d661e3c5e1280b37aab006141b13f41934f4334d7e10333c5761664", 0x83}, {&(0x7f0000000400)="d76ce5909b86734a44bca77856192dc464d981adf3ab71dada4b9e76427ee5a0442dca9c407254424c805cfeab5cf6fb27972ed5642c43c24c7c3f8f31c426249b1ab036eb673ba2118366906f4ea917", 0xffffffffffffff59}, {&(0x7f0000000480)="4669eabb0bb3a4ab663f5ded5373ab87bd35d862afd4", 0x16}, {&(0x7f00000004c0)="9d58fa9579b63a1d8a8083e7cf22011c9d80549a80cd1f082161edf434cfa3df911c070d15b956a6c7c1e2d5cd0a7ace7171e94a93b43e73cbe2c0ccec594b089167e6bd25ae5785b03f5457b91ef81797ac1430380758e2830448e6002d1fee10e7bd04102d41348d3b0bcc43e5b49448135124efb4caf4c6e8e9ccf30354f9b8947a", 0x83}, {&(0x7f0000000580)="a2a65b579f091f44c330affb63ba44c6bece94d7f3c15f439283634a7584ed7f", 0x20}, {&(0x7f00000005c0)="5760b89e74a046689d88cb3f48aece15a5d850114d17bbc0750aed0b3aaef0bb947774e9a3637360d9dfff681d6beb7e3c1e67bdcc0cbaa5e2798f17b5626287cb69c3e7f536", 0x46}, {&(0x7f0000000640)="0a0ac0a46c0b8416e25c88f4d1403077e0a0bac0de3bc25c877d640ba3c471e9a6005061", 0x24}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000084000000000000000200d90b20005f0618000000000000008400000005000000100000000000000018000000000000008400000000000000030002000900060020000000000000008400000008000000fe800000000000000000000000000027180000000000000084000000050000002000000000000100200000000000000084000000020000000600088000080000a30e0000", @ANYRES32=r3, @ANYBLOB="1800e9ffffffffff8300000005000000000000008400000000000000ff0f93000800010018000000000000008400000005000000000000001c43af1b18000000000000008400000007000000e000000100000000000000000000000000000000"], 0x100}, {&(0x7f0000000900)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000940)="bda8276b13bf161724ce855d1fae179ed3fdc10a4f2168e5cd977f37008fbf8c22837bb247cc617d7960ec6328b8c7513db187e915bc993e113dd7c62ebdf8786cbe4c4efe16ae7268d1a69d46b0b7986989347bc5351d0dcc0c81d54d4df0e8a8eb8800adbd7e5ea3c1c1f4a246c6abf3920da3110088efcf23cbba7a8b159b06e187d300e6fab7a36e5f090b09ab24deeaa262be6a92e7b8095e18aa0a7c9bc618d0cc1cf8fa139dfd39067a0794550edb60f8d00b20f0daa2180f07216780ef8994c225975523ff817d905364119eccc349538661e69e01b11e18b441edd7356eb3c653c118cb5de85187f578b5209f", 0xf1}], 0x1, &(0x7f0000000e40)=[@init={0x18, 0x84, 0x0, {0x800, 0x101, 0x5324, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x1, 0xe98d, 0xdce, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8202, 0x3f, 0xfffffffffffffffb, r5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x80000001}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x6, 0x0, 0x0, 0x2, 0x750, 0x7, 0x40, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x200, 0x97, 0x63ae50ae, r7}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0xe0, 0x4}, {&(0x7f0000000f40)=@in6={0xa, 0x4e20, 0x1ff, @empty, 0x240000000}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000f80)="8aff72d899a905234609a672b050e496d0a1b8b388a34ec0535c37caed20cffedafec14c92b00b9f170ee77379c51d162f3201d802b5c0288eadf01495014d8a05688a21bf78679b081cd7b4c4884e99334f1e6bdc4fe78f3178b9e43f3bcf8d48d044c9ebcdd105cfae0fe1763123b887ed64f7986ee8b22e90a50e10f522e8a062a5a14597c8ebf64d4842b9cf7bb0e7a6431a6f2da3f7d0774bda27a311322889a9ed78c095414b5ae6ba711a", 0xae}, {&(0x7f0000001040)}], 0x2, &(0x7f0000001280)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x20, 0x0, 0x1000, 0x6, 0x16, 0x8, 0x7fffffff, r8}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xffffffff7fffffff}}, @sndinfo={0x20, 0x84, 0x2, {0x9782, 0x200, 0x7fff, 0x4, r9}}, @init={0x18, 0x84, 0x0, {0x100, 0x9, 0x7fffffff, 0x3fff80}}, @init={0x18, 0x84, 0x0, {0xfffffffffffffffe, 0x40, 0x1200000000000000, 0x8}}, @init={0x18, 0x84, 0x0, {0x3, 0x2da8d076, 0x1d, 0x4}}], 0xb0, 0x40}, {&(0x7f0000001340)=@in6={0xa, 0x4e21, 0x0, @rand_addr="6dae2b25ccc20396d54c76ec52e24895", 0x10685b60}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001380)="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", 0xfb}], 0x1, &(0x7f00000014c0)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x21}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x38, 0x4000}, {&(0x7f0000001500)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001540)="ed1804fa98eecfcf79aab45d47a3d242f99e821d0754149f98165ddff46aefe96cd911de1ed049ff35189ae649d15311a2332901a993e432d83c39ba65", 0x3d}, {&(0x7f0000001580)="1434cbe60d1b40091ccd716ca028b5b52a3bb9a854a41c60a9a6fa12c0f1817b816997118b688f4919c7f627e10e060faca5b9e10b39c0d86ee3101069ec534c2231f7331b7b2ab0a760e4bcaee800f780a6301eb8a31ea907", 0x59}, {&(0x7f0000001600)="5c51dc862e236337b4c3469a3356a8c7da3c45bc8afaaecda3d13a0393a0840b7f5571a1a4264f2056b5b57973d2ac91935452540405e7e224d3cae76187900e0d7320356399352f2ba7a487812e5066bf8ab4f21b5b886e292a5a73f4fdb4cb145cd5fe8ccc140805cb3dc8d05a1213013d33b2c98e00b904dae871c19ba4d7ce4d10806e1f6b44209e2a61168469402889fae18c694ec2f258b88d4589146b120e0880", 0xa4}, {&(0x7f00000016c0)="43f5db40d56deab4f7019713b99d302736b2c6f13c88215f179fe181c0de02b6309c93eb8f56d92c7391bb64af5fe14069bb60078ea88b93aa34ea096654c4f57648a68d9c97cbeb77026cb9718fc941d701a662da70762912c43881224cb2cf4adb6eaefd963aff226015bff8c9b8e96d4f312ce393ecc2549f403f541137a67c8f211def3f5f91a4b360693cbe2efded41b93d9d13bec69d28e82c73b9255adb59ab94a3d9470573909eaa2f9a22e89fc03f9a54a287d2bc9d006ab892500fbae605860b25e2a05dfbba369c1827c95fae99b7a4d364cddf645bfc328dc55c8a65df952eeedc61b12d68dc271d1106cd476f8fe6", 0xf5}, {&(0x7f00000017c0)="01567109111f36e5ab10c26f07b9c997f91e994670128be92163f6d0f997e079d86ff2d401d2a12bbf2481956ae63c7fa6bb72247b5f6020bd84b03384a6b4b920dd80a4d18971c05e3a04603ca74271dd7b87fcac9a7ec69f0a2dd965d8d18551a4cac5cda55aaf4ff341b07ea8e2e3c93a7aedac5e065a23eff7cf58a4904cc014e190406260c975d6df", 0x8b}], 0x5, 0x0, 0x0, 0x20000001}, {&(0x7f0000001900)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000001940)="70fb9106ac8b6eb66219696c69e4fdf77b748629dfac19e943127e77559b7ffceb61c56d24d953fd5a9d6307d9ceab4b4eacf9e3bdf5b2411db28b21081aacaaee20b36c5cdac36747201564132b76", 0x4f}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="013775a8805e30c6f6b57eea6f244e9d3fc052413174ebf71014b8654b8c0a63256da7a50fd56b3563046d94ab55f398d23d2794efeca1bea054aaf47a15a2a49e8fd25a309a0df357068b134df3cbf3929bcaa4405cae1149090ff4e1aad861313bd733b2b7f392a5c6bcae83ec8407392d8fc2bc7a4b0246508dc987e8b88463fecc906215e47d38a007fa83aabc3bccaf1436f7b7db872531d004de7b7991f021a2ca85d6dd6d24d13f34488e6c", 0xaf}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="b933d0e3e856a6040d3df8f84eb927e997314573ae981bbca485044cca60f127fa3a1e7963a8a35a48bb8cd04b3caafb7c729f45a85c8095c608cf092b055c419b2165dccb61c82a932c97ac97bb2cbb9b53f48714a761a41f1f75d9609b1d90e289ffd0c78acc80ef3958021b36547e1f50f0d463c06f0c33c022edbbf8721158b8fd10be1cdc496c52eae8078b6d296049351fd7e8a06fe5ceecf229975a8227bb764de7c8acde600f54741bb7f6e270c220ba4e783d7b39632290ec7a9e5acb77d1fb5b41a73423e7fede0187e8e500ae10b4", 0xd4}, {&(0x7f0000002bc0)="9ed19b1a66d97df3d63137f3ad4e40fa3f223c3a326c5919421361fb245b467639aae90e1d7015a3bd97116d6622f902ac16c2447b41d0bcc5087a992b34c2d7a2be5a6f4ba4b7ff652e5c49f441d57272fa53afab151efaa3d8d79e3d0c5a0e188feadd0ac9f58095e4edda639218717084deb81b6b1fd1db1afce205f3f6feb4db2b5a3be6edf0", 0x88}, {&(0x7f0000002c80)="8754bd35bdb8ea180962bd49c858d635b18011036aa7093930c85f527bb41aeb257a5a13167957e757663b0b019cc847c4b047778ade63993e0ccacb941113d606cc270088055f41b1709957bbf714dca669d4536a6a2f51086b0d55ab0235cf7561a170d6a4b40fbb51765acea5a977bd948c230c3b7b33954c", 0x7a}, {&(0x7f0000002d00)="d70a88bbadec089951ae8f3b6b5e63c8a9ed1d3bc64da513433564f6f4735e7e16895cc6804f8f37a5622fefa126ca32e02d95f07de378ed9a9e7818bd2a197bbed433ece07eb6668c3f857caca38e7c3e6e6e5cc522ea9c", 0x58}], 0x8, &(0x7f0000002f80)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x4, 0xff, 0xffffffffffffffe0, r10}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7f}}, @sndrcv={0x30, 0x84, 0x1, {0x7ff, 0xd0800, 0x200, 0x5, 0x3, 0x1, 0x5, 0x3f, r11}}], 0x80, 0x20004010}, {&(0x7f0000003000)=@in6={0xa, 0x4e23, 0x5, @loopback, 0x401}, 0x1c, &(0x7f0000003240)=[{&(0x7f0000003040)="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", 0xff}, {&(0x7f0000003140)="16931d70cbc6284418e824609deb09052892d3292e5803c763c54ab9f13f52cbb1296950195f5f230167f72f04b43bb4aada5e082644c28907a4a59f1142b64283055a4765737f81f22d71b0bcb03c30f28895cbf3c07b3fe20dc257dd33e17440621519a82e833c1a191fea363fb034b7d95ae31e", 0xfe4a}, {&(0x7f00000031c0)="02095e9f8607b843937ef5f8d86076f811ab77fe96c88152786a90b2811cb5526e0e2b3a9b3f6c3f972348f341947f7e2602fa88cc96a1b38247bd72ce11ab729c4e56bdc3153da9e74678d994160bfa", 0x50}], 0x3, &(0x7f0000003380)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x13ef8beb}}, @sndinfo={0x20, 0x84, 0x2, {0x913d, 0x0, 0x1, 0x8, r12}}], 0x38}, {&(0x7f00000033c0)=@in6={0xa, 0x4e22, 0x0, @rand_addr="d58db2e9fc13136170f28de5cabfd3eb", 0xfffffffffffff68d}, 0x1c, &(0x7f0000003400), 0x0, &(0x7f00000034c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8001}}, @sndinfo={0x20, 0x84, 0x2, {0xfffffffffffffffe, 0x200, 0x516, 0x1, r13}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x11}}], 0x88, 0x24040040}], 0x8, 0x8000) statx(r1, &(0x7f0000000040)='./file1\x00', 0x2100, 0x7ff, &(0x7f0000000200)) 01:36:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1038.488327] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:36:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x600000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) dup2(r0, r2) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 01:36:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x40) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) r4 = getpgid(0x0) r5 = getpgid(0x0) r6 = syz_open_dev$usb(&(0x7f0000002fc0)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000003040)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002b40)=0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r6, 0x80000000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002b80)={0x0, 0x0}, &(0x7f0000002bc0)=0xc) fstat(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() r12 = getuid() fstat(r0, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000002d00)=0x0) r15 = getuid() r16 = getgid() r17 = fcntl$getown(r1, 0x9) getresuid(&(0x7f0000002d40), &(0x7f0000002d80)=0x0, &(0x7f0000002dc0)) r19 = getegid() sendmsg$netlink(r2, &(0x7f0000002f80)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000002b00)=[{&(0x7f0000000240)={0x140c, 0x24, 0xc08, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x10, 0x72, [@typed={0x4, 0x30}, @typed={0x8, 0x5b, @pid=r3}]}, @nested={0x1128, 0x40, [@typed={0xc, 0x7e, @u64=0xffffffff}, @generic="37cd901d373b43c096dc55f61928d9c441c667ff925c0998fdef16c1f291863cfdd2a44810d610568a180ee9a21c80e423fa9fe8002b12278b03f673679fa61ae446974032507e9366de60d4a10ff4611dfd171cb06e4761f9161cbe4a79ad3ab690333e245ebd", @generic="5c22ce20ac838b776e464fd5044218170e26a7315aabc9f182144fc128d2860f96de318b59fd2a1422f57ac9aa8bceb662ab97fbaef218a0b19449bf38b7e3a86621cc333129092c035b10eb914dd1b86026a9ca3fb74dcb33d10f25bffc0121eeb95104ca215d3c717b2df4c3712752cdb2373510e3791716a9c845c001011b5d4617614b3244500d6ade9324aec9b7592f2f7d8f512f070f947e71880c8377e12790d5f2e70a40c57c45b2e3f160b7", @generic="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"]}, @nested={0x23c, 0x80, [@generic="26803c142530e948440f1ebb8488c4b3ed76336b5aa9fc2cc70d1ec3db65120ffb7b5e9f476b74941a8daa357ef78ca4e49969714c667ad088092f352a38934e75d18273c041764fa22778c38c771db7a1230c9296634d7413b71fb4ef5db857bd6b5f47f0de706d4bb9c3909cea96422a43d4b8771b780cd84192f75da6bb11b68a402b3912d0f83014be4628fa0e1a02152b48205b3cb96593267a3abc00cb163c604d3e385dfe8b52b3bcc8f0a6fa91032329f20749ee47bfe8298df1c15260c19287bf500b8c78a39889a52d271b39c0061b31fb4754304dce6d09aeb50097e972b4d72976", @generic="5e8bdbd578125e7be5cb662d00d000962ad62a763c02412a1c88e4099058f2fa9e280a8c4856e44dbf3b7fd69cb27e1e6a0c95ccf4b020a095ca3fa445db34afae6b689ee431e3dc5730eafe2e7b84d2c1fa410e3b", @generic="1f69015addd5dc7aa504573bb547a87036855145618f1d9372dcea621a6cbeb566e63ca36738730c452e74a94d43126c3201490b48772e892955fcdb26f34b5300066f48eb54b714c34b2e50a65390029126236ecf3a4ffcaf460581dcea948c65d12e824ee2c1bbc6fbe0b3b0f2cc52822cad45197ebe111e2ebf19d48c0866e966f575544b4b45d0622b406a780d66e437a7ef8531bba1245c537ba52be2afd3e97e78d1250c63ccdd1f895e79a958faf0806cfa565198dda1bf7e756482209c6741fb85d0f02c950a55fc40ad94c864cb561d38cce249099a4c5363c26534c7fbd08db98a0374a09810c5209a0df1a4dd6f27990ec2c585"]}, @typed={0x8, 0x10, @pid=r4}, @generic="2df7e2b34df0d21bab872402aeee22dcc8e5855bb53a8ea69f3c4ef764ae1608e3f121c08f39d02f4592cf209486b949bf700c796dbe9f6205d8bfa84d88800b8db4c54c6cea19745ee64aee84c29e1c25137652689abd7161c8bf3cbd22387d0ea11ffb347bf76299e070b558980b6d5d2c9a720a1db3653782a1ba18"]}, 0x140c}, {&(0x7f0000001680)={0x148, 0x1b, 0x311, 0x70bd27, 0x7fff, "", [@generic, @nested={0x124, 0x93, [@generic="6b85a80455a59166780668a5498f6f8ae9cd8fd95523fb164fa16e274f231c62aab06f7bd2afc7746f9c826b4ff8f718e2ead8d1e2aa47c6c6b88380a57b07e64d59642150612d871da5edad3bfeaa36e22a59b5012cbe190864a84a80c7bdde49c4164aaf2e8ef64506298821053252ed0cc50948e3c3585f37a979bc6065d51405def4fe38bf78b89c2516a0f6789b3a2434c6d300b689976704ac1dc6a649bff5ee03eaa2293a0a478d5b98c798ca29db04d3a4a99ed88ff73374875b9f9cb46a6edf0fe45fa6db1dda8f2ee37e5395e1ee61d79e953f4aa751cfe3", @typed={0x8, 0xd, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @generic="b2f4bfecce334c2a34a6df2676939cf3f27f2ebdba4a1121c73837537e435b2997c63214bf65f2816d510c3e04c3d635125f3c8163668e5c"]}, @typed={0x14, 0x56, @ipv6=@empty}]}, 0x148}, {&(0x7f0000003080)=ANY=[@ANYBLOB="8c1200003f0000042abd7000fcdbdf2504010400f92f06d356efc05728ffc79c2c0d15d7e5f5aa2c0d20e4fc82f2b9aa3af183f293ebddf18165a258a8e4f36d284d572c87ffe4d7ca644c0c4305ea800cbd93d608a25ec64f360eb005d907c55fe7606bb679656b7c130699904c17d22c12b74e022770c91753cb0958b5e173e95435169470cbfafd3e00a36b19ef9a08009500", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="4b73e9d86753e82486bcc10d5f9daedd08f23baf5d9b3224aded1da641c97ad5a43a375e64c70402a13f833f64a8fc3367f0ddc392ea4122605f1f0e0a4c0f4f9bf8b562942ef654969cb38f04006f0008000c0004004a00"], 0x128c}, {0xfffffffffffffffd}], 0x4, &(0x7f0000002e00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000000018000000000000000100000001000004", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1], 0x148, 0x80}, 0x4) r20 = socket$inet6(0xa, 0x2, 0x0) getpid() getsockopt$inet6_mreq(r20, 0x29, 0x15, &(0x7f0000000100)={@initdev, 0x0}, &(0x7f0000000140)=0x14) sendmsg(r20, &(0x7f0000013000)={&(0x7f0000013fe4)=@can={0x1d, r21}, 0x80, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="280000000000000500006251456fa408143064d1b79912e20027020201594a87ccfe800000000000005900000000000000000000000016c8033f8c343505ace102261248229f890b1c8116cd314145cbe28db0fb6787c82370d3ecc097b18ee5ae20df12bf4ad874096d8deea92f427ce6c033248ed5bbfc4d5a17de3acafd4a67934893022f2a4b1d5132cddd6db09333d1ef9a570d911a7c0c6e47853a2c16fdcdaebac560057d61967941fec3177ab9c3ad"], 0x28}, 0x0) 01:36:06 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x5}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:06 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x10000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x800000000004, 0x0, @time, {}, {0x0, 0xfffffffffffffffe}, @note={0xd2bb003c0000000, 0x9, 0x6e, 0x6, 0x20}}], 0xfffffffffffffe0b) unlink(&(0x7f0000000200)='./control/file0\x00') close(r1) 01:36:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:06 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) chroot(&(0x7f0000000040)='./file0\x00') 01:36:06 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1039.618206] device bridge_slave_1 left promiscuous mode [ 1039.632711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.639506] Unknown ioctl 4701 01:36:06 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x1b5) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)) read(r1, &(0x7f0000000000)=""/126, 0x153) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000016) 01:36:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1039.766691] device bridge_slave_0 left promiscuous mode [ 1039.772272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.789109] IPVS: ftp: loaded support on port[0] = 21 [ 1040.068065] device hsr_slave_1 left promiscuous mode [ 1040.133639] device hsr_slave_0 left promiscuous mode [ 1040.315996] team0 (unregistering): Port device team_slave_1 removed [ 1040.371706] team0 (unregistering): Port device team_slave_0 removed [ 1040.383448] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1040.421418] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1040.513952] bond0 (unregistering): Released all slaves 01:36:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)="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", 0x1000, r0}, 0x68) writev(r0, &(0x7f00007af000)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = add_key$keyring(&(0x7f0000001100)='keyring\x00', &(0x7f0000001140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = request_key(&(0x7f00000011c0)='syzkaller\x00', &(0x7f0000001200)={'syz', 0x0}, &(0x7f0000001240)='\x00', 0xfffffffffffffff8) keyctl$instantiate(0xc, r1, &(0x7f0000001180)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '\''}, 0x1a, r2) 01:36:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = geteuid() r2 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r3) 01:36:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1040.742586] chnl_net:caif_netlink_parms(): no params data found [ 1040.905906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.912786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.920363] device bridge_slave_0 entered promiscuous mode [ 1040.928816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.935263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.942872] device bridge_slave_1 entered promiscuous mode [ 1040.965868] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1040.975766] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1040.998909] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1041.006571] team0: Port device team_slave_0 added [ 1041.012271] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1041.021421] team0: Port device team_slave_1 added [ 1041.026960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1041.034465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1041.089640] device hsr_slave_0 entered promiscuous mode [ 1041.136646] device hsr_slave_1 entered promiscuous mode [ 1041.186919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1041.194019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1041.220257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.226713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.233417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.239857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.289952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.300568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1041.311432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1041.321368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.330723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.345079] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1041.352284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.363429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1041.373340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.379773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.400657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1041.408935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.415298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.439827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1041.449968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1041.469196] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1041.477722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1041.485799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1041.503240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1041.514310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1041.538214] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1041.545180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1041.556906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1041.580669] 8021q: adding VLAN 0 to HW filter on device batadv0 01:36:09 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x6}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:09 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1ff) r1 = socket$inet6(0xa, 0x2, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x800) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000100)=0xc0, 0x4) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f00000001c0)=""/192, 0xc0}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)=""/236, 0xec}], 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000040)=0xdf8, 0xffffffffffffff5f) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c) 01:36:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000280)) select(0x40, &(0x7f0000000140)={0x800, 0x34, 0x800, 0x3, 0x800, 0xfffffffffffffff9, 0x0, 0x6}, &(0x7f0000000180)={0x1000, 0x7, 0xd9, 0x4, 0x2, 0x9, 0x200, 0x4}, &(0x7f0000000200)={0x3, 0x200, 0x0, 0x6, 0x3, 0x800, 0x80000001, 0x3}, &(0x7f0000000240)={0x77359400}) fallocate(r0, 0x10, 0x7fff, 0x3ff) ioctl$KDDELIO(r1, 0x4b35, 0x3f) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800460000180000000000339078ac141400ac1423bb860300000e00907800000000000000000000000000000000199f239e1b27daded00d13e988c4dc2c31f1bdab58a753ca2049eb9e8c2431d55da6585bc726d8baf33a2da5482b832979d67c2bc8063ee8a73e655b34da4bb209e0b793020930c1a9d80f1e0bac7c82d8e0bc39ab986501af9539b35546f61f8972e87d97737ef04df730d93ccc2e8ec377da80a85834bc99360e86e78a6cbab2b7433bb8bb334ebe79297458d9df63f4027ec4be00b6037846a5ded221"], 0x0) readahead(r1, 0x8, 0x200) 01:36:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:09 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0xc0d, 0x4000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200041, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000080)={0x2, 0x9}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x800}, 0x28, 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffffffffff8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x101}, &(0x7f0000000180)=0x8) getsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x1, 0x10, 0x0, 0x1}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r3, 0x7}, 0x8) [ 1041.920270] Unknown ioctl 4701 01:36:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x400, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000400)=0x2, 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x7, @sliced={0x86, [0xff, 0x0, 0x86, 0x8001, 0x3c4, 0x100, 0x0, 0x8, 0xffff, 0x3, 0x10001, 0x80000000, 0x2, 0x0, 0x1000, 0x3, 0x5c, 0x4, 0x100000001, 0x6, 0x0, 0x8, 0x400, 0x1, 0x7fffffff, 0x1, 0x0, 0x560a, 0x92, 0x5, 0x8001, 0xfffffffffffffffe, 0x86c4, 0x4, 0x0, 0x101, 0x0, 0x8, 0x5b6, 0x7fffffff, 0x10000, 0x5, 0x3d45, 0x0, 0x1, 0x1000, 0x5, 0x101], 0x755}}) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 01:36:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:09 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) [ 1042.117485] QAT: Invalid ioctl 01:36:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x4, 0xa, 0xfff, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) [ 1042.153492] QAT: Invalid ioctl 01:36:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:09 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) getpeername$netlink(r0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x3) 01:36:09 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x7}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:10 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705126163e492bbe84b5ea111d67c744e6aac99f023e7074924d34afaecfdd9a549d87fb36af81c90986bc25785c86322d427eb9f3226fa2d2325084b0f6c3cb846ca756907658c1aca213d41ffb450c998"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r4, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:10 executing program 3: r0 = gettid() getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, 0x0, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0xfffffffffffffd76) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/186, 0xba}], 0x3, &(0x7f0000001780)=""/136, 0x88}, 0x102) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) kcmp(r0, r0, 0x0, r3, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000700)="d29fb01e3a12902cd9bcec1e7f0725adaa1a27aae52322fb4b8bb0075a04a44eeda4c99d086c319129e6575727c71c67860ca90fe3b5d5e109b9e3c1f6ea80882dd8848259", 0x45) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x100b}}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) close(r1) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 01:36:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0xf0, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x6c}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x7f, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r3, &(0x7f00000001c0)=@known='system.sockprotoname\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="8cf0ecbcab3d83fff1b67f5c8d2a3e57", 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x1000, 0x7bfffffc, &(0x7f0000ffb000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r5 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r5, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:36:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:10 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1043.002236] Unknown ioctl 4701 01:36:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:10 executing program 3: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) accept4(r2, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 01:36:10 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x9}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xd1fc, 0x80000001, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x3, 0x4, 0x430f, 0x81, 0x7, 0x5, 0x8, 0x28d, 0xc0b3, 0x101, 0x0, 0x6, 0xe2, 0x3ff, 0x1, 0x0, 0x9, 0x8, 0x6, 0x10000, 0x3, 0x279, 0x3, 0x5, 0xff, 0xb0e5, 0x4, 0xffffffff, 0x0, 0xbf, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x40, 0x5, 0x1ff, 0x2, 0x8, 0x3, 0xaf0c}, r2, 0xf, r0, 0x8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r3, 0x8007ffc) sendfile(r1, r3, 0x0, 0x9928) 01:36:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3202000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:11 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0xa}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:11 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:11 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x100000000805, 0x0) listen(0xffffffffffffffff, 0x0) r2 = dup2(r1, 0xffffffffffffffff) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x12000000000, 0x673066ef, 0x2, 0x3, 0xd0b}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000540), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() capset(&(0x7f00000004c0)={0x20080522, r3}, &(0x7f0000000500)={0x3, 0xd20, 0x10000, 0x0, 0x80000041, 0x4}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$void(0xffffffffffffffff, 0x5451) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000002c0)={0xd9, 0x6, 0x0, {0x1, 0x0, 0xb0, 0x0, '\xe2\xabI&\xe1\xb7Y\nt\a\xc1\xd4\xdb\x1fR\x91\xdeK\xf1\xb1\xe4sn*\xdc\x13\x95\t9\xf4p:\x1b\t\xb1\xc0\x99I[{\f\xbc ;\xaf\xc4\x170\xf4\xae\xf9\x7fc\xae#\\\xe0\'\x89KD\x97O\xc1\x9d\xc9zkv4q\xa9\xa9\x1e\x8aPK\x01\x87\x8bZ\ah\xf4\x18bn\xf5 \x1c.\f\x8e\x06\xa8\r\xb5\v\xe6)<\x99N\xc4c\xec=#x\xb0Z\xfc\xf6\xa9\xb5\xdfV\xbd\x8bxo\xfd`\x14W\xca\xa1\xfeB\xe0\xdb\x1c\x8d\xc7\x83t-\xbd.\x80\x1b{`|\x1ah\xe4\xd9\xff\xfd\xe0\x90\x13\xd6&Zu\x1e,\x93f\xbeb\x1c\x8ed#\rq\xd9\\\xff\x8a\xe5*\x03'}}, 0xd9) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x130, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) 01:36:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xd00}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x80020000001, 0x0, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r1, 0x0, r3, 0x0, 0x20ede, 0x0) r4 = semget(0x0, 0x4, 0x9e) semtimedop(r4, &(0x7f0000000000)=[{0x3, 0x10001, 0x1000}, {0x7, 0x10000, 0x1000}, {0x3, 0x1, 0x800}, {0x5, 0x0, 0x1800}, {0x4, 0x8, 0x800}, {0x0, 0x1, 0x800}, {0x1, 0x58c1, 0x1000}, {0x3, 0xffffffff, 0x1800}, {0x6, 0x9, 0x1800}, {0x3, 0x9369, 0x1800}], 0xa, &(0x7f0000000100)) [ 1044.638407] Unknown ioctl 4701 01:36:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xd00}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x80020000001, 0x0, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r1, 0x0, r3, 0x0, 0x20ede, 0x0) r4 = semget(0x0, 0x4, 0x9e) semtimedop(r4, &(0x7f0000000000)=[{0x3, 0x10001, 0x1000}, {0x7, 0x10000, 0x1000}, {0x3, 0x1, 0x800}, {0x5, 0x0, 0x1800}, {0x4, 0x8, 0x800}, {0x0, 0x1, 0x800}, {0x1, 0x58c1, 0x1000}, {0x3, 0xffffffff, 0x1800}, {0x6, 0x9, 0x1800}, {0x3, 0x9369, 0x1800}], 0xa, &(0x7f0000000100)) 01:36:12 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x1, 0x1, [{r1, 0x0, 0xfffffffffffff000, 0xfffff000}]}) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000000c0)={0x0, 0x6, [{r1, 0x0, 0x4000, 0xfffffffff0000000}, {r1, 0x0, 0xd000, 0x10000}, {r1, 0x0, 0xfffff000, 0xfffffffffffff000}, {r1, 0x0, 0x0, 0xfffffffffffff000}, {r1, 0x0, 0x0, 0x4000}, {r1, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}]}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x6, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={r3, 0x80000, r1}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) ptrace(0x4219, r6) io_setup(0xffffffff7fffffff, &(0x7f0000000280)=0x0) io_submit(r7, 0x6, &(0x7f0000002540)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f00000002c0)="37adf6a8d3f44d1de8a60cd8aa7b799e68b024c21d0f47cd66885bcc43", 0x1d, 0x3, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x1, r2, &(0x7f0000000340)="cbd8af4af0610d6d9f3fd2d3db4c247f45aa440dc607d451", 0x18, 0x0, 0x0, 0x2, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x6, r0, &(0x7f00000003c0)="e153868de3bb8b82ad221242ff", 0xd, 0x2, 0x0, 0x1, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x10000, r5, &(0x7f0000000440)="5927074777a85c101a803b77de2bada9cb316ea7effb55af0095c2b1122077dda6", 0x21, 0x80, 0x0, 0x3, r1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x6, 0x53fc, r2, &(0x7f00000004c0)="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", 0x1000, 0x1, 0x0, 0x0, r1}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x1, 0x7, r1, &(0x7f0000001500)="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", 0x1000, 0x1, 0x0, 0x0, r1}]) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000002580)=""/198) ioctl$KDSKBLED(r1, 0x4b65, 0xc5) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000002680)) io_cancel(r7, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f00000026c0)="f2e551be2ace407a9c190cf4c66d12b43b3ef6748b8d4c0ca85a20a1acf86444b9275e", 0x23, 0x6231, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000002740)) ioctl$KDSKBLED(r1, 0x4b65, 0x7) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000002780), 0x10) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000027c0)=0xffffffffffffff74) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x12, 0x10, 0x10, "0aeed55a762fd2df1b159d86c1fb6de344797536372411f93f992f98ebdae2ea65b9eb77f06b313011ed093ea71b199ed4787e772a62a875176782c543e087e7", "40f12bae90eff23d418d681b47b9031b80f992d26655d4e7e63f61d5dfaff6cf", [0xf000000000000000, 0x800]}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000028c0)={0x6, 0x20, 0x6, 0x12c80000000000, 0x1ff}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000002900)={0x40, 0x1, 0x7, 0x6, 0x9}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002940)='/dev/vsock\x00', 0x18e01, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r8, 0x4010641a, &(0x7f00000029c0)={0x1, &(0x7f0000002980)=[0x0]}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/zero\x00', 0x12000, 0x0) write$FUSE_BMAP(r4, &(0x7f0000002a40)={0x18, 0x0, 0x2, {0x6}}, 0x18) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x1e) ioctl$EVIOCGABS3F(r9, 0x8018457f, &(0x7f0000002a80)=""/67) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002d00)={r9, &(0x7f0000002b00)="f6d1023a504ebe09a04225df718e743119194b0b9818e49d945dd634eca129929eaff707709d3e80349397a4ab6e641d819c5e21b539cad4ac88547bc2a39e377e8f5f83a907950ecc3d93bd933acb7498545f1daf3a616c0031303c54f315779de954dfffd5d746308c084366bead342a0143cb4c5d0227781df7797d580de7159317cf1c156ef398ee9e310639077a131a299923817737af7b486c06fb4c4601893b368db10df3530a01654f2afff376889fed26883fd315cb288308a7e6431aa8e962d7e5245bb893769f254b379bb9ff4d2958b8db62f909d12766f95f1bff0eb0620c09cfa2", &(0x7f0000002c00)="787d43bb8170deee343e4223cce806fb88345ce7beb8a72dd14003f24f212caab9d9a49e586069de1970c24f357258ad31026b8dc324ef91d4552d3cc1dc540fb8da773508ddd1bae6dccb146e5213aead42312f608b64e0d797ec71efe6a5c7edaa5b8f781a69f4186e20f7013ffd4e81c7d1e2e78d3629d89b2765c414764897be1936f6ff85b017e940c603f4c07cfa80a84b154f72ba46e6cc5695fade72cc6163986ebdf5420e9f344675762a04be5ca0c7b83e17cbdbc49aa3bbb958efcf1497954e493bad9f5faa1205d822a2fabcbddf11b881976c13f54143e2a3238c8b3d47ceee8d50ea5e3f", 0x2}, 0x20) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000002d40)="db697bdc69f45243184737f6", 0xc) 01:36:12 executing program 3: socket$unix(0x1, 0x7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00') prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000180)={0x1, 0x2c1}) lseek(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x80000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000001c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000340), 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x0, &(0x7f0000000040)=0x800, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03Z\x00\x02\xe6\x03\xca\x00', @ifru_mtu=0x1}) 01:36:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0xb}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0xa0, 0x5282, {"79d21a9157025f684ebbcba81e2a9b0ede3209c02fb3114ddb644faa90b9c772a984856b3df42b423eda64b51a09c6db673b5f6c4e1e8a5d83e35d6a6ba6734cd7383693cc352fc72b2ba6049b43864a1ca445672d2a984464dcc00f3b02fc00d841c2f180c5f922ebab3438e8abd5a5f68c20b427c0fb978c652869e5c5cdb2ae94707fb1a0"}}, {0x0, "4f59356fff9b17fd1c78ec15354312b30ae897f828145f0d9e357a1526"}}, &(0x7f00000001c0)=""/236, 0xbf, 0xec, 0x1}, 0x20) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0)) mount(&(0x7f00000003c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x0, 0x0) 01:36:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:12 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04000a000710080001000e0000000900000000000000", 0x24) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x18881) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0xa10410, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x9000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}], [{@obj_user={'obj_user', 0x3d, '}mime_type'}}]}}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, ']($'}, {0x20, '}mime_type'}, {0x20, '(\\('}, {}, {0x20, 'vboxnet1'}, {0x20, '\\[(\'[$md5sumem1em1$!'}, {0x20, ',\\\xa1'}, {0x20, '#'}, {0x20, 'eth0%'}, {0x20, '!\x90'}], 0xa, "546bbd7bf6d299c4003f6b0d3a33edb03a813201bf7933ca5c69d0d30b387a15141a7cde42b91f86d3bbcd22c2c4946f506c829e092651b579ec3fc2f035512b79e6372f3895ad704d502fc05a7349b3"}, 0x9c) 01:36:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0xc}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1045.734204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 1045.752807] Unknown ioctl 4701 [ 1045.793500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 01:36:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:13 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) wait4(0x0, 0x0, 0x60000000, 0x0) r0 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000040)={{0x1, 0x4000, 0x3, 0x4, 0x6, 0x5, 0x0, 0x8, 0x6, 0x20, 0x1f, 0x6}, {0x3000, 0x0, 0xf, 0x3ff, 0x0, 0x80, 0xfffffffffffffffd, 0x5, 0x59, 0x9, 0x3, 0xf334}, {0xd000, 0x2000, 0x8, 0xfff, 0x0, 0x9074, 0x7fff, 0x6, 0x400, 0xffffffffffffffff, 0xfffffffffffffffe, 0x10001}, {0x105002, 0xd001, 0xd, 0x4, 0xa1e, 0x800, 0x1, 0xfff, 0x8, 0x8, 0x3, 0x615b}, {0x2000, 0x10000, 0x4, 0x100000000, 0x5, 0x4, 0x8, 0xfffffffffffffffe, 0xe2, 0x1f, 0x7, 0x5}, {0x1000, 0x0, 0x3, 0xffff, 0x80000000, 0xfffffffffffff0a4, 0xfffffffffffffff7, 0x8001, 0x1000, 0x2, 0x24000000, 0x9}, {0x0, 0x0, 0xb, 0x9, 0xfffffffffffffffd, 0x0, 0x100000000, 0x6, 0x9, 0x3f, 0x1ff, 0xde2d}, {0x0, 0x1, 0xc, 0x7, 0x400, 0x5, 0x1, 0x80000001, 0x5, 0x100, 0x7fffffff, 0x44}, {}, {0x5000, 0xf000}, 0x80000020, 0x0, 0x100000, 0x100, 0xf, 0x1000, 0x4002, [0x3ff, 0x0, 0xe39e, 0x2]}) ptrace(0x44206, r0) wait4(r0, 0x0, 0x1, 0x0) 01:36:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:14 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0xd}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f00000042c0), 0x0, 0x0, 0x0) shutdown(r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x202, 0x110) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000040)) r2 = gettid() set_robust_list(&(0x7f0000000540)={0x0, 0x2, &(0x7f0000000500)={&(0x7f00000004c0)}}, 0x18) migrate_pages(r2, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0xc4) 01:36:14 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80, 0x400000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x2, 0x80}}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r2 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x980912, 0x0, [], @p_u8=0x0}}) 01:36:14 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140), 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="36b4131324c0b8fa6b05cdbb", 0xc}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x30, 0x40000}, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @multicast1}, 0x10) epoll_create(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x80000001, 0x0, 0x2, 0x5, 0x20}, &(0x7f00000008c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000900)={r2, 0x1, 0x4, [0x1, 0x6, 0x9, 0xee]}, 0x10) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000), 0x10000046, 0x3) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000540)=""/221, 0xdd}], 0x2, &(0x7f0000000640)=""/216, 0xd8}, 0x41) connect$packet(r0, &(0x7f0000000480)={0x11, 0x9, r3, 0x1, 0x10000, 0x6, @broadcast}, 0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0), &(0x7f0000000180)=0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) [ 1047.209442] Unknown ioctl 4701 01:36:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x2}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:14 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x4002) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = dup2(r4, r2) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20) 01:36:14 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x103100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @broadcast}, 0x10) prctl$PR_SET_MM_AUXV(0x21, 0xc, &(0x7f0000000580)='M', 0x1) 01:36:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x3}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1047.492045] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:36:14 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x1) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x800}) 01:36:14 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @vbi={0x9, 0x9, 0x8000, 0x36314d59, [0x1, 0x1], [0x8f, 0x1], 0x13b}}) 01:36:14 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0xe}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x4}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:15 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:15 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x0, 0x0) 01:36:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x3b0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000000000000001000000000000000000000040000000000000985785ac592b44f6048c71efcb3884763ec4e3b3cf8caf51a182127e08f559edc91f09a5dc778e9856aa97717653f698fe550043bcd532c3d94077cec1622f6575e7fa0e15c8629f9c714c961d4017a4ec1a965bb58408b728b0fe0df29d932aabf6b0eef777470e1cedebff89ebba9a5cdc20dcebf609cca6a74da2578e3d"], 0x20}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @loopback}}, 0x36}, 0x90) [ 1047.920511] Unknown ioctl 4701 [ 1048.124672] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:36:15 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x6c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x3e, r0, 0x0) close(r0) 01:36:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0xf}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x5}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x303140, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="5a0000009846513193852b5df1a086a8e53d0490ff78b580f235e70c0d36820f028baf69db0fa2963776d1a27aea1c1a3481545df91f0eb8e7b504ed3b3ae6020edbe7b0047f42fcce4233af20ab1899d3a67e057d07e252a414fba04643"], &(0x7f0000000100)=0x62) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="e590619478900856568101ffffffffffffff9240c7d2b9"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0x0, 0x118fff}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) fchown(r1, r5, r6) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x4e23, 0xfffffffffffffffd, @local}, r1}}, 0x48) 01:36:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x11}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x6}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f00000001c0)=@ipv6_delrule={0xa0, 0x21, 0xb00, 0x70bd27, 0x25dfdbfe, {0xa, 0xb4, 0x14, 0x9, 0x2, 0x0, 0x0, 0x2, 0x18}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xe}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x2f}, @FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e21}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0xff}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xd}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x2f}]}, 0xa0}, 0x1, 0x0, 0x0, 0xd}, 0x0) 01:36:15 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x8}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x12}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x3c8, 0x0, 0xfef6}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x180, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0xf31, 0x9, 0x3, 'queue0\x00', 0x2}) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="c14305000000400000000000ac14140deb10c144", 0x14}], 0x1}, 0x0) 01:36:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x9}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1048.648232] Unknown ioctl 4701 01:36:15 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x57, 0xa00) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x3) accept4(r4, 0x0, &(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x0) 01:36:16 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x2f}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) getpgrp(0x0) restart_syscall() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x10000, 0x2000) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000000c0)) 01:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xa}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4188aea7, &(0x7f0000000000)={0x0, 0x600000000000000, [], [0xc2]}) 01:36:16 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x39}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:16 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r1, 0x8}, &(0x7f0000000400)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x2, &(0x7f0000000000)="0adc1f9405fecb902931e3") r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r3, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000140)=""/198, 0xc6}], 0x2}, 0x2}], 0x1, 0x0, &(0x7f00000002c0)) 01:36:16 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xb}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:16 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r0, 0x10d, 0x11, &(0x7f0000013ff4)={@remote, @loopback}, 0xc) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80002, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f00000000c0)) close(r2) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000002040)={0x0, 0x0, 0x2080}) 01:36:16 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x52}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:16 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x67}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1049.556881] Unknown ioctl 4701 01:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xe}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000040)="0adc1f123c123e3188b070") r1 = socket$kcm(0x10, 0x0, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x101, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@loopback, 0x2fd, 0x0, 0x2, 0x2, 0x8001}, &(0x7f00000003c0)=0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xff, 0x4000) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x7ffe, 0x7fff}, {0x100000000, 0x9}, {0x22, 0xfffffffffffff2f5}, {0x80000001}, {0x2, 0x40}]}) write$binfmt_elf32(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4601fa3f93070000000000000002003e000900000030030000380000003b0100000900000002002000020002000700060000000000040000007f0000000400000002000000ffff00000700000000000000c500000086e7992a55f57804ca7d6bc0dfa64248410aa187afffef13ed56ba67843745f5889a9494c510b868e3e6757a1c4e4120beb04c52d3814997378d28f182d7d6ee18695afe9227b447d796d14b27ef5452067afaca9b2ccd9a4e71c3ff91be7a16ffe593941c5e339828edbc7d86c4e64a58b8b2de3140e0ad433f6a7ed5e6b2ecce8885c55f7b38ec865594943ecd80ceb19664385d4aabbf75e45f37d7d2d29e163844696e404678fbb628e33ae454c05dc0255b70ce06ee173c1f851322ef280bce01353d546659faf43803ef0c6006c0aedfaf67c81878a1f22c62b4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000c312b8cd7cf288a465b22327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc07267f432151a92ade2f98cf131cad4547712fa13df5f749c7f5e825ffe9e2394ebc77e05fdc1e3a84f9bd61df641db1f28d946a1cc7c369f563d66ed6775ae7f83510c9b02f6a3cea2a970dd86b9626f8fd44d77d0ce2d49080ad4a4cd61547b18661a12ff8a598825aaa92bf9cd232614c52de7af3ec0180074eda09d333a0d49baf259d5165de138ad7bf65bb1edd89933382e1ee98c9dd457d8f249e899870f629dde66529b8fbe26a7281a0053ef424cca80804f4898161faeb790d9831c2379bafd0d20488c49fe3a4ae0cb247872c77ff395ad675feb93ec1fd0714052ab88af78aa9f3970c2edaba7678049e2bda1cda5a34d34c9beeb58e56bf8a2c37319fd750051f7a09c57d6a1f8c6c8976eb8a0a6534620d7778311b5a59486b82f9aa2a85b0dd97289f82cc7455a9c978a59240bb89f6dd4dc5bff5b66ea53d5d0b0ac0570c78fc610578ffb70e495d887cca604f472418e64ed850fef11db9264bda0139386a965fadaf76019509264759072035cc1f62cd3945e9a3750ee0c415818bca81494eeb23af55f27162b05604e2d0ccebad64215b0c9b755349355b6f6d01fbe6e3263081762e34b9556a8987d7544779027157e3f93bec2fd18a85c5d5ad50abff59315fca7939ad"], 0x525) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x4001, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xffffffe2, &(0x7f0000000000), 0x1000000000000162}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6(0xa, 0x80000, 0x253) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={r6}, &(0x7f0000000200)=0x8) 01:36:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000680)='/dev/swradio#\x00', 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0x1, 0xc, 0x1, r1}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000006c0), 0x10) write$P9_RAUTH(r1, &(0x7f0000000440)={0xffffffffffffff68, 0x67, 0x2, {0x91, 0x2, 0x7}}, 0x14) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000500)=""/17, 0x2000, 0x0, 0xffffffff}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x202a80, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000000200"], &(0x7f0000000700)=0xa) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="ec0000006251282b2ecfb98e6d8e27ac0145648d7300772709166e073249c7206b39a7e8141b6330b546188d91d10f6690c2c5ecad32ae0ac58da6e6d1c353282674193993ac94c2fa0008385c9969239a00599d9da8b1c6adbdd4fd5da4ea96baf6ba770fd5d5cc0dc4300dd4b8a302bdf7cbc8f61a3cb6b4f25d92831e9093e2a24e2cf888269491cfa2422c9985893488a7091afa78d1f2006570bc6e0feac778abcb1f3f35fe223f6c80f18fbfeef68dd07eef80d12345b4d91e340e1b64c1f16cb32349cf12907d09bad9f9a51bfd2a42ba3e09f991e997a28e7c2b54857a9d7cceeb00200e2d5b931191579911"], 0x0) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000480)={'\x00', 0x4}) r5 = dup3(r0, r0, 0x80000) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000240), 0xffffffffffffffe6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x40, &(0x7f0000000540)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e23, @empty}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000600)={r6, 0x4}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x4d}, &(0x7f00000004c0)=0x8) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000006800)={0x2, 0xfffffffffffffffa}, 0x2) sendmmsg$inet_sctp(r1, &(0x7f00000065c0)=[{&(0x7f0000005140)=@in6={0xa, 0x4e20, 0x7, @empty, 0x6}, 0x1c, &(0x7f0000006400)=[{&(0x7f0000006380)="19b3e6ede9653f1cf16dbda3a5e5372e7b9e7949b081ad0eb01bb8083ba7138de25868e36664add3cfa1124ade0f4830fb269b8cfc65d2dd9ae7cd142d97f532a2ac8dc1af1371cb1737e95decdd751b20a70ee5", 0x54}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x1) prctl$PR_GET_DUMPABLE(0x3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x87fe, 0x0) sendmsg$xdp(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) pipe2(&(0x7f0000000040), 0x80000) 01:36:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000002e00000024000000000000009500000000000000c8bb65c002ba68053848156375b418a36865b25a8dd382d4c4fb368c5527e700e7b8ccd07ac7aab81aee03618bb95471072f5413b66eeefb1b2d8cbec761c0ee44715d9a082bce088445f9bf6564b047c854b053cce395addd02212696ff60d94dece683bac654fc92e2e681a12a5e7b4896a24f4041b7541b43"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 01:36:17 executing program 5: syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xe2, 0x400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$rds(r2, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000280)=""/196, 0xc4}], 0x2}, 0x4008080) sendmsg$alg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0xfffffdde}], 0x8}, 0x0) 01:36:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xf}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:17 executing program 4: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00\x00\x00\x80\x00\x00\xff\x05\x00\x01\x00', @ifru_settings={0x0, 0x5, @cisco=0x0}}) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000001c0)=0x7) setsockopt(r0, 0x0, 0x2, &(0x7f0000000100)="ab0d7bd579bcaedbb52c3f888169f2cd06956c091aa80f3eb52d857da1e82438574e643a46659f08f1be4179a02c36336f671fb59995f082f8d86492f8556cdc59d95d89aef392d669e3cf7a208949199e3a95dd02a654b57579b296803ccb3b2ed8968c5c62dad210e54ca3", 0x6c) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) [ 1049.991756] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:36:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:17 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081000000162aba21194154cd635661e7c045cf0800010000280000000000009078ac141400ac1423bb0e00907800"], 0x0) 01:36:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x10}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:17 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x50d4, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x3ff}, 0x8) close(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:36:17 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x11}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:17 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x20001290}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000240009000000000000000000"], 0x14}}, 0x0) [ 1050.766899] Unknown ioctl 4701 [ 1050.772338] Unknown ioctl 4701 [ 1051.075396] IPVS: ftp: loaded support on port[0] = 21 [ 1051.314827] netlink: 'syz-executor3': attribute type 10 has an invalid length. 01:36:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getgroups(0x1, &(0x7f0000000340)=[0xee00]) fchown(r0, r1, r2) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 01:36:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = getpid() prlimit64(r2, 0xc, 0x0, &(0x7f00000000c0)) r3 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0xa000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000002c0)=0x60000000000000) socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1) ioctl$RTC_PIE_OFF(r3, 0x7006) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x2b, "64ff85b65938ba532391e9a6ef6d8f8f342ed4ee88a03ce5966c9bb9283930d0c7d4dce24e55bbdab46433"}, &(0x7f0000000340)=0x33) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000380)={r4, 0x30, "3e43f4d4a8c71ad4204fa1d547efea132ae88083e55edb64a9fad0dd7f4be869a47b2e2ff6f51b22aaeee6abadce806e"}, &(0x7f00000003c0)=0x38) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000180)={@remote, @empty, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xfdfdffff, 0x1, 0x1}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x3f, 0x3376775b, 0x1, @stepwise={0x7, 0x70, 0x2, 0x2, 0x101, 0x3}}) r6 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$IMCTRLREQ(r6, 0x80044945, &(0x7f0000000400)={0x400, 0x7ff, 0x81, 0xffff}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000240)={0x0, 0x101, 0x100b}) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000080)={0x0, 0x1, 0x4, [0x100000000000500]}) 01:36:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x12}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f00000000c0)="c53e157505f39fc3664b0cb52d13b77ddb96d48d773636a67e97979e61b12cb9a45ffa7ce155e7cb4a34faba14741a36410f3dd7e51915bb1e59ba6c4bf7429ab3e26025330e2ba542458f7afe640a62526522a787d4a36bef4e8eb45f3d06baaf6c6dd654610049d4d14f22ad5777bbecf9cbe3a66481b743eff3e6013e6e8ac3d5448ffd7505a8ff99c5d94c023eb184f1fad89fbdd6c0b1c8d9b07fe8032ca48aa3cc2cb0baab9193cdbd0a038c508f26ba0798e5af5f5a5e5469c471773f84ae56b9282b12b46809765874cd176101c5daf6fbd0159cf4f2f7dbce41b956", 0xe0, 0x0, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 01:36:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x13}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:18 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:19 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x2, 0x428) r4 = geteuid() getresgid(&(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) r7 = getegid() semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000600)={{0xffffffffffffffff, r4, r5, r6, r7, 0x0, 0x8}, 0x3, 0x4, 0x8001}) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x8) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f0000000080), 0x0, &(0x7f0000915ffc), &(0x7f0000000180)) read(r8, &(0x7f0000009f9c)=""/100, 0x64) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x404200, 0x0) r9 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x200001) write$P9_RREADDIR(r9, 0x0, 0xb7) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x0, 0x1000}, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_setup(0xa7, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) io_submit(r10, 0x1, &(0x7f00000000c0)=[0x0]) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x511000) [ 1051.726308] chnl_net:caif_netlink_parms(): no params data found [ 1051.843630] Unknown ioctl 4701 01:36:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x60}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1051.935183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.957424] IPVS: ftp: loaded support on port[0] = 21 [ 1051.976568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.003214] device bridge_slave_0 entered promiscuous mode [ 1052.095748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.104251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.127318] device bridge_slave_1 entered promiscuous mode [ 1052.195916] device bridge_slave_1 left promiscuous mode [ 1052.202953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.284141] device bridge_slave_0 left promiscuous mode [ 1052.289849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.709823] device hsr_slave_1 left promiscuous mode [ 1052.775356] device hsr_slave_0 left promiscuous mode [ 1052.852746] team0 (unregistering): Port device team_slave_1 removed [ 1052.879879] team0 (unregistering): Port device team_slave_0 removed [ 1052.906204] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1052.962250] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1053.099863] bond0 (unregistering): Released all slaves [ 1053.229750] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1053.243300] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1053.302035] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1053.309844] team0: Port device team_slave_0 added [ 1053.315609] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1053.335264] team0: Port device team_slave_1 added [ 1053.349570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1053.362375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1053.437958] device hsr_slave_0 entered promiscuous mode [ 1053.496475] device hsr_slave_1 entered promiscuous mode [ 1053.607132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1053.621039] chnl_net:caif_netlink_parms(): no params data found [ 1053.637963] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1053.704817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1053.729865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.737147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.744605] device bridge_slave_0 entered promiscuous mode [ 1053.765068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.771555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.779503] device bridge_slave_1 entered promiscuous mode [ 1053.849127] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1053.871188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.888175] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1053.906496] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1053.923347] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1053.954027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1053.961234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1053.969102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1053.982788] team0: Port device team_slave_0 added [ 1053.989926] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1054.004139] team0: Port device team_slave_1 added [ 1054.011920] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1054.018549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.025110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1054.040676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1054.065753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1054.091485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1054.099754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1054.107640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.114008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.170863] device hsr_slave_0 entered promiscuous mode [ 1054.226487] device hsr_slave_1 entered promiscuous mode [ 1054.266806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1054.273815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1054.292034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1054.303960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1054.320266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1054.333229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1054.344970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.351420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.379012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1054.393757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1054.414037] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1054.424879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1054.440099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1054.460542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1054.472363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1054.485175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1054.501721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1054.515006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1054.534317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1054.550956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1054.573381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1054.583881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1054.600319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1054.620948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1054.633873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1054.650418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1054.670589] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1054.680887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1054.721709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.732396] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1054.745087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.759171] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1054.770663] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1054.776978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1054.784369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1054.804033] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1054.810788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.830656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1054.852513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1054.864174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1054.878078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.884473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.897729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1054.922141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1054.933664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1054.941365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1054.950354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1054.960898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.967367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.974873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1055.006688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1055.016871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1055.036424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1055.044429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 01:36:22 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xf0}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:22 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001480)={@multicast1, @loopback, 0x0}, &(0x7f00000014c0)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001500)={r1, @local, @dev={0xac, 0x14, 0x14, 0x25}}, 0xc) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000080)='fd/4\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18170000", @ANYRES32=r3, @ANYBLOB="00000000000000000157f6fffcffffff8500000056000000850000002a00000077dd9b24b1f39fa415b3040815836a9a1dbaead509d0"], &(0x7f0000000100)='syzkaller\x00', 0x8001, 0xbb, &(0x7f0000000140)=""/187, 0x41100, 0x1, [], r1, 0xb}, 0x48) 01:36:22 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1055.067101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1055.102713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1055.141279] Unknown ioctl 4701 [ 1055.156574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1055.188473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1055.238646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1055.280724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1055.313880] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1055.343506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1055.362290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1055.417386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1055.445406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1055.471024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1055.522919] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1055.547886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1055.619314] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1055.662897] 8021q: adding VLAN 0 to HW filter on device batadv0 01:36:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000300)={0x0, "89c4003a7df068a823bdba716d38ffc82be91787d095ec33432870cc35b5e65f"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000000)={0x8, 0x6}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0xc008ae91, &(0x7f00000005c0)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_pts(r2, 0x800) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x1d, "69fbe1441dd065d4543930a1793112c6e08837db11b77b78260ebbdce5"}, &(0x7f0000000140)=0x41) 01:36:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8000000000b1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x1, [], &(0x7f0000000140)}) 01:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x232}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000780)={{}, {}, 0xff, 0x0, 0x4}) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x521600, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x1, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700), 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) prctl$PR_SET_PDEATHSIG(0x1, 0xa) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000280)={0x0, "33735aeb4accf5ff65bbb376c2a96829298c381486a37a03d4574ce0a7293060", 0x820, 0x81, 0x100000001, 0x0, 0x5}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000001c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xfe18) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x744792a069647e5f) 01:36:23 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x300}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:23 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x500}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:23 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:23 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x100000000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000b00)={0x0, @sdr}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x2ac, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f00000002c0)) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0xfb, 0x0, 0x0, 0x0, 0xfffffffffffffe13}}], 0x400000000000678, 0x100000010102, 0x0) 01:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x600}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1056.420999] Unknown ioctl 4701 01:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x900}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xa00}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1057.115551] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1057.125266] netlink: 'syz-executor2': attribute type 10 has an invalid length. 01:36:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xb00}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:24 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="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", 0x1000, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'vboxnet0'}, 0x20, r1) r2 = getpgid(0x0) r3 = getpgid(0x0) tgkill(r2, r3, 0x16) 01:36:24 executing program 4: r0 = semget(0x3, 0x3, 0x8) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x8001, 0x0, 0x8]) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x2000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x81007702, &(0x7f0000000240)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x8, 0x100) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xf3715883ad8e605d}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x1000, 0x80000000, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'erspan0\x00'}) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8, 0x8, 0x1, 0x0, 0xffffffffffffffaa}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r4, 0xff, 0xc381}, &(0x7f00000001c0)=0xc) 01:36:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xe00}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:24 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:24 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xf00}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair(0x200017, 0x800, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0xfffffffffffffffc, &(0x7f0000000080)=0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setpipe(r3, 0x407, 0x1000) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x3000, 0x5000}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xffffffffffff8000, 0x9, 0x5, 0x2000000000, 0x6}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r4, 0x7, 0x10, 0x1, 0x7fff}, &(0x7f0000000240)=0x18) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@mss={0x2, 0x101}, @sack_perm, @sack_perm, @mss={0x2, 0x5}, @sack_perm, @timestamp], 0x6) [ 1057.667844] Unknown ioctl 4701 [ 1058.171502] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:36:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_setup(0xe4de, &(0x7f0000000000)=0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x80) io_submit(r3, 0x3, &(0x7f0000001340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xf, 0x100000001, r1, &(0x7f00000000c0)="97fb05f5a10b98ad6399d607eb9ff4f153aa573071347fb51fe4e3399bd1957fc1da510a6e3ba9d3b7b854253d076d5ac706eb0574dcded0b63ea9a0303f5b236805013b61fea0900d5c932de4c1cbe6481103e44d0b1fb56ed847e3222f8381f002c5b0369f3e44740a518ef833764dc0a33fb164f2a5c333736e6565c6b4a869a6125bba847c44cd70d1e9b4ce06668f63bd6a846b031d2f812d9596a4408e0a0c370f4a7d8f2fce245e714df33f5e515d52fc26631c7708ec83f98d27d3a472", 0xc1, 0x63, 0x0, 0x1, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xea68e8f1056a1cea, 0x8, r1, &(0x7f0000000300)="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", 0x1000, 0x6, 0x0, 0x0, r2}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x10000, r2, &(0x7f0000000240)="2bb9060adb4fe5922a7cb7ddbbfc5d941e1840bf05854f4085275e8549012be715e9e4fa9690d1204fdb59b2d5b985eb1d6b72c75efa3f94d11ad352775bfa", 0x3f, 0x101, 0x0, 0x0, r2}]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x7b, 0x0, [0xd90]}) 01:36:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x1100}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:25 executing program 4: futex(&(0x7f000000cffc)=0x2000000000000004, 0x109, 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x2) futex(&(0x7f0000000080), 0xa, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000000), 0x80000000000001) 01:36:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x1200}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:25 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x7ff) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) [ 1059.958137] device bridge_slave_1 left promiscuous mode [ 1059.963685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.007210] device bridge_slave_0 left promiscuous mode [ 1060.012748] bridge0: port 1(bridge_slave_0) entered disabled state 01:36:27 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) 01:36:27 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x5}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x1300}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:27 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xdddcffd, 0x80) clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = shmget(0x0, 0x1000, 0xa2, &(0x7f0000fff000/0x1000)=nil) r2 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x1ff, 0x501400) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x4205, r0) write$P9_RAUTH(r2, &(0x7f0000000480)={0x14, 0x67, 0x1, {0x2, 0x2, 0x8}}, 0x14) ptrace$poke(0xfffffffffffffdff, r0, &(0x7f0000000080), 0x6) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) write$P9_RREADLINK(r4, &(0x7f00000004c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1f, 0xffffffff, 0x9, 0x3, 0x3}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000001c0)={r5, 0x4}, 0x8) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000140)=0x3000) 01:36:27 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:27 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x408080, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x9562545) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180), 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0xf3b, &(0x7f0000000280), 0x8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x5, {0x7, 0x1b, 0x81, 0x400, 0x0, 0x4, 0x5, 0x4}}, 0x50) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x95q3z-\xf4\xf9Y\x99\xde\x91\xbe\x10\xee\x9e\xd5D\xfa\aBJ\xde\xe9\xcb\xc6\xa0q\xfb53\x1c\xe3\x9cZ\xd0\xcfsw\v\xd4$hG\xa1\x91NO\xb0\xaa\x9b\x01\x01\x00\x00\x00\x00\x00\x00\xd6;D3\x8e\x84\xadN\xc2\xf1\x1fo*\xdb\x8d\xc2\xfd\xb1\x821DoC\x14.\xbep\v\"1\xe8\xfc\xee\xd6\xb2*7<\x94\tgZ\xc8\xd0\xb503\x12?\xb3\x03}f$\x1a\xaf\xe0\xf8\x80\xe7\xa5\x1d\x1b\x03j\xde1\xd2TM%\x81\xfe\x86S\xd0\xcf\xf5Ci\xdf\x8c/\xce!\xdc\xb1\xcb\x96Vi\xf9\xa7SE\xac4y\xcdQ\xdc}j\x9bhq\xc6\xe3d\xc9\xc2r\xc8>\xd9\xe6f\xca%\xaa\xd2\xe7\xa2n=lb\xd0\xf8\xb9\x06\\\xfc\xa3\x11\xc0m\aD\xdb&Z\xa0\xe4\x86p|Q\xfd\x10\x8c\fl\xca\xe6\xffB\'J\xf9M0\xfc\xe8\x83o\xf9\xd0\v\xdd\x14D\x1b\xf9&\x99w\x04\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xb2\x01\xee\xfa\x16\xc4\xe2>D\x82\xad\xef\xa0\x81\xad\r=\xccn\xb3\n\x1e\xa2\xbbY\x9b\xb5\x1d7\x12\x89\xfd\xfe\x0e\xe3\xf5@\xf5\xf9\xe71/\x1e\xe1\xdb\xc4\x98\xf13\xb3\xbd\xfej?t\xa5\xdd\x85\xc1\xb05\x13\xf5\xc3F\v\x9e\x10\x0fc\x84\x1d\xce\xfb\x16\xe6\xccM\x8a\xfd\x16D\xa2\ay^\x18~\xa7ED\xdb7\xabh)\xee\x7f\xf6,=\xb3\x02\x1b\x03\xa1|:-\x8c\x94dx\x80\xce^\xfd\x8b\xe8\x93\x00Vp\x99\x8bX:\xc2\xed\xae\xcfh\xb7\xdbq\xcb\n\x9d\x0eL\xa8*\xcecu??O\xed') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgr\x00', 0x200002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$FS_IOC_SETFLAGS(r2, 0xc0c0583b, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000580)={0x0, 0x0}) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)) creat(&(0x7f0000000140)='./file0\x00', 0x0) [ 1060.315844] Unknown ioctl 4701 01:36:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x3202}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x8, 0x802) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @loopback}, &(0x7f0000000080)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000580)=[@ptr={0x70742a85, 0x0, 0x0, 0x2}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x4100, 0x11c) [ 1060.446278] protocol 88fb is buggy, dev hsr_slave_0 [ 1060.451453] protocol 88fb is buggy, dev hsr_slave_1 01:36:27 executing program 5: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20040, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000400)={0x1f, 0x8, 0x2, 0xffff, 0x0}, &(0x7f0000000440)=0x10) sendmmsg$inet_sctp(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x8, @mcast1, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="c93a188e72a69c0c52eaa3c65717e0c98328006547f35a808540354403967dcc2c5381c6c1f0b4428ab41ed6f082073c34178f1d1fc83a448bd765fb82f8653a42aed02002bd1a8a955b5516c935ac2ef2851cff8c3ce8a2a95015a5fdcc49ae56d45065ce18257f632031837adc8a3b29e68cc25af944dcb094cc692432321d74e201d80f9d3efb5a25e3b8c96df96b7138dd2afda85c22fe9208d18880c53e15f6aefd75348313710c50d4202669e98de11f27f3774fc6aa28158af2ebbc46ee70b144c008555746b9dfc94158d47a94d3e54fb06f69e0f2b925eac6b0483e52c800f33b40", 0xe6}, {&(0x7f00000000c0)="ccb0eb47bfd7d4e389dd844173b09ae70e5ed58917261ab77cc5886d9f24a2dbab0ec24820f4f99cb10fef7b5e0616e2b3021ae62aad3042df33d61f1b435be09db46267922038dc7394c1e88dfc04e2b0b6cc7f19221a55e3", 0x59}], 0x2, &(0x7f0000000480)=[@prinfo={0x18, 0x84, 0x5, {0xeb32f175778fa4c4, 0x101}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8208, 0x0, 0x1, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x1, 0x6, 0x6, r3}}, @init={0x18, 0x84, 0x0, {0x8b, 0x400, 0x55b2, 0x7}}, @init={0x18, 0x84, 0x0, {0x5, 0x1, 0xff}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0xc0}], 0x1, 0x20000010) r4 = accept4(r0, 0x0, &(0x7f0000000080)=0xffffffffffffffeb, 0x800) recvmmsg(r4, &(0x7f0000001a80)=[{{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000000980)=[{&(0x7f0000002fc0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/114, 0x72}], 0x1}}], 0x2, 0x0, 0x0) 01:36:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x3f00}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1060.577008] binder: 12272:12275 got transaction with too large buffer [ 1060.583845] binder: 12272:12275 transaction failed 29201/-22, size 40-8 line 3192 01:36:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x6000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000000180), 0x404, 0x0) connect$inet(r0, &(0x7f0000000d80)={0x2, 0x4e20, @broadcast}, 0x10) get_mempolicy(0x0, &(0x7f0000000040), 0xfff, &(0x7f000041e000/0x1000)=nil, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000002c0)) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x20000800, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x3) close(r1) sendmmsg(r1, &(0x7f0000000d00)=[{{&(0x7f0000000100)=@rc={0x1f, {0x9, 0x3f, 0xffffffffffffff7f, 0x7ff, 0x7fff}, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="d29c57651d20b69902af94a1a9bb3eb287ee42202b647f17e56419820cb76643d08e1eb1c6ba4989916f391504760e095a7083a345a05c015c2703aa2e6212de141f9ba5e8f9863b66186c38a823f4b0c507d0a4579028ac9ba7d7716499186e02631e59261224876f1436f13b1c05bd825e0be31a00d9c2978dfda6784b73194017a3f4fa7a3ed03b8eab44c506b3aca7f4f65fb2fa9c48af89901c2cbef906de738086595d0b470c647b3a2b7ea927a176d7114cb158be3d6eeba12cf906f226033a222e0de08352ea0845892aead1a41076ef1c3102", 0xd7}, {&(0x7f00000003c0)="8bd49d092bffe22385c7d4e400707253cb7ebf2133d125e0100a54725c6978fb0bf47b288ce53e2dad9cfc7ca10b6ce85462d24bf40061af2198d9ceba9da860851db8d0d5f62e4d76afc050075ac3f32762a201b002f4df7e9910cdd02c3d9389203fb1a751e98d46a3be89fc3d9f108a6a3d4e9bef51a9e18332e5fe69ec1ce4", 0x81}, {&(0x7f0000000480)="3d4a941b339308e2873a212758bff1de2f8dfd40843b965dbaf0fa2c01cc36c14d75dbdeb051bf971ccc813e24e2ec2b0b11ee230fe838ab2c396683b5c7fb41b52b5f2c834c42d3bede249ef5c4f958118c0435db79204b70ca68346aea10f67beb33f854ee4865f8cf16e61bed65ee65cd2f4ce58fe29b283dab1cd383be0ceb5305a9c92cafb44dbe85647b17af2e059da859dea4d6c1cc8133e31150bc748acc7e39846540131dc38391a63fbc5858e121eb2837690dc23b3f924a1563170ee64f5c5404d48c12279e", 0xcb}, {&(0x7f0000000580)="03c942473736190559ea097c5c005a741bdf52acc44ec38714878ca54d6b5e696ed228d40a494a9dfa712933a5ba23ff8b59256e8ca90efea4e87f001980be8ea8917dc538d63b5ff888fa6c9f3ba965765721001b1bf24af5e0e64b5f3442054345caa7e55e81f5f11c9878f385e95245ff0920308ac8f8e1bfe69251d3bc5deaf0f27b3230d1dbdc6a7f5985fc10595e12c714f0238f018c44d3e0de9f25a60615b3fd493fdb6fee22288f5c138c9438d908a6e5d340e00a206c64cb5660998a72b99248fc087c264cfcfd471680a7d6", 0xd1}], 0x4, &(0x7f0000000680)=[{0x30, 0x1, 0x3000000000, "3cce669b2b42554bd11698d15a316f32d239c24a7fe45c0e57454a9114"}, {0x48, 0x11f, 0x3, "d6eb7fa82a5fafda2ec9246abdfdede95a5b7ccf277e19954fb0778cd45818fa71f104a1585fda92fab76702b7e647199c7c961bf91d"}, {0xf8, 0x104, 0x8, "cc5e8528619e9e775f7d87ac13af86fbafffe3be5fc79d4c66275a15e09ab50218c60c24dfe85582b7ea96b4352b02407eed5938897eef26a0e0ee5bc9120dfbdddf29d2af36bf0e28283a879666c3dabe63a5a181debb01378e9fc555745e265f4634ce0ce06c5c67548a8edcfa909b060beeaace80f679bf44eaf6caf4bb798b3659d3e7811e5cdb3f9d19bfcc484a50e52a209b3cdb7affe835391aeca2ff8373ac720d50992d324951cf23974494360f67e8414d5d98c19f907acccaebf0f36d873c31f9cb96e12ba1ee5cc1f3fc25839570e423420fdee0cb717d4962d4afb5db8e60e177"}, {0x88, 0x118, 0x20, "9648981b33ebdbd9522aee4f55dbd7bc28660e800d5a67a9e372b11674df8524b37470a140a1c5bfe22cb4e0e6b97b3fbeb93bb92bb9d31e63a321ca8aa46c598f3e52c354e0bea0fd80c9fdb1a821fff2ad7d7b80c64e7a04d811b1e35ce043536ec5679fa6ee725dd2c5bc62b9cf45dc2b433259"}, {0xa8, 0x10a, 0xfff, "024fe6afa132fc70ed5eef82b79f84e22fb8d33b78c9651b8092ec9c3971c9aba6a3de084ccdbacf4991a724b5d03eb01cab95398cc7fc255ca9ee2e4357538b1133f7a043e6479b0fff0633b65f9ec4fccee19671c945754d0caaf51160d15392919256089abeeaea643e19482180dc8764ca18b813c4dc9a5d8164b6b98ec23d7d1d46a0294a5f84fce25030fd7266e5c81a"}, {0x110, 0x11, 0x80, "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"}, {0x68, 0xff, 0xf14, "75a1212222f6d0961c7970e56920632c086b82d043519122012b9b7c4479deb4c95415d0962cdf7760f0250be2712c55e73270f13f554b0a4bcf99e59aec47331cbe71ea67a30790b023628431dfd95d34"}, {0xd8, 0x11, 0x3, "abe6352dd6c4b42f378536e84833a4632dd2d2127760d47b866cf9afce1a257e59d8e4b265ec4f179110c9bbde9a5e3b6ae129073e4072275da698e7a7ce52ae20fab223fcc9cd1f58a04debd20a062656e86d985810d693070b27af512d3191f13e6281852252acc2863825182ebf6a407641a256a4c0a7f616da5db3b93a3b4f75fd0e5e57645e3d235ec8af9d6c92fd13a988b76ba15c2bee3ccf0a77ef37d78e086efdfb4679fe5ce18195d8d2a6b6e44544341662d67374b4b389269eb6375acfce5e7d"}], 0x4f0}, 0x40}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000300)="17a1fb436a82e2d80e134a25188a3b858fdf547d86e5a4d7d607701de9c93a591bfb6e7bcd02af6eef67de565ea730c1f461c2c14a931dc5dd4bd99d62318cdb63154874fef56583ec73bb1a3c80958ec58fce929b4f24941fe8c8b3d832c51a31c97947867d55ce09d95ea7963988d70970c71d51dbac9f", 0x78}, {&(0x7f0000000b80)="ccb47900211c96f17185129787adc7637d64ba94c53e03e22f2ae9fd79887f81efc7697823da521ff4926484d0e757048c4a268f6fa3cf30212123ec6ff9410fbaebc190a0ac0b7ac4e0bfcffdb236757c65991e4ead655804e019818c5aba5f696cbdacfa23a8090a3aeb826ca1d4c937b42d67c54e4dca6a43cd0a2c4965a1f7bb446ab511027dec7ce86c0878bb87e7abc862cf4153ff011bcdad7febe5bf9bb50a84a97b586f6edc1eca588b19684d8e58c171e33c4ce41cee24d165bffdfad0cf8c9ae1588ecb2ccd6460", 0xcd}], 0x2, &(0x7f0000000cc0)=[{0x28, 0x102, 0x6, "c814c6fbb0cbea1c0a628b77fff1e4b6c5"}], 0x28}, 0xfffffffffffffffa}], 0x2, 0x20008010) getpeername(0xffffffffffffffff, 0x0, 0x0) exit(0x2) 01:36:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xf000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1061.317466] binder_alloc: binder_alloc_mmap_handler: 12272 20ffc000-20ffe000 already mapped failed -16 [ 1061.335731] binder: BINDER_SET_CONTEXT_MGR already set [ 1061.343953] binder: 12272:12275 ioctl 40046207 0 returned -16 [ 1061.382251] binder_alloc: 12272: binder_alloc_buf, no vma [ 1061.394508] binder: 12272:12278 transaction failed 29189/-3, size 40-8 line 3035 [ 1061.404370] binder: undelivered TRANSACTION_ERROR: 29201 [ 1061.411403] binder: undelivered TRANSACTION_ERROR: 29189 [ 1064.769283] bond5 (unregistering): Released all slaves [ 1064.786937] bond4 (unregistering): Released all slaves [ 1064.798857] bond3 (unregistering): Released all slaves [ 1064.812447] bond2 (unregistering): Released all slaves [ 1064.825391] bond1 (unregistering): Released all slaves [ 1064.899786] device hsr_slave_1 left promiscuous mode [ 1064.942352] device hsr_slave_0 left promiscuous mode [ 1065.002633] team0 (unregistering): Port device team_slave_1 removed [ 1065.014105] team0 (unregistering): Port device team_slave_0 removed [ 1065.025367] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1065.090890] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1065.196615] bond0 (unregistering): Released all slaves 01:36:32 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x6}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x34000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000020c0), 0xfffffd41) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ppoll(&(0x7f0000000100)=[{r2, 0x400}, {r2, 0x600}, {r0, 0x1000}], 0x3, &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={0x3f}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x15) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, 0x2}, 0x50) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) [ 1065.311648] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1065.321813] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 1065.493364] netlink: 'syz-executor1': attribute type 10 has an invalid length. 01:36:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:32 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0xc, @remote, 0x4e23, 0x3, 'lblcr\x00', 0x10, 0x7, 0x18}, 0x2c) syz_emit_ethernet(0x300600, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x8, 0x88, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 01:36:32 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x4005, 0xffa, 0xf7, 0x1}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x400c000) ioctl$void(r0, 0xc0045c79) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0xfffffffffffffe00) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000240)=0x65b2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x56, 0x0, 0x1, "6305abd068be352ab4083ccbdc9d56aa", "4bf9aeab93ecbb1c6897a3d84546653afdbf493daf787de13ff5ecd3a7e31d70fa63001cee7c8a1e74772feadda775eb5205546a4e57764a235e4f6663dbb03169"}, 0x56, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20010a0}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffff800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf1c9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40669db0}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x68a6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000580)='trusted.overlay.redirect\x00', &(0x7f00000005c0)='./file0\x00', 0x8, 0x1) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000600)=""/215) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000700)={0x2, @pix_mp={0x100, 0x9, 0x47564f58, 0x9, 0x5, [{0x8, 0x1ff}, {0x6, 0x5}, {0x5, 0x8000}, {0x4, 0x4}, {0x1b32, 0x5d}, {0x9, 0x7}, {0x4, 0x7}, {0x2aca5eb8, 0x100}], 0x3, 0x6, 0x4, 0x3, 0x6}}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000800)={0x0, 0x5, 0x28, "e11b147ad39d9c44fb300a6bfe0e45f45e231d085acbf473adfe21c758460618e247e333caae8b80c9e59087345aa2e98018108fbb2e2924d7e8a71e", 0x26, "5211c2626f6a6e3eecf6cac24beb90025109188117ff66dda74f76bb34ad8b620c65dad8fd81190e501b4f8e54d41ad4cfb920f4579cbaf8a9376c9f", 0x8}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000008c0)={0x7, "6a02a8f249617fa25950a8389d5fc862354d8591d74c4ebfb6e4be83a1b4159e", 0x21, 0xffff, 0x400, 0x4, 0x5}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000940)={0x5, "69bf704a30844ca86a19cbea1ed3b42b4395d5531e85407043952e065a6dc06b", 0x3, 0x0, 0x8001, 0x9, 0x1, 0x2, 0x6160000000000000, 0x8000}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000009c0)=0x5, 0x4) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000a00)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7f) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001240), 0x10) syz_open_dev$adsp(&(0x7f0000001280)='/dev/adsp#\x00', 0x8, 0x4480c0) sched_setparam(r2, &(0x7f00000012c0)=0xb68) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000001300)) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x108, r4, 0x206, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400000000000000}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000001580)=0x1) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000015c0)) 01:36:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x400300}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:32 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x7}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1065.727779] Unknown ioctl -2147202747 01:36:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705"], 0x3}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:33 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20400001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) link(0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 1065.787373] Unknown ioctl -1073456007 [ 1065.797147] Unknown ioctl 1074292226 01:36:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0xf0ffff}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1065.837742] Unknown ioctl -2147204313 [ 1065.872108] Unknown ioctl 4701 [ 1065.875914] Unknown ioctl 35076 [ 1065.884403] Unknown ioctl -2143271630 [ 1065.915053] Unknown ioctl -1060088316 [ 1065.924922] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1065.946539] Unknown ioctl 1082938942 [ 1065.957392] Unknown ioctl -1069263306 [ 1065.962492] Unknown ioctl -1068214755 [ 1065.988487] Unknown ioctl -2011670964 [ 1066.006643] Unknown ioctl 19465 [ 1066.018100] Unknown ioctl -2147191718 [ 1066.030187] Unknown ioctl 21761 01:36:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x1000000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1066.045856] Unknown ioctl 8827 [ 1066.080527] Unknown ioctl 35111 [ 1066.098359] Unknown ioctl -2147202747 [ 1066.123318] Unknown ioctl -1073456007 [ 1066.137429] Unknown ioctl 1074292226 [ 1066.152818] Unknown ioctl -2147204313 [ 1066.177336] Unknown ioctl 35076 01:36:33 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') [ 1066.202330] Unknown ioctl -2143271630 [ 1066.240612] Unknown ioctl -1060088316 [ 1066.291315] Unknown ioctl 1082938942 [ 1066.291375] Unknown ioctl -1069263306 01:36:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x2000000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1066.336762] Unknown ioctl -2011670964 [ 1066.340873] Unknown ioctl -1068214755 [ 1066.375754] Unknown ioctl 19465 01:36:33 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 01:36:33 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000001c0)={r1, 0x2}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x40000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x800, r4}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}, @gre}}}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) [ 1066.422350] Unknown ioctl -2147191718 [ 1066.427486] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 1066.486440] Unknown ioctl 21761 [ 1066.536628] Unknown ioctl 8827 [ 1066.548655] binder: BINDER_SET_CONTEXT_MGR already set 01:36:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x3000000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1066.607023] binder: 12383:12390 ioctl c018620c 2000dfd0 returned -1 [ 1066.614777] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 1066.652398] binder: 12383:12385 ioctl 40046207 0 returned -16 01:36:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000200)=""/89) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae68, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) r6 = gettid() getpriority(0x1, r6) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r4) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) sendto$isdn(r3, &(0x7f0000000280)={0x8, 0x3, "000d8897c5b586381e46326dae75532da2fe2ded6a570f08b24f08323e312458318f1944bf9acffe0c90a614dd37a1bb46ae6df24dc82d5b08d446f2150dc21cdad66b297a1cd7137be06699788185ba5be69bd9d96c0f9f1f86b0a656de9b010bbf13e608b7ed14dc78ff1f5be4a94f83d4ffe9bcadca8dd716dc2b7b48db9e7777444007"}, 0x8d, 0x40000, &(0x7f00000000c0)={0x22, 0x6, 0x5, 0x1, 0x3}, 0x6) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) 01:36:34 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0xffffffff80000001, @ipv4={[], [], @broadcast}, 0x3}}, 0x6426, 0xff, 0xc31, 0x1ff, 0x20}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r2, 0x2, 0x20}, &(0x7f00000002c0)=0xc) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x7fff9, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000]}) getitimer(0x2, &(0x7f00000000c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) getgroups(0x4, &(0x7f00000005c0)=[0xee01, 0x0, 0x0, 0x0]) r9 = getgid() getgroups(0x6, &(0x7f0000000600)=[0xee01, 0x0, 0xee01, 0xee00, 0x0, 0xee01]) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) splice(r0, &(0x7f0000000340)=0x3f, r3, &(0x7f00000007c0), 0xd7d1, 0x5) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000780)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x4}, [{0x2, 0x3, r4}, {0x2, 0x7, r5}, {0x2, 0x4, r6}, {0x2, 0x1, r7}], {0x4, 0x2}, [{0x8, 0x6, r8}, {0x8, 0x7, r9}, {0x8, 0x0, r10}, {0x8, 0x4, r11}], {0x10, 0x1}, {0x20, 0x4}}, 0x64, 0x1) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000140)) 01:36:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x4, 0x0, 'client1\x00', 0x5, "a62bf02f53d094bc", "b166e1ca0c65c0f883ca6b6158d2b1dc2a8af99b976e38a6efd0bf44414176f0", 0x4e, 0x1}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x3, 0x4, 0x9, 0x7e00, 0x5, 0x890}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={0x0, 0xffffff7f00000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d0c0000000000000000010000000000000003000000004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)=0x10000) 01:36:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0x7) r1 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008002d000000f4ff07001b0000000000000072ea9fae948b9788c82ec58dbf51f57c714233a9fb2eef53f20a179d16110b8a3efdb8760352d3ea4c2d2acaad62d5b7638161c7cf02b31705"], 0x3}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2, 0x3}}, 0x2e) accept4$alg(r5, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x4000000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:34 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x103e, 0x0) execve(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) socketpair(0xb, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = inotify_init1(0x0) r2 = getpid() fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x4, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4000000027e, 0x0) 01:36:34 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0xa}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @dev}, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x16, 0x0, &(0x7f0000000140)) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 1067.152905] Unknown ioctl 4701 01:36:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x5000000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 01:36:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt_acct\x00') ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x5c, 0x0, &(0x7f0000000180)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=[0x28, 0x30]}}, @clear_death={0x400c630f, 0x3, 0x1}, @register_looper], 0xd9, 0x0, &(0x7f0000000300)="03a02736c53f56d2df2fa8f1e1313636cee7672354f517e16b714c17d5ac5c603a97e4279198cc5378dfb81cb76904c97b34b82f7f15b8961ff68d710acc1cf692c19fcde0a9e92ef95764dae48b87420dca3543e0f6e849b427ad6d7e986e0ea7f2a296a7829a3fc0317d58333a502bdea9dfbb3c8e36de85195869c4611e489381f4c6023d33fc02661f2f052e3f5c9a0f7572d37d343dacff6bc3247e143ffaa4b4974994c8c66657670ef7750b1649227f628da9172fe63dcf57377204e088e0fbbac4bedf362b5f291fa1e3bff633b5271b216ea9a16f"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:36:34 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x7) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x800) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000053c000/0x2000)=nil, 0x2000) getsockname(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0xc}, 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, &(0x7f0000000240)) accept4$alg(r3, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000240)='./control/file0\x00') 01:36:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x1a6, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {0x6000000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 1068.942503] WARNING: CPU: 0 PID: 3106 at net/xfrm/xfrm_policy.c:1066 xfrm_policy_inexact_gc_tree+0x233/0x290 [ 1068.952653] Kernel panic - not syncing: panic_on_warn set ... [ 1068.958523] CPU: 0 PID: 3106 Comm: kworker/u4:4 Not tainted 5.0.0-rc3+ #43 [ 1068.965530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.974981] Workqueue: netns cleanup_net [ 1068.979042] Call Trace: [ 1068.981615] dump_stack+0x1db/0x2d0 [ 1068.985243] ? dump_stack_print_info.cold+0x20/0x20 [ 1068.990264] ? xfrm_policy_inexact_gc_tree+0x140/0x290 [ 1068.995531] panic+0x2cb/0x65c [ 1068.998725] ? add_taint.cold+0x16/0x16 [ 1069.002703] ? xfrm_policy_inexact_gc_tree+0x233/0x290 [ 1069.007984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1069.013503] ? __probe_kernel_read+0x1f4/0x250 [ 1069.018076] ? __warn.cold+0x5/0x48 [ 1069.021719] ? __warn+0xe8/0x1d0 [ 1069.025076] ? xfrm_policy_inexact_gc_tree+0x233/0x290 [ 1069.030339] __warn.cold+0x20/0x48 [ 1069.033865] ? xfrm_policy_inexact_gc_tree+0x233/0x290 [ 1069.039136] report_bug+0x263/0x2b0 [ 1069.042859] do_error_trap+0x11b/0x200 [ 1069.046758] do_invalid_op+0x37/0x50 [ 1069.050454] ? xfrm_policy_inexact_gc_tree+0x233/0x290 [ 1069.055716] invalid_op+0x14/0x20 [ 1069.059156] RIP: 0010:xfrm_policy_inexact_gc_tree+0x233/0x290 [ 1069.065023] Code: 81 c4 a0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f1 6c c3 fa 31 ff 44 89 fe e8 27 6e c3 fa 45 84 ff 74 99 e8 dd 6c c3 fa <0f> 0b eb 90 48 8d 7d 98 48 89 b5 50 ff ff ff e8 59 6a 07 fb 48 8b [ 1069.083903] RSP: 0018:ffff88809d1bf448 EFLAGS: 00010293 [ 1069.089249] RAX: ffff88809d1b0100 RBX: 0000000000000000 RCX: ffffffff86be93e9 [ 1069.096518] RDX: 0000000000000000 RSI: ffffffff86be93f3 RDI: 0000000000000001 [ 1069.103771] RBP: ffff88809d1bf510 R08: ffff88809d1b0100 R09: ffff88809d1b0a40 [ 1069.111021] R10: ffff88809d1b0a20 R11: 0000000000000001 R12: ffff88809cdc6680 [ 1069.118273] R13: dffffc0000000000 R14: ffffed1013a37e95 R15: 0000000000000001 [ 1069.125539] ? xfrm_policy_inexact_gc_tree+0x229/0x290 [ 1069.130817] ? xfrm_policy_inexact_gc_tree+0x233/0x290 [ 1069.136081] ? xfrm_policy_inexact_gc_tree+0x233/0x290 [ 1069.141341] ? xfrm_policy_hash_rebuild+0x70/0x70 [ 1069.146182] ? process_one_work+0xd0c/0x1ce0 [ 1069.150575] ? worker_thread+0x143/0x14a0 [ 1069.154704] ? kthread+0x357/0x430 [ 1069.158252] ? ret_from_fork+0x3a/0x50 [ 1069.162130] ? do_raw_spin_unlock+0xa0/0x330 [ 1069.166539] __xfrm_policy_inexact_prune_bin+0x134/0xa60 [ 1069.171972] ? xfrm_policy_fini+0x463/0x640 [ 1069.176280] ? __rhashtable_remove_fast_one.constprop.0+0xcf0/0xcf0 [ 1069.182668] ? mark_held_locks+0xb1/0x100 [ 1069.186810] ? trace_hardirqs_on_caller+0x310/0x310 [ 1069.191810] ? lock_acquire+0x1db/0x570 [ 1069.195766] ? xfrm_policy_fini+0x3f0/0x640 [ 1069.200074] ? kasan_check_read+0x11/0x20 [ 1069.204223] ? do_raw_spin_lock+0x156/0x360 [ 1069.208535] ? lock_release+0xc40/0xc40 [ 1069.212497] ? rwlock_bug.part.0+0x90/0x90 [ 1069.216717] ? __kasan_slab_free+0x119/0x150 [ 1069.221113] ? xfrm_hash_free+0xc3/0xe0 [ 1069.225075] xfrm_policy_fini+0x463/0x640 [ 1069.229233] ? xfrm_policy_flush+0x460/0x460 [ 1069.233637] ? trace_hardirqs_off_caller+0x300/0x300 [ 1069.238729] ? __kasan_slab_free+0x119/0x150 [ 1069.243137] ? xfrm_policy_fini+0x640/0x640 [ 1069.247454] xfrm_net_exit+0x1d/0x70 [ 1069.251155] ops_exit_list.isra.0+0xb0/0x160 [ 1069.255551] cleanup_net+0x51d/0xb10 [ 1069.259248] ? find_held_lock+0x35/0x120 [ 1069.263305] ? netns_install+0x1d0/0x1d0 [ 1069.267354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1069.272892] ? check_preemption_disabled+0x48/0x290 [ 1069.277898] ? __lock_is_held+0xb6/0x140 [ 1069.281959] process_one_work+0xd0c/0x1ce0 [ 1069.286179] ? preempt_notifier_register+0x200/0x200 [ 1069.291266] ? __switch_to_asm+0x34/0x70 [ 1069.295318] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 1069.299976] ? __schedule+0x89f/0x1e60 [ 1069.303853] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1069.308859] ? worker_thread+0x3b7/0x14a0 [ 1069.312992] ? find_held_lock+0x35/0x120 [ 1069.317041] ? lock_acquire+0x1db/0x570 [ 1069.321003] ? worker_thread+0x3cd/0x14a0 [ 1069.325138] ? kasan_check_read+0x11/0x20 [ 1069.329274] ? do_raw_spin_lock+0x156/0x360 [ 1069.333584] ? lock_release+0xc40/0xc40 [ 1069.337548] ? rwlock_bug.part.0+0x90/0x90 [ 1069.341765] ? trace_hardirqs_on_caller+0x310/0x310 [ 1069.346776] worker_thread+0x143/0x14a0 [ 1069.350742] ? process_one_work+0x1ce0/0x1ce0 [ 1069.355225] ? __kthread_parkme+0xc3/0x1b0 [ 1069.359445] ? lock_acquire+0x1db/0x570 [ 1069.363404] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1069.368494] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1069.373061] ? trace_hardirqs_on+0xbd/0x310 [ 1069.377366] ? __kthread_parkme+0xc3/0x1b0 [ 1069.381586] ? trace_hardirqs_off_caller+0x300/0x300 [ 1069.386671] ? do_raw_spin_trylock+0x270/0x270 [ 1069.391235] ? schedule+0x108/0x350 [ 1069.394859] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1069.399957] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1069.405478] ? __kthread_parkme+0xfb/0x1b0 [ 1069.409699] kthread+0x357/0x430 [ 1069.413052] ? process_one_work+0x1ce0/0x1ce0 [ 1069.417528] ? kthread_stop+0x920/0x920 [ 1069.421493] ret_from_fork+0x3a/0x50 [ 1069.426465] Kernel Offset: disabled [ 1069.430196] Rebooting in 86400 seconds..