f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) [ 437.289308][ C1] net_ratelimit: 24 callbacks suppressed [ 437.289317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 437.300903][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:16:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10006) 00:16:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 00:16:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="00f0ff7f21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:21 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000003d0001000000000005000000000000009500001200000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x865, &(0x7f00000001c0)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 00:16:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10007) 00:16:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="effdffff21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10008) 00:16:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x100000000, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x0, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000009000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000440)="3105de788bb83770aa3b15f5") ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 438.009317][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.015233][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 438.021197][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.027167][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10009) 00:16:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pause() r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 438.089322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.095181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 438.101122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.106934][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x0, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000000f000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000a) 00:16:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x0, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80084502, 0x0) 00:16:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e02000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, 0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000b) 00:16:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e03000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x2, 0x91, 0x0]}, &(0x7f0000000100)=0xa) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgid(0x0) inotify_init1(0x0) sendmmsg$unix(r0, &(0x7f00000024c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x58}], 0x1, 0x0) 00:16:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, 0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000c) 00:16:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e04000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, 0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000d) 00:16:23 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 00:16:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e05000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = syz_open_dev$cec(&(0x7f0000000900)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000940)='lp\x00', 0x3) r3 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r4, 0x20000081, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYBLOB="9e000000662e3088852c00218ea5d7656c6d466b4ba12fd76af08b9096cec387f763"], &(0x7f0000000240)=0x26) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)=0x0) r8 = geteuid() getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000800)=0x0) getresuid(&(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)=0x0) r12 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0x0, r1, 0x0, 0xe, &(0x7f0000000980)='.beth1selinux\x00'}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) r16 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) r18 = getegid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000d40)=0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0}, &(0x7f0000000dc0)=0xc) r21 = getgid() ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000e00)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0}, &(0x7f0000000e80)=0xc) getresgid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) r25 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r26 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001400)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000001500)=0xe8) getresgid(&(0x7f0000001540)=0x0, &(0x7f0000001580), &(0x7f00000015c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001600)=0x0) r33 = geteuid() r34 = getegid() sendmmsg$unix(r1, &(0x7f0000001700)=[{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)="7ba9bfbe39f9ac18982c5392715238ff31c1a2111b970a4970dd9b738badf9b2a64ad497e9c65b2db76f2fc558353379f338914efeacdd61e1c4ba1ce9a7c237beea2a6f6989c6264d140ea29043e02b778a8705d75e221f84083a707d69db14645509b10ec1e8467bf9bd40249ce1ef570d54d5cbbd5e081ef0d38bfb32355d51d09064d6889bb6d1aae7ac0d72392d48041fbc73ad3ae9cce2316b68920ba12388d9df64e5d86153095349a6fb525958cb6a0a9809792258101d38", 0xbc}], 0x1, &(0x7f0000000540)=[@rights={{0x38, 0x1, 0x1, [r5, r0, r0, r3, r5, r1, r0, r0, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x58}, {&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000006c0)="dde2bbba8a64d5517a53d9f9073aea94941d76117507c923a685953573f12189b08ddf4775f76d9ef61ba228cab5e9e9629be0c0f51c4a4fa44091ed09c632098a47ad11d7efffefa543154f1e716db76b8c515544f8b1e388142326d91e8cb279a90acc3b9971d1aa1e24b0c6b1bfb25e33a494db3a5bf71b5871e3c1f155eedf5ab989da55671cacfdce5bef5488accaa14bba3752a3a7746f00c7758bac79d8f37732983b208fa6227a9ec2b35236af348b72605e6153bca250c33e337a3adfd615c9a3b1099b04ddd17a233146ae7792f07322985fe8ee4601522f16b3085dc28d17bf87904032453de31513d49f3540d21ae9fec48d19c2d12ae9", 0xfd}, {&(0x7f00000005c0)}], 0x2, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x28, 0x1, 0x1, [r3, r2, r2, r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r24}}}, @rights={{0x38, 0x1, 0x1, [r5, r0, r5, r5, r1, r2, r2, r5, r2, r3]}}, @rights={{0x24, 0x1, 0x1, [r2, r5, r1, r5, r25]}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}], 0x168, 0x4040}, {&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f00000012c0)="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", 0xff}], 0x1, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r5, r1, r1, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r0, r1, r5, r0, r1, r0, r5, r5]}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r32, r33, r34}}}], 0xb8, 0x40}], 0x3, 0xc0) pipe(&(0x7f0000000280)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x80, 0x0) 00:16:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xfdef}], 0x1) accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x0, 0x80000) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 00:16:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e06000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000e) 00:16:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 00:16:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000f) 00:16:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e07000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000000c0)={0x5, 0x2, {0x0, 0x1, 0x40, 0x1, 0xe6}}) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 00:16:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10010) 00:16:24 executing program 1: 00:16:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0a000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x20, 0x7f}, {0xff, 0x300000000000}], r2}, 0x18, 0x1) close(r1) r3 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000380)={0x3, 0x4, 0x10000, 0xf27, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r4, 0xd5, "618361084eabb899b749cfacf5d11e70a8b60299a6f835601fc9e19da8e270d5c22b973fae8e8dbb80dc731481a578e40faeca81300989bb0fc37d440902ba5227b08da72008d8db6885894079d2e0bd3a8e3fe5d0599cd76d0456483ef6de16613ea6c721ecdbc450d7bc5ea20033a23fc9d9aebf23511c5755f0dfa74afb7b8d9f4ec0098358386b0a1e6562e96ab5fd25d9e85ae6bcf4dbbc40b0658ff8a24ca7c6e424201e50a06e7c8ef882944e8526a8852572943340d84d4dbdf6bc888b28a12bc7e061d24631433e989c2f1823417a611e"}, &(0x7f0000000540)=0xdd) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) r6 = dup3(r0, r3, 0x80000) ioctl$VIDIOC_G_INPUT(r6, 0x80045626, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000340)={0x8}, 0x4) creat(&(0x7f0000000500)='./file0\x00', 0x81) io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x10) 00:16:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 00:16:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10300) 00:16:24 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 00:16:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0e000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 00:16:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10500) 00:16:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffe, 0x18b800) getpeername$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003b00)=0x14) connect$packet(r2, &(0x7f0000003b40)={0x11, 0x1f, r3, 0x1, 0x188, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ed2915f8741bc6226e04da7b591f0b0df907313648823e635a4ac9c4696d2912eb6d981c46d146b0c6c1deb3d7906a7e1da733775ab0c28038ee33a411edb07e363b080882ccc854a2b8ac55757ab66cd3e0353e4c13a50be70a726ad8", @ANYRES16=r4, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0f000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10600) 00:16:25 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x10000000000006, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 00:16:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 00:16:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e48000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10700) 00:16:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e4c000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 00:16:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$kcm(0x10, 0x10000000000003, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000018008109e00f80ecdb4cb92e0a00002c000cd307e8bd6efb1200697ba00cba82bd81c933de71da06000e", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 00:16:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10900) 00:16:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e60000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 00:16:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000100)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x0, {0x2, 0x4e23, @broadcast}}, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) write$P9_RLINK(r3, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) 00:16:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 441.554455][T20121] IPv6: NLM_F_REPLACE set, but no existing node found! 00:16:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10a00) 00:16:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e68000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 00:16:26 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:16:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10b00) 00:16:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101100, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYRES16=r2]) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e6c000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 00:16:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10c00) 00:16:26 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) ppoll(&(0x7f00000001c0), 0x374, 0x0, &(0x7f0000000180), 0x0) 00:16:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e74000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) fcntl$addseals(r0, 0x409, 0x8) 00:16:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10d00) 00:16:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101000, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:26 executing program 4: 00:16:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e7a000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10e00) 00:16:26 executing program 4: 00:16:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:27 executing program 1: 00:16:27 executing program 2: r0 = socket$inet6(0xa, 0x4001000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000002040)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000680)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@hopopts={{0x18}}, @hopopts={{0x18}}], 0x30}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 00:16:27 executing program 4: 00:16:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2ef0000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10f00) 00:16:27 executing program 4: 00:16:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:27 executing program 1: 00:16:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x13f00) 00:16:27 executing program 4: 00:16:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2ef7020021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:27 executing program 1: 00:16:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) pipe2(&(0x7f0000000140), 0x4000) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x3, @mcast1, 0x1ff}, {0xa, 0x4e21, 0x1, @mcast1, 0xffffffffffffffff}, 0x7fff, [0xf75c, 0xffff, 0x400, 0x7ff, 0x4, 0x75a, 0xffffffff, 0x3]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) close(r1) 00:16:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x14000) 00:16:27 executing program 1: 00:16:27 executing program 4: 00:16:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00030021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:27 executing program 1: [ 443.529344][ C1] net_ratelimit: 26 callbacks suppressed [ 443.529353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 443.541172][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:16:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000) 00:16:28 executing program 4: 00:16:28 executing program 2: 00:16:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00050021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5000000) 00:16:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x0, 0x0) 00:16:28 executing program 1: 00:16:28 executing program 4: 00:16:28 executing program 2: 00:16:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00060021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:28 executing program 1: 00:16:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x0, 0x0) 00:16:28 executing program 2: 00:16:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:28 executing program 4: [ 444.249318][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.255164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 444.261052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.266836][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:28 executing program 1: [ 444.329298][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.335130][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 444.341019][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.346809][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00070021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f00000000c0)=0x8) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = getuid() mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x1090, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB=',dont_measure,func=KEXEC_INITRAMFS_CHECK,appraise,\x00']) r4 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x10000) 00:16:28 executing program 2: 00:16:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x0, 0x0) 00:16:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x480, 0x160, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x1, 0x0, 0x0, "c4f06538cecf047e8b397a59a841f985eedd247262ef1e95d83c8fc46d67ee1ff033a3f0e79fb2a2111ef835c8db4b912b99c47dceabf0cc71f8d3b7efc2a730"}}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x5, 0x7}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:29 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000a0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:29 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:29 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xfff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e20, 0xfffffffffffffff7, @ipv4={[], [], @broadcast}, 0x1}}, 0x7fffffff}, 0x90) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x7}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in6={0xa, 0x4e22, 0x47, @remote, 0x3f}, @in={0x2, 0x4e21, @broadcast}], 0xa4) 00:16:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x0, &(0x7f0000000600)) [ 444.991756][T20347] FAULT_INJECTION: forcing a failure. [ 444.991756][T20347] name failslab, interval 1, probability 0, space 0, times 0 [ 445.004691][T20347] CPU: 1 PID: 20347 Comm: syz-executor.2 Not tainted 5.2.0+ #71 [ 445.012338][T20347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.022404][T20347] Call Trace: [ 445.025719][T20347] dump_stack+0x16f/0x1f0 [ 445.030073][T20347] should_fail.cold+0xa/0x15 [ 445.034688][T20347] ? fault_create_debugfs_attr+0x180/0x180 [ 445.040530][T20347] __should_failslab+0x121/0x190 [ 445.045486][T20347] should_failslab+0x9/0x14 [ 445.050026][T20347] __kmalloc_track_caller+0x2ca/0x750 [ 445.055590][T20347] ? __kasan_check_read+0x11/0x20 [ 445.060722][T20347] ? ucma_set_option+0x10c/0x530 [ 445.065682][T20347] memdup_user+0x26/0xb0 [ 445.069939][T20347] ucma_set_option+0x10c/0x530 [ 445.074854][T20347] ? ucma_set_ib_path.isra.0+0x540/0x540 [ 445.080536][T20347] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.086795][T20347] ? _copy_from_user+0x12c/0x1a0 [ 445.091756][T20347] ucma_write+0x2d7/0x3c0 [ 445.096112][T20347] ? ucma_set_ib_path.isra.0+0x540/0x540 [ 445.101763][T20347] ? ucma_open+0x290/0x290 [ 445.101785][T20347] ? apparmor_file_permission+0x25/0x30 [ 445.101805][T20347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.101824][T20347] ? security_file_permission+0x8f/0x380 [ 445.101848][T20347] __vfs_write+0x8a/0x110 [ 445.111790][T20347] ? ucma_open+0x290/0x290 [ 445.111809][T20347] vfs_write+0x268/0x5d0 [ 445.111827][T20347] ksys_write+0x220/0x290 [ 445.111844][T20347] ? __ia32_sys_read+0xb0/0xb0 [ 445.111867][T20347] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 445.145813][T20347] ? do_syscall_64+0x26/0x6a0 [ 445.155923][T20347] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.161994][T20347] ? do_syscall_64+0x26/0x6a0 [ 445.162019][T20347] __x64_sys_write+0x73/0xb0 [ 445.162037][T20347] do_syscall_64+0xfd/0x6a0 [ 445.162059][T20347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.162072][T20347] RIP: 0033:0x459819 00:16:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x480, 0x160, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x1, 0x0, 0x0, "c4f06538cecf047e8b397a59a841f985eedd247262ef1e95d83c8fc46d67ee1ff033a3f0e79fb2a2111ef835c8db4b912b99c47dceabf0cc71f8d3b7efc2a730"}}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x5, 0x7}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000e0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='\x00r\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffd) 00:16:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 445.162093][T20347] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.171342][T20347] RSP: 002b:00007fc68e8a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.171358][T20347] RAX: ffffffffffffffda RBX: 00007fc68e8a7c90 RCX: 0000000000459819 [ 445.171366][T20347] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003 [ 445.171374][T20347] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:16:29 executing program 2 (fault-call:3 fault-nth:1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) [ 445.171390][T20347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc68e8a86d4 [ 445.205296][T20347] R13: 00000000004d07d0 R14: 00000000004e0930 R15: 0000000000000004 00:16:29 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="f400000000000000791000000000000007000000000000007700000900000000877574f6c4bb3f592d16956ee0e3217b714e9387f1c88cf3ff2482b725b250b23f7e801e4302dd"], &(0x7f0000003ff6)='OPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r0 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='OPL\x00', 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r0, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000280)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000140)={0x54b, 0xd, 0x4, 0x120, {0x77359400}, {0x0, 0xc, 0x7f, 0xfff, 0x6, 0x9, "05f11b6c"}, 0x7, 0x7, @fd=r3, 0x4}) 00:16:29 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000f0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x0, &(0x7f0000000600)) 00:16:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x480, 0x160, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x1, 0x0, 0x0, "c4f06538cecf047e8b397a59a841f985eedd247262ef1e95d83c8fc46d67ee1ff033a3f0e79fb2a2111ef835c8db4b912b99c47dceabf0cc71f8d3b7efc2a730"}}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x5, 0x7}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:30 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00200021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x0, &(0x7f0000000600)) 00:16:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0x16, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x6, 0x1, 0x4, 0x4, 0x8f95, 0x8, 0x801, {0x0, @in={{0x2, 0x4e22, @remote}}, 0xfffffffffffffff9, 0x8, 0x100000000, 0x314d, 0x3}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x8c6}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r4, 0x7}, 0x8) sendmsg(r2, &(0x7f0000001c00)={&(0x7f0000000280)=@rc={0x1f, {0x800, 0x3c46, 0x1ff, 0x400, 0x1, 0x81}, 0x7fffffff}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000300)="b264f7b478021af210928e27efe980d928245e97451a07f1886ac8162d3aee26ccff798f06331ca3fa6c5f4a378194b04d4d2cc5001057fc20424bd5cdbe4c81810475d61b08c0cdad8b4edcaeadc3b2f626df4bf0d31e03b57a6335af1abed3cbc6e8040249ea58a8ec3a684ede1fc803337517d5d05b6b6c886900324c973ca3f0dc2d5c741b91ac5bbb805f8d1334fb915d6022ca418e4b897b32d293835c158021d8af0b109ee3b0279944c206517a092e27d86c5c01084237aa8d1d20a8b1c31a7ce3961a687a3ddb3bde0b50e6a4ee00bb1c261ccfae030f1048a89f27e01f75b72f8ab78fbe1a870e481f9c893b70bbff4b606d635bb17c36d12534924d41a1a5af88a3af2c3873309ed4882af06989a9052b4199722ed5910550516774afb4f06326e056147801e1979785721818f154b7bfd6dd868971c2aa2d94d804f26cc103a963e81b6544e95d85a06a6014d7808f09a56f35aafbebd97065c9f0d919b737d9ef3d71ea772769cad8728fb845aa60857a652f1ce23547dfcea0a317c9415bf5dea42bcf835e40581745ab4e73469501316d1bbd3e94deb28e2a7299916017f5ee91d5962a0d7f27e2471065a2901f8c1e00d47123d29b8b9d190320d1f47c56b13383df49839fcd2a0efd8a1ea161320f9c698b24abc8fbdcf98bb260656177ab2156b05ad7d835db854a43f4c17c78cb03f09ac570ee0f010d5ad7185f0d8c493bfba25aaa973ae5f2bbaeb89071d9b55b25f2e131a58ea1a8d3130db45d5eb9cff4bb5a864acb5e50946e2ffd3f35f0fa1dacc74bc2b0599366a50d443aa6a69294001b3dc926e56899c78079f36442146a8277257263f353ce57c85082aafbb502c4d1ead459498eed4e715fd13fcb77a83900a56258f1a47208484bdd7c2875d18f6619b7db8f1beed0dcca52b3f1ffe776a4511d8dda984920258f4e55cfdff96a9aec42a265855052e4813335f8a30b39ccda283efaad0df86aa5d90ae4c6ec0ed972b0bb53a04c7837a6c4d7c11dbbece07bcf370acdffdab77a157cc4bbf8240c8339db2fd88be8138330a205f7abd2e22d6a5b91f1066b1ba3cc8d17afb317330a32f4607c1789fff0cc698d517e324de7c8b8e296b5d52a9c268b422f98012ebf3cf6744596d3cf2ada7a2e68d304cca32feaf23e6f09265e88f6c4af15a5ba0f6a5f3a940422a558a4a80a01431137ed63feb833aa3a6c2f0196146f4cddb315f9fa8de4bd5801ce7bc3446de4d855d63a26c1be3ea23ed485b296dff0aa1a973ce8cb09bd645d000bb45aaefe425110474cb3940e5a91df73b69b0c642b5f01d7bdf73aad21a1b598f3c50489f455745da86b555e6a0a1c5a23736a8d826035a500b1896653a3ca2a546f14e2cf4420517f5bf6b716ba939ba37cedec3f4b21d4e77db51c72204c7c47eadf7936b9eb36c805a2711c482a781e33db8ed6e062544da3a156a8fc3b30eb8eeb20d6e9ce95d00d639ce87d7b467d9d1031c8b6edb5f2c7e020d4778bcf3528acbbbcacf6bb19effff8f73830a1869c85182ddba4d80a703d8163cba3d654f9b449da15a81e6b6c946c1d82b2e5eee405a39ebbce2748f174e163cade09b6f13a622e0e58a39aa260f8ca0c5e2c359338293e5ea0a29876552d6da07e0a76adb38cb7f5dd48967c31aecaa897a6b146eeaf19801b372cb44c5b8ed38544b6ca058fdc50d165cb11c6917571236093a9c7c95bde29cda63659a4d0c9db5b259a1ba38e28c28d96a52391af9f804753c941a349e9fbfbe09b49c693e00c468da26363919168aeae80c6d642016fa24b27e3491323fc8d9b4d56f4569d7c6071c23f145ab008a04efbb099c14ed64614b27afafa489a89e87059dcd48e4253089b59fd12438524bfc0c6bad74e8d0893f120d0c840e6d2eaf27be70b7a69d3a77d4757fa5a45006afc76a89d079831ee03adcc7ce5479c7fe8831d6b0d4f1c733f6338f18584860adea74a0b00f16a4ce68a3b90ed4b4e18e03934c7f4e7d95a9d673cf5e18d8a94d7e65f53cb2874cf25c25846c7603c822a805453234d40b1b38affe606e31af05f5f87c7bdd51c582617e342f14accf2afce1f9243ede7a4018d9f1e3219508f6575fce3a54f8ef2058bc6be2564aa589f6287efb0aa35a102c883f55a3047af74a9a3587354c3e29a078fc3936826a6e82de877f89a63674fb0d89e8780a4f9f0acc0fe72f89fd3db50c17590550951d762043c8b782ab52895493e1a9a19e5df286f96682ae5cff587984933176da175dc39db23cad4f3736a568ab376aed88d63973036f38706820b1d375daf93a30b521fa5d93783bfda2384b64b7a18a9e3856c9be754cdb984712beede3b764deaff7bc197cf2792f8a146e887a8653e17d8306df7966e75dfb6941899ba98fad159492af7a27c6e846f9d6eeee6cca817979dd606083b24b75728bbb52e2b0b6441c351a6c78c0d928945f19b95e46f52a7982cf170237bdd2bcbfebfd4b2c6e492e29c61afc53ba59143bb9b6efb268a4e2d2f86575c7b90b2e10410915dfcfccf3777deb70b8de729e3df95f833376d7aa35a9b582e0d2f180cb7c85527db52957c8adace1e3aef7fdeea371decae746911a3bdd3ccf4f6ccde323a167ab42ea6bb4fa3afb88833591929b1e2c6ee684c1f3b4bc616fbd7bc7e7a874111fc2e82b935ac97654a469766cd40fefd8e53a5136d7b1f4c3539d41dcc50d5638803bf59fbde3a5d681382836f7402fa3614a5d7ca4ea06318b2c96a87cf599357b9ffe4abd6ca3debbc37b1ef5d9a2494717af751c228907f1b50eb82b68b65b42c3503ab25237b7b88ef48ae3f3b380ab2ae4cc34310137298ce1a333deaaec4a8866e8d13cbcbc1e21a20ad8b4a698aac43e6adc4d57eebfefed80a1cd8f025a7dfa2507dc7080f059099e8e82b81bd5b8397f54dfa1032a5ca6cd52a61eae2058c0de74882fd2f9acf373ed018e48c514e7821d968c024c5b53e044fe2768b10fc58c14ef375cebc7ac1386381c5ef5ed2fe2ea466915290c21cac92d788ae1c51c417d5ae2d65acaf5b06fa2c3a02a8ef812c2d4b6a409a080cf623494fd5f057e29fe6a6d575ca831238676aba42b07255c225c40953f0abcbb787e1a470134d80fb952393d68209541dfe7d3120ba51301b9e5dd1c0f7d96f0e9ff13d30e69120d08845e76aa39f0737fdce34483999d1ea00f2dcffecb4dd26e9b689230a2d70e4936aa20c14dfb6a1dba229c69dd9f365248140aa777732ba6823453ae4f66ddd504144025a9b6cc6f0e88108bd45b5a958b8ecbf662e4b4e171436e6fe1ed53ebdd908a3bbeabc086b0ed03d8a9eb8ff576bfeda5a66cdf61383dfc91e33ead9d09fa466b60871da724a0901da3e2bdf18aa6e06819e7fd2c9c17ec1bf954adde6aff4787c74a2b1a4c50ff529bfab5f7003bc5d7eb966245b21078d9724795bfb4c855ac078f243140ff7c43f02fba073b39bcc41a8b64c4fe11fe9e96cc2f971dd4c3cac09d57c994dd00cbc3388cbc1ab1f6a930183db5f0f7a60a27486dcb204a717575da7af0c9d7f91d6faff9befd57a213fc16c570d605637079394af245d5aef8170235129e4ed9dc8e1f8bf84f68254d57e6685fb6ff9e2c58184c930626dfde2286790548db7b6b5db483006e0c05f53461e2252559cad3dc0f0dbccd43374afaedc8b8a501ee9954be2184ed04ca071d51efaf21ad379c4f82cccca232ce1f57b1458407c0e8c0c05e1afaf4f8aa2648e128db2626fb0e07d8ea9a621ba74961a8767fd4b7eda44568b98d7f6e19943e84acc138fa8148236a7f3e26d33562cb5f7373d40ae59dc0f4653c4bb704b10fe7c41268a9b08c198c44993e981574603e019ce14d17dbce89b665f0230dcffc8b5685421fcec5e814a5e7aef10cc19ef077e079a12224f23a1b4281d45411f6453cbf95c7270e9b89ae542c44a45a451fad3c2c7a307aa5d55ba732eb04a9b4d27aa33ce5501eb49dc8de317cd055e299c64032d8fb433f59c2327012264d75136068192bd9e48d5abd075ee4b64ff5a7d1bf1869ed5470eaaf0cda9d420288cd5c64213732916052f7582f0dd617f2776fa9c1ce07152b85e504e0acda45827367c7c86b7f2837ae331f0f352e43ed1550375336a2df59626e76192e120a2e2689f7b34317df91a944871df999d8400f1b5dbe4cc33b33b35ff5fe0478ebcf9ac0aba1d0acd8cc7e917f26822265381d8ee8b2f8c7647ed77ddf401ef03f6c6d6aada4cd6901307c58116537bac51a17a5a2e631725ac09e0bb62364c8f858013639f0f27aa47c97f9c00ae7705ba11a867dbf021b272e4580e98dd908ced5a9e49b5e2b18c736c56c697c06b5c5371c9c1f804db113474159e3803826106e104fb747d8d3229bad24f27cf187ac27f0143a30123939947719aa5f00f8a256cb28a7b47bea669dbbecf4e289956914bdeffaa2fb13c0b0ec5b36c0545b2e0e6ad726996fea5f3d7828eb2bc08b0ccc0b88a09343c6ccdcbaae912b153a52b5cf4a75912e1a8ede671f2bc950790cf7f6df2ef9a1dc6c8db32e318be800a72a2fae4cfaf5d912cdf07ff228cc23c0ad152ed87c9a916d26d7799667c0b86b5660f8b51fbe06df3d5961efeae76851d7e2ed3f559271be79e9f9c77f8edbf959b6d8de9d7779a5b53fdc328958d78457db751a34e6804ba8e1c435870f987043752cef277f9e24a362eebf71a35d78fce746d5d86606e740fd3b6c9c79d6a2509d91de3f4f039937fd2908d49cf9c500d5f0c9587a0dd56cb6efb6c6c1138de154afa9f16710c4b332cb45ef035b3dc1f3f75521e4f6804be9531fdfe7334a3b9f612ceff309c86e89ca9cb390aa3dc7c4ab19ff94b329b90faa990d520df0103c6391dc7d28442789c20d75e1553ffa877e52ef7e728b798d73e9c90b62f1ca545af0663c434ccf851b5d3f61fff32e99c9700b020af498a30560af0301a64404dce733ebb2d91b59f678db96149580a6a85bebc28d5031abdf7b1dfcf1968861da90727d620357ce6117c109671bf86504971b60a2bd591525ca470244a72f287726ead1bf4cba3a50eac7a974d09dd26defe7fed40cfc21322ede61d2c9d65794eba341673753990ea094574ee0b9f630880fa199c42733a34c7d9d8541c6471ff1bbd31e8a6d5676fa9e472cc4a867d26ebc1c8e3f1a442c591ef7c230e7b68f55704abc3d55b852df2695ac7a66d7aee16a91165109b86d4ac4d9a1185e178bf2e2d2c75ec6edf2279a94fe25e0246693a405a6cccb4134210e7e83bbfb233f22dec9e50037568256735e7477bfba5efdfb89fcf4392acbdba19a900e5df5c062eff561486cb19e21212a0fcda1ccb5702b0ab88f83c9fb219e05e8ca54db1c3979f6416bc750d798db86f9e98d6790c4425ed9ffb685fffcffc1b0814ba6a20f8cf47360add9174e966ad2e1bc4df0f3b18c4ed62423d0c8bb7014cb4196878d9deece11665e111d1646c3baacb396ea8e14ffe1115d607e3f6040989792d4ddff89475ef403662ca54511dd1d3b5154d83c2eb76c219c0e0a36b76039d556f9ee5a3131a1f9039e0c7c60bf182e8c67cb7731fd2a9114ef58fd380d0808a5ee306e2a4e4e32b131d7beaeb1ee5ed0e46cf0a82405b694b8e8ae12ef8a9fde680ac4da69ff9687232469ac55bff2786117d55a20f99a76623da698a01720d73ef0f5526b7df3b78f6c4bd857c3090fbff7a31f1a48175aab833f2a100a156e81ed535ee01945d77102f345e351c33e0bb7fc81bae93", 0x1000}, {&(0x7f0000001300)="43e88c44de857f6f08", 0x9}, {&(0x7f0000001340)="4c1d33f5effb4df2b0526ad1197e91c13a339b641981116e6892534df64556a302aacac5ec005a571e9e263401b4f0fbd35d92f1a07dd4c1c77541957e01857af82652187968c48fdac29f03e9236a06429ddad3ee9ec30f594624c368788d8f1bd1c53a77f175532a7b53ee8c2573d52d427d20fef364716ad1a2fa922be95862941a94697dde2034880b58fca325181e18f2ecf5d006", 0x97}, {&(0x7f0000001400)="09cb77b7b057a8ca132f01562bb475d0e8a8498f3e4be2befa61ae69a940c3f57f8bbc402bfd94c699cf7ea110f77c61241c007466c13db3e7c691d54367f4f0bf282bef1e6083a3ee53071650a4470b9128794101a215d66d5ef96af410690f60cc5acfcb9117b81bdef18b6488e9ce65380fd89c4b4409d74d9eefe12d4eb7806a272d055cdb1d46ae05165b2e39c09504f97f3d9343b4c4ab2378a5a708e235c699177065094cea4b613f16aa3ad4ba66831efcedd9f7f54e33827c7ffafbba6e4b202d4798b68640801cb988ef68813c8756dbd0cc285c7c3cc4a58ebca25431db6d3c", 0xe5}, {&(0x7f0000001500)="13e28c399e30abd97a834a913dfe2f6a7711987207584d826703ed7293654e81e2473e13a1da05a5328c8d632e737169aab69b775ac80ae56ecd4b5ca95ddb", 0x3f}, {&(0x7f0000001540)="27ba5b2c298a7136fedb12d40fe3bc28a2fe729082da442bffa55949ed50d062b07cf4285503368f32ad3079c9cf327935350efaa12d8b3d7520e1fb0b8709b4f9bec5f338f021dd22fddf65387ddcf5487b8dd6965cbd758d358f7b87bc009c0a246c12bd4ab6fa9b18d187d285d579a0a616fd8421de6a3ae781d2f0bac4f3df82adc2dae99eb48eb5c60319b2562e34ee83f430ba43c3c03db6490a0dede54a80752dd165ccd3eddce1687a331ba0c2928a221a43b67881defadd7b96ed487d", 0xc1}, {&(0x7f0000001640)="2ce2d655e5cc690f364931b35f61fb65a6ed6ff985d00b35248182f0795d02e21aed8551265779d5032954d1e60223fb2029689b051bf24a4436a322a711cb84435dd4faf3be32d79f593b9db58c2cc5fecb850462e73475692a7725a6811fa6198d3341ce25bd7861e03dc632b6cb840e5eceae46e305d944dcff33cf61ea84cb8ad6d4cdb46bc3ba05e8b71da2ff89e8b77bdd1e4efa732cd14c5a9758730938ba79bee9f4f7cc2f6e8291724d8c61027d73e2eaba79552ac1d8dd8ff14b5d08164a57", 0xc4}], 0x7, &(0x7f00000017c0)=[{0xf0, 0x1ff, 0x400, "bc359047ba99766dc295f3539b5c89fa53e25a8cd42cadc4e452cff301f239bc86c0e220b61ec0c4e2b048aff8bf713d913f4111c0233d24a762a9706d5631725c219592f2750b35396054f21782bde52d1ad0b673f6dcfcddd55bd171549f118c896ad4ed9f8a1364a266eff2e0ecbe72a1b2e0e64d9f8726988fb0682f97e916b23bc8d753bcd79f784fcf959fe664e0e03b1098aed96c29809121b3628b0cf944277cdad491d12a41ea5c1175577642ee939bab2a29f46a39572131771246de59c7107278cf28135aee7ab931220957e8faef590ae9f6e37ce57963"}, {0x78, 0x29, 0x457, "380ca6901b3442245d3b0e139eeced8b9453c0788c37951eb212117c23c7cb06f318d8f563bf7e5b982bd9c347700cca7f0a80892ad810b7547f64b0403e6b0e9b4c6b0cd2790c425c3a83c7cd1b45e6c11a82967a9161f7563221936ee5180d46163725"}, {0x90, 0x18e, 0x3, "241430cdcbc8f21aff1b37e823ad62aaa948ad52bd1945a7292c6678c2a5571a1ae7ceedbe68555fe930760112cc6afded747cd23fcd3347669b29d2b962c40e71d49fa0d50ae563d1b56d9b90f45aaed2b7782c378e354e150d7ffdd0b2fa92ddf07804bf9cade6103bac77ae6d523e344be0634eb1a01af77c9c9e3e"}, {0xe0, 0x11f, 0x3, "0ea07078b1028316bdb49e20bb9fc55bc604e9daec843f33e7538995f4781f24910b6ffd23b77761682174e350f19a066a2fb37bacb08282d13626f0d7ec4fa8f3c2313750a8c7433df47580f7087e39e6f1b23da240e8817d37258527a4cd1b39ca75132b245b3019c5be20113bbf0f1490f42685b753c33e9b926b111680b6fb0963f7e32bd1e3d1bf71b9c81fab4da7d447e4ac08ff319daa3be70f44da27c8e04a273da5559fc913a7402a50a79671aa53b425b92e146d5acbad449ceec9da58103508f2c3180189565d8503"}, {0x50, 0x117, 0x5e, "c317a02303ad091134546182cfd065c2313d5fc6f7884cffd505e1ee9c7a784d6564dce3ced05876dd464469f3f04852876c6fdea74e4ae5da8314377016"}, {0x28, 0x110, 0x100000000, "c62a8ff9c8e10c3767b2bf3d3599f28df1cf839a9886"}, {0x20, 0x10e, 0x1000, "70fd8a6749fa2ed54997"}, {0xc8, 0x117, 0x5, "651508506cf458291e0679f5270d5259c84c0209294c686100b6b8aff09152f5b52feed12190b3bcf18cab6c9c34fe51e96dafab8fbe51d303adabdc645aea4aca7f732ab158148650baa34c9caa7db5f351a015aa90ad666d23666f21608d39a122a6dab8041938cc3300454b928e25f96a4f3e935ace7a71f870e72d31572226781e23d1502dcff7fa1873fe2d95ca32836b41cc897b70af684f6f4850bd8ecd1891268f3df89b196ad2f3566b6fba4681ac"}], 0x438}, 0x0) 00:16:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:30 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e003f0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[0x0]) 00:16:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x1) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x202) accept4$x25(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80000) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000) 00:16:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x20000060, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:30 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00400021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.\xf5s\xc8S\x7f5\xe0\x81\x9etaage_user\x00P\x98Yh\xc0_y\x0e\xd5.\xfd\xe3\xea\b\x9e\xf0\x1f\xf6?\xe0\xde\xfd\xa0;y JH\xc6}\x1e\xb1K\xe1aZ\xc2\xf3R+q\xcfTU\xceD\xbf^9aH\xb1\xa3G\xd2\xe7q\x93\x14\x98J\x8c\x19x\x18!\xd1et\xa2\xe7P6X\x01\xd5\f`ls\x0f|\xa2\xc2%\xd5>8\x15\xa2n\xc1\xf6\xa2{\xca\xf0\xe9\xd1\xd9\xdb\xe2RH\xb9Y\x1bd\x95\xb6\xc79< ', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[0x0]) 00:16:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x4, 0x10000) 00:16:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00480021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:30 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa02, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[0x0]) 00:16:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./u\xaf\x02\xd1\xe3\xf1\x1eUGcgroup.\x18\xd2V5J\x86#\x87B\xa8|~S\xedAof\x19\xc9w\xef\x04\x82\xd1\x96%\xfc\xa8`\xaf\xdd\x82\a*s\xebm\xc0\xb9\xba\x19\xe4ov\xb8\xb3\xb8\f%\xbb\xc2\x95\xddKK\x9d\xa7-\x10\xaf\f\xf1\xc4\x97\xdc\xc3[\xb1\xa8\xcc\x95B\x9e\xdc\x8b9R\xacW\xa2\xc6\x82Rw\x84\xef\xa76\x18Ip,\xd0y[t\x89\xc8Z\x10\x92\xaf~:\x9a0\xd0I1=\x19\n\f \x04\x13\x82\xad\xef;\xdc$\xd6\xa0w\xad\x8a\t\x8cA\xf8[\x98%Mt\x8d\xb4\xbd@.d-\xd6\x1c\xf8\xf1\\\xca\x95&', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e004c0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:31 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x2, r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:31 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xb, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r1, 0x124, "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"}, &(0x7f0000000280)=0x12c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) mremap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x8) 00:16:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:16:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00600021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:31 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x4000, r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:16:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00680021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1000000, r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:31 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x101000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)=""/4096) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x10000) 00:16:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e006c0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:16:32 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000001c0)={@local, @remote, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7a71}}}]}}]}, 0x114}}, 0x4040010) sendfile(r1, r2, 0x0, 0x10000) 00:16:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x2000000, r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 00:16:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00740021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x40000000, r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.\xa0SC\b', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="cd0f522fa4b00650bd994ef1952fd8c416c78e4f469753a9f04ab618c83f905320b7ea37db0230465497", 0x2a) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 00:16:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cp\xd9\xc5|\xb9t.usage_user\x00\x1e\x90_\x9c\xba\x81Q4\b\xd7D\x10D\xbc\xbc\xfc\xba\xe3YT', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000180)=""/153) 00:16:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e007a0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x100000000000000, r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 00:16:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket(0x9, 0x3, 0x7) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0xf96, @dev={0xfe, 0x80, [], 0x1a}, 0xc853}}, 0x0, 0xfffffffffffffff9, 0x0, "6c94c1ff34084e0be1d60126f426e7b8b4d4622876e95dbab4127641f43b94c1080aee5be914b5d5fe8d331b4ea520813d320d8247b4a745c4f823322fdb279bd490eed2e31f74535467a3cade4653cf"}, 0xd8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101800, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x4, 0x29a}}) r4 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sendfile(r4, r5, 0x0, 0x10000) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa0001000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032bbd7000fedbdf25020008000c00020002000000000000000c00030000000000000000000c0080d4db5d16fc5863e8270400da0000000000000008000100000000001400070008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 00:16:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:32 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00f00021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x200000000000000, r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:16:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000000c0)=0x9, 0x4) sendfile(r1, r2, 0x0, 0x10000) 00:16:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e02f70021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:16:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x4000000000000000, r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) lstat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000026c0)=0x0, &(0x7f0000002700), &(0x7f0000002740)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002780)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000002880)=0xe8) r4 = getuid() syz_mount_image$erofs(&(0x7f00000000c0)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000002540)=[{&(0x7f0000000240)="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", 0x1000, 0x7}, {&(0x7f0000001240)="36911d582dbafe01264e710d72e7c54f8a7ac75ca419f463a0829d07f11f1276f0e889dfb85c9363241011e6976218f233f646b6c889c0466c7c31eb6090b3fac69e240d8ddd4f3884385d9043bb72245e5366ca8aef5a63b58db93684f43341ab1d0986463ce3acc05f321651aceaacc5806ec6db9f127699343945d16a1e26722ae93a62da6698c740171df1ade0db44be7c20037d3fdd463746", 0x9b, 0x1ff}, {&(0x7f0000001300)="0f035e62a6f65e0dbb6e3f3b3adaba2f4d4392", 0x13, 0x3}, {&(0x7f0000001340)="f628cef86c300768014a0b19b65d65ffe8fa6890a5045f128aa6bd817df324f6d983567ffacf6fae931a13701eb96f2b57ef7663c9d208b2083804b92857280ec2481258db1afcaad2d279e88646249c7ddf1497bf844d49fc1e9ccb8bf4c3a36a0426da465156290a1d14a1cb3709259036845b6e2650668dc226ee2ec485d0aa51f524035dfd3b737d6457c4eeac33fecf4cd45107fb1be97736691775", 0x9e, 0x1}, {&(0x7f0000001400)="5f7e0ce1e5c076869ef57701fa65ba79f7584f3eff7d46adadbbfc8ed8d59d189cb9ed14fed3bf28e46bb8281c10a8307f18859260d045a58bf680f25d7c83133278757811d078ceaf1820036c0ebeb7a0a5b52d7617d59e7c4755af61f129e4d5b97e3a6c6ad9e035d9da0289fed10c7df89889f761c904622fb70e74ca0395eaf56101e4acedc59e1fe9d661faa2c004e6c304f66303", 0x97, 0xffff}, {&(0x7f00000014c0)="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", 0x1000, 0x9d82}, {&(0x7f00000024c0)="1e559b41048f34e98626f962bfff1e05d1b9ed32b4a4a1207471e804640de6af099be493e89e48ab765c491a716b8579d3f64af60b0b7cb17ee8a60077c63235b7d32ffb720ad808cc33687e2bd6b8e68b290ce189f42c594aad0b0d624a3ac7b7", 0x61, 0x7}], 0x1, &(0x7f00000028c0)={[{@acl='acl'}], [{@context={'context', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r1}}, {@fowner_lt={'fowner<', r2}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_lt={'uid<', r4}}]}) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000180)={0x1, 0x3ff, 0x3, 'queue1\x00', 0x4}) r6 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x10000) 00:16:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000003f000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:16:33 executing program 3 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x2, 0x1, 0x4}}, 0x20) 00:16:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 449.337363][T20666] FAULT_INJECTION: forcing a failure. [ 449.337363][T20666] name failslab, interval 1, probability 0, space 0, times 0 [ 449.350171][T20666] CPU: 1 PID: 20666 Comm: syz-executor.3 Not tainted 5.2.0+ #71 [ 449.357819][T20666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.368437][T20666] Call Trace: [ 449.371742][T20666] dump_stack+0x16f/0x1f0 [ 449.371767][T20666] should_fail.cold+0xa/0x15 [ 449.371789][T20666] ? fault_create_debugfs_attr+0x180/0x180 [ 449.371832][T20666] __should_failslab+0x121/0x190 [ 449.391463][T20666] should_failslab+0x9/0x14 [ 449.395976][T20666] kmem_cache_alloc+0x298/0x700 [ 449.400845][T20666] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.407101][T20666] ? _copy_from_user+0x12c/0x1a0 [ 449.412096][T20666] io_submit_one+0x10e/0x2de0 [ 449.416873][T20666] ? __lockdep_free_key_range+0x120/0x120 [ 449.422621][T20666] ? __might_fault+0x12b/0x1e0 [ 449.434797][T20666] ? find_held_lock+0x35/0x130 [ 449.439879][T20666] ? ioctx_alloc+0x1cc0/0x1cc0 [ 449.444684][T20666] __x64_sys_io_submit+0x1bd/0x540 [ 449.449803][T20666] ? __x64_sys_io_submit+0x1bd/0x540 [ 449.455103][T20666] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 449.460584][T20666] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 449.466070][T20666] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 449.471539][T20666] ? do_syscall_64+0x26/0x6a0 [ 449.476231][T20666] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.482306][T20666] ? do_syscall_64+0x26/0x6a0 [ 449.482326][T20666] ? lockdep_hardirqs_on+0x418/0x5d0 [ 449.482351][T20666] do_syscall_64+0xfd/0x6a0 [ 449.492304][T20666] ? do_syscall_64+0xfd/0x6a0 [ 449.492327][T20666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.492339][T20666] RIP: 0033:0x459819 [ 449.492360][T20666] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:16:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x8) sendfile(r1, r2, 0x0, 0x10000) 00:16:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000005a000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 449.530905][T20666] RSP: 002b:00007f2e0ff89c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 449.539334][T20666] RAX: ffffffffffffffda RBX: 00007f2e0ff89c90 RCX: 0000000000459819 [ 449.547319][T20666] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f2e0ff69000 [ 449.555307][T20666] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.563290][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e0ff8a6d4 [ 449.563301][T20666] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:16:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 00:16:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:34 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x4000, 0x1, 0x4}}, 0x20) 00:16:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:34 executing program 3 (fault-call:6 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 449.769303][ C1] net_ratelimit: 26 callbacks suppressed [ 449.769312][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.780832][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:16:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 00:16:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000063000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 450.011344][T20703] FAULT_INJECTION: forcing a failure. [ 450.011344][T20703] name failslab, interval 1, probability 0, space 0, times 0 [ 450.024261][T20703] CPU: 1 PID: 20703 Comm: syz-executor.3 Not tainted 5.2.0+ #71 [ 450.032002][T20703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.042081][T20703] Call Trace: [ 450.045396][T20703] dump_stack+0x16f/0x1f0 [ 450.049754][T20703] should_fail.cold+0xa/0x15 [ 450.054458][T20703] ? fault_create_debugfs_attr+0x180/0x180 [ 450.060293][T20703] __should_failslab+0x121/0x190 [ 450.065266][T20703] should_failslab+0x9/0x14 [ 450.069783][T20703] kmem_cache_alloc_trace+0x2c3/0x770 [ 450.075186][T20703] rxrpc_lookup_local+0x650/0x1b30 [ 450.080320][T20703] ? lockdep_hardirqs_on+0x418/0x5d0 [ 450.085638][T20703] ? rxrpc_get_local_maybe+0x480/0x480 [ 450.091114][T20703] ? __local_bh_enable_ip+0x15b/0x240 [ 450.091143][T20703] rxrpc_sendmsg+0x379/0x5f0 [ 450.101210][T20703] ? rxrpc_kernel_probe_life+0x40/0x40 [ 450.101228][T20703] sock_sendmsg+0xd7/0x130 [ 450.101245][T20703] sock_write_iter+0x27c/0x3e0 [ 450.101265][T20703] ? sock_sendmsg+0x130/0x130 [ 450.121514][T20703] ? rw_verify_area+0x126/0x360 [ 450.126384][T20703] aio_write+0x2f2/0x540 [ 450.130644][T20703] ? aio_read+0x3b0/0x3b0 [ 450.134991][T20703] ? __fget+0x388/0x560 [ 450.139164][T20703] ? lock_downgrade+0x920/0x920 [ 450.144054][T20703] io_submit_one+0xfb4/0x2de0 [ 450.148736][T20703] ? __lockdep_free_key_range+0x120/0x120 [ 450.154489][T20703] ? ioctx_alloc+0x1cc0/0x1cc0 [ 450.159298][T20703] __x64_sys_io_submit+0x1bd/0x540 [ 450.164425][T20703] ? __x64_sys_io_submit+0x1bd/0x540 [ 450.169721][T20703] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 450.175191][T20703] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 450.180666][T20703] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 450.186134][T20703] ? do_syscall_64+0x26/0x6a0 [ 450.190825][T20703] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.196914][T20703] ? do_syscall_64+0x26/0x6a0 [ 450.201628][T20703] ? lockdep_hardirqs_on+0x418/0x5d0 [ 450.206929][T20703] do_syscall_64+0xfd/0x6a0 00:16:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 00:16:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000068000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00020021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 450.211445][T20703] ? do_syscall_64+0xfd/0x6a0 [ 450.216149][T20703] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.222070][T20703] RIP: 0033:0x459819 [ 450.225978][T20703] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.245603][T20703] RSP: 002b:00007f2e0ff89c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 450.245619][T20703] RAX: ffffffffffffffda RBX: 00007f2e0ff89c90 RCX: 0000000000459819 00:16:34 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x1000000, 0x1, 0x4}}, 0x20) [ 450.245627][T20703] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f2e0ff69000 [ 450.245635][T20703] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 450.245643][T20703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e0ff8a6d4 [ 450.245652][T20703] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:16:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 450.489288][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.495166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 450.501043][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.506855][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 450.569618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.575442][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 450.581323][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 450.581373][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00030021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:35 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x2000000, 0x1, 0x4}}, 0x20) 00:16:35 executing program 3 (fault-call:6 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 00:16:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00040021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 450.923169][T20752] FAULT_INJECTION: forcing a failure. [ 450.923169][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 450.936133][T20752] CPU: 0 PID: 20752 Comm: syz-executor.3 Not tainted 5.2.0+ #71 [ 450.943813][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.953882][T20752] Call Trace: [ 450.957192][T20752] dump_stack+0x16f/0x1f0 [ 450.961540][T20752] should_fail.cold+0xa/0x15 [ 450.966148][T20752] ? fault_create_debugfs_attr+0x180/0x180 [ 450.971985][T20752] __should_failslab+0x121/0x190 [ 450.976946][T20752] ? sock_free_inode+0x30/0x30 [ 450.981810][T20752] should_failslab+0x9/0x14 [ 450.986338][T20752] kmem_cache_alloc+0x298/0x700 [ 450.991205][T20752] ? ___might_sleep+0x131/0x280 [ 450.996073][T20752] ? __might_sleep+0x95/0x190 [ 451.000781][T20752] ? sock_free_inode+0x30/0x30 [ 451.005569][T20752] sock_alloc_inode+0x1c/0x1d0 [ 451.010355][T20752] alloc_inode+0x68/0x1e0 [ 451.014701][T20752] new_inode_pseudo+0x19/0xf0 [ 451.019393][T20752] sock_alloc+0x41/0x270 00:16:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00050021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 451.023656][T20752] __sock_create+0xc2/0x740 [ 451.028186][T20752] sock_create_kern+0x3b/0x50 [ 451.032888][T20752] rxrpc_lookup_local+0xb70/0x1b30 [ 451.038021][T20752] ? lockdep_hardirqs_on+0x418/0x5d0 [ 451.043338][T20752] ? rxrpc_get_local_maybe+0x480/0x480 [ 451.048819][T20752] ? __local_bh_enable_ip+0x15b/0x240 [ 451.054213][T20752] rxrpc_sendmsg+0x379/0x5f0 [ 451.058824][T20752] ? rxrpc_kernel_probe_life+0x40/0x40 [ 451.064310][T20752] sock_sendmsg+0xd7/0x130 [ 451.068752][T20752] sock_write_iter+0x27c/0x3e0 [ 451.073534][T20752] ? sock_sendmsg+0x130/0x130 [ 451.073564][T20752] ? rw_verify_area+0x126/0x360 [ 451.073585][T20752] aio_write+0x2f2/0x540 [ 451.073617][T20752] ? aio_read+0x3b0/0x3b0 [ 451.091742][T20752] ? __fget+0x388/0x560 [ 451.095925][T20752] ? lock_downgrade+0x920/0x920 [ 451.100814][T20752] io_submit_one+0xfb4/0x2de0 [ 451.105510][T20752] ? __lockdep_free_key_range+0x120/0x120 [ 451.111250][T20752] ? ioctx_alloc+0x1cc0/0x1cc0 [ 451.116057][T20752] __x64_sys_io_submit+0x1bd/0x540 00:16:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00060021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 451.121191][T20752] ? __x64_sys_io_submit+0x1bd/0x540 [ 451.126496][T20752] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 451.131978][T20752] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 451.137448][T20752] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 451.142922][T20752] ? do_syscall_64+0x26/0x6a0 [ 451.147613][T20752] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.153707][T20752] ? do_syscall_64+0x26/0x6a0 [ 451.158405][T20752] ? lockdep_hardirqs_on+0x418/0x5d0 [ 451.163715][T20752] do_syscall_64+0xfd/0x6a0 [ 451.168223][T20752] ? do_syscall_64+0xfd/0x6a0 [ 451.172909][T20752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.172922][T20752] RIP: 0033:0x459819 [ 451.172938][T20752] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.172945][T20752] RSP: 002b:00007f2e0ff89c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 451.172960][T20752] RAX: ffffffffffffffda RBX: 00007f2e0ff89c90 RCX: 0000000000459819 00:16:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0) 00:16:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00070021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 451.172969][T20752] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f2e0ff69000 [ 451.172985][T20752] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 451.234803][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e0ff8a6d4 [ 451.242876][T20752] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:16:35 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x40000000, 0x1, 0x4}}, 0x20) 00:16:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rfcomm\x00') sendmsg$alg(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000180)="9148876d5a9181aca76a741a2a08ff2eb5395f045ca3ace3bedadc1d3e9c798b2163ed0334621da62116c47ddd8ec764e4fff5669ac087ffa38ce693ce0f2ec7df829589eb9562a0404b73d86715edb32cc8b8e4e3b7bf02d475b7e9574a596582e3fa126dacbd0af60f33af69a11eab74cf0d1b6908e270c6c4d26fc75103743cb9ae1fcea515e459b6", 0x8a}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="80e6b0357df461085bd6129fac1dc94d46", 0x11}, {&(0x7f0000001280)="97c3c55a59ef33a795bebb4ed97a21afc587464ea467cca177fab0ecf614d19c05fb259bfd3a734bb7cb419706209bc1be7777eff0fd3018fb8bcab24c7dcb94b3e4f36dbf4477233a95f2dae9e472720772fb969c306ec935d3cd8342e0fb092430f9fe73f0ffb5ccb41b70af34e35103f9f06f59e7e26bb60fb8e4c4048aba7cae7e62db8302e187cfe2da450f5529493fa380c464cf27d0bdf1b316679c3358408cf8906ef1fb1db030add3660ec08523684dc26d902269c8e543eeffc608fc09e94ac8bafef061aedf3bc46267757d0c016367fe3288cff91b9ad360a49c80e3c91936611911f3865849aa01ca490127cb7065ef8efbf6631145b7066eb6fb8134e0dc79ddf21840b3e22c0bb53279ce42435fa014e7cc84b4a6e1446cfcb7c442b403c7fb9037cae6f56bdcd6828d62e6b16b4a581b5ee363f6d7b24281135f7ce3f702d619e259bc2fb911ce23645b96bc4937bfec35303d59e08ef487d92e995fef7ba6ced96e141bd91b4715bd901570adcca0b80d3ffb2d2a2f9b456dc5169b654cdccedc7e25328e1a65113e4347b18e98fdc0081d860050a0b3dea594a20ebc525ed0998ffdd777a72e953b2f3a5522b05a1ea3c4dfab95f1baa736410e795a2b812f4da3486b9361566183891eaecad2b35cd7ba14e5c91e69e534a29bfff859ad72e296f55586a24e290d16cacb8094a4a888067043110f850991f69071feffdefd3329a77ad5c832c436863aae314c5437500b1b237952f04cc6989b6c957f3cf2fb33838bebb11201f6caad2e787990475fb5846a367cde03f93ceaf0e375b5f79f46f4e3dd87e8c0757467d7b90aa28337aca703586ef365e62ab5f0ab7cde54aaf07f17d4023dba0e1f7d3ec6bc1d1dc9895b0a2fabb84d10e32b13ab201758834ed6014ec6f059bde4b407999565d85aa73072af59af18f531b107f505bc3856fbf870e4c212ba50a02a3e3e2b1b94a3671240b773b153c6342eae45216626d3bf348fdf7942bda127b167613c96383f05880d701e1cd30f02ebf931ccb43b2cba9559f41e48b324d8226064c7817e2fd4490cbd23d5a66a990e5a3a728fc158b8b444a91fcf0b2df94352de8e2148c5186d957a9cd12ece1fd10269303db5e63046e085e1c76d59c8fb026bc8080beb17cd56eb904e92e4bfe4e490918a83cdb7fe2e6c00c5df2bc5ad4fdf7270ab5bb08cabe94b3ee341aa55435197fcbac4ea8ed30f0ea06c34296e1590c063aad95f97615b40fef57e51d48005c24d55e8b07fc6e7062d46b0f694965d043c763be644adb4904704b839c8ac0970af473217d6ea837e7d13738bedfa3eb4f2f1699455d9ffd94aece9ea001abae5f9f402b782ec5cff886ee3dca5db7ae5da7365ceec5fbf7abeb083b8c216b43e0b73b764371627d52f5a1756b37a922f8dbd58b3bae5f9a8fced47c6e7dfb2c2971a0d2dabc1b3ecb811d6a5ee300b9491338637634a3563c7064d3b739e7e60bd6eeb0e8401f7d0fd55b8ecce9bd51c8d1570fa1510feefc6fc10f4c7f35b183aeaa1e16d54f93ab95ba8ae8b65783439128a3efa0f3ef20a57d5bb36ac4fbe6fa4d5022b62741c0f756a7c588790a5ce4dc5e00d0825ff5a6704cf950494cdb25fde5ceb83136e41f5c02c7f4cf99509ac0a6c1ab542c50927839ae6780c13fbdcbd30ca21359c51bd781f1181b6abf3e6f4d91b2f5877e4643e297b99761d099de2e8ab29db3d93590b6728c6d6d702c37e5ec2b197154d98510eef50fc913e5dc23bd03a25b0d37b9538bf5bab1916651ae7d6e76fd6ee248cc85ea9804e67e3b851249fa80c634d8e7205250bcd563b81206d6335643f7f450453345271bb65f2bbc742c37821692efea2d4da1499fd74731bf41f13a40d57a4e600688957b9cf05540a2e47a2ead532552bbbdd966abeebed2a77cfe024f5b709c6d708f692ca3e82a32f0efd3750180e153b700635bc4298a5fe464add953b7ec2b7ce5bb57d0cc093e9ec6cb32fffd101cc9cd89e76abb3d713610026b4a4110fdd8419d763089b87b608a535ec31e9c6ea7dbf578d49dcb36c747f9267ce636218b366b8d182ac2a3df9e3198dac3e0c59dac8e2fc794a076ada3212aae0e82d89232ceb73fe24a9b7c55bfe8ee6a54c543808794406e984cb6db48cb55de4c9cb5b61487df0d25a66ecea61b07ac29d5e723fd0780d2a2378f2f84d388e8cbf0b05c259f2030cc963bdd3225bebdfcd1a2ce42034de1a86bd8228a421f0145712e6875061ab8a43ca4f6ebb640b1e782ff546b06d8aea4db32b34eab0bc1207ee53f7a4976aada11730e0b7c9e4e7145b693b7cc92e89b707f7144b72c4b68c76f8dff24341438f76fc9b03ca63d754df44e3cbb0921cbf83afe87ca8f7f32d1a06867a7fe4ffad11cdbda9d53f0989441796a4155e18d979c05f7af123dd38845a219459b8ab51d07ce9e90ec055f408e7002b98df8bd1299760e8e923b0d2d90c3aa63fe7fc5d75abcff23f2a2ce2c393cf37578eb4676fc0edde98755fb1605014c5aa0f281e201c2b2dabc6df9a75bf41552298202bd14a50288a2b1339ba670f22b9243706600c4c04b4605562970dc841b8b4b4a3dfb15625314a3cdb5f588aa65c0419403691febddce14cc070294ca2383893f919b873fb83c2b59fc796d9ff029129925a1779c35cb5e21dd5458e79c405cee20557af26bc1c183a8516ce2d3791714d2f28604349159991a10ff654665e3563a31a09f3a7b1643fde36feb2d0049d4a062699bdaffd23ae0ab07045666c0f767cf2f1b260de06e1913aa961e3970247e877f7b093ff3918a98a8fded7f15eaa971b5a7f258d830cc2639d7d37587274bd964b90e8bb247d6eb2abb151f3be10bf76d28396503a0966dd6a333ff3156a7014f6da0f823c4a2f1fa8a10f86c39592a0af93fb0f28f84edb7812d8cec25d24b564ddd5c9376d14834a0c9b032ca1e0921ff6e49d8ede85c4f93b3fdc5e6c683aafe50bd697911467d2cfad4589e5adeb1db31ac0aa181bd172c9920a92f9e5041a2375465f13120767520d2cb4a2855264b151e875ed22989f807dd0cf319fd9790a119be932666a36020c52182ecf58cc81345d6cac7829605700f0a200b212d66dffc62a933524e76b3dbb5150763b104a7ac2051202025408b0130d26a65da9ba9748f3614accb7738f6c4f093efdc269754a8caf11897cd21f1b81d4a6331e25e2fce16251a52f4d105418f624a612f388dbe83e83f52d2a9551a0cfdd7c1fa7c3a0da7e21fc817f9157cd8e2acf8fe7fdedbac0a450b4015abbd793127c8abd53510330df4e0610f1639febf5859d4d00859b117a4e2a8af39861a14daf845e21107f527155fb50c9f344cd2c5519475b6b87f8e2282d7cded564aa02d818c97afa5b1fd85d279461b2356444362da54f897f1a7b21292176443314afd1571912a74a0cfbebd957353274aee3f6feab554d77488bf011930725924ebfce15a962801dddd5c4cb988f93e9bbb8260d5930b465f12a0e24e9fc664dac67effe6c005ce0da57907c190d7ef6137d568365d7af82787719faef0400b97f319f400b7f0edc2ebf07dde231557e24efaf27c5d6463cbf994f580051ae9f1e1cbd64c2f0ab8af3eff43b9397a4c71dc2cf2f7f85c9816bb9ca5e6516949fb506218022e73705644b332f8bf3b8656fae6cfbaf4bd65dc6947dcc3e6964d85d8240168508250209c325007c7eb1a920181f331bae5b1ae530dc883b44df5db4e1232f29ca97b5b7178ac93c03a16bf74ab16c14d8a2f2a9fa506fff6224105a19a814026e87f7949ec62ec524a2e513a7cec73bb6a085d0d0f4261834939edce892db0a81eddf8bb05dbfbfd9900b3f3add8230690d9939af488d5ea3228dcfc0d24a82a08fc777f891603116b009d2fecca1505575490372f610f9eadcb095edf7609501c1e2e8e3ae1c06411c2f89d7fe207469ebba54571f5eded2d3553136c51d268b00da71e480ba95bba3ff155a2c08de84f5bd8cf644fceba7a5cb6e7a6b8ac7c7782acc38713deed1669ddeb2c88bf56c74e616eec8054ea6748d0ca3cc92deac2c39ae6bc3cadc92815afc0394349e61f16386fff05095cd1e81879d37c6f6bb88da3be2b25b1a92116e8884700a2d1685575908cb8b24f7db347d73d56fbf65dcd3d2f801616163021005e0b7f61587099871e3c851215e864433c32c2de94c35f3f726cb44f00c7861cb3202da367509e5c1b4ddda9e953d3b0d1852a6fc2ac52c7196d6dcef11d986d106ed789a0b20aa439921b3d77549c5b8a455e6b3f79f8144ee4c4e462b5e8a938ceca2b6e279096ed9f541242bd36bef58eda783f487c8901823b8ee71bc8f0e57431f4ddaf1f2047f086ab6fc094f67045899083a65d0151c725d096a9db949c4fdd161764af1a2e5326042ee8be5cf7df2d40b0449a2a61dccab37a425997dbcca926825e8ecd2fec4c41c8b31a077b967572449ece4527a3a84e73a953c4456cdb74cc03cf49406401772ae32c674a90593f1641be9a38c37567fdc5d4ae2ea6f84ba96c3a2684fc43fcac63b5f9246f63dfe3a8a135c97e344cfd307a65c52f647dc44671b23d4ae0689cf692c42ee622ba4cd2ac0fc4b7e19dd3f003586be84677f9f1c6f27c206d53f1321349f7a1aefe62103b44809c7e6d7795b5d6d876b919d537d705238146582d9c93b732667f623a3c104b9cb99b41ab43713a5ccda1d11908ec077d8a6815b10fe8c4fe1a2c6bfdda268ea96e03a816705dc4e33a5a8ee7d8468430c2d6b47e51a33a6402592d3225932d5500239a25f1e14bcce9d663ef6be9df9c57caa7e0afa56d043d9f01e69ff59d153b8597fbf8a47faa3c246dc1a0778da9777262b8c0503b6afe0947ec5eb092d05442ee8d84c10793c35fa00654b32d86b9286fdf36a69edae7c4d31e7d0720e2c19a1d24c213763277a949eef9e11134ce77811ee558e439319ed03641fa3fdd52fc9999a3df2b0b3f89041292584c8c8d6a211b8737da95b2e44cc5c73ee67282367384224271456702f77f0ba7497105ae9445dbd8f2099b454ddd34775961e7d0571fa3a946d75019d6c2d8982b997a5374958f0442cf873d748d7bd00564eb596923597d0923d593cd2e087e5020c49b7b0ca2dbe80a31a59a08effc9568f5a7397a570aebf92e3dc754c2cc70cca92266475ca0d6caa76215bc5bf4eb51d7e6b1c3a9908ae146227ca0f5b04d9dabd6f55890ef14c523cca8041eb1c954df48091c9454ec8b381420bc8b78dee6066861d73bd1c8d6b1140ff4908f150a416c92a238de725b741e47319d4a270d3f0352c04ec98f1cb7e9fde8ad4f18b4ed1ceb3a62a99e4104a66ad4059b3a93eeca178cc61b19bb547eaf45d13c810ff1f567e6f03566718e0e8db90ffdb3d2c68ee2e74a2b66d0a946f6a0203160b7a552abc4c041ae116e1909945ee6a49452507d5db277d82d0a1a66a97ed86ce37b08276498d7603b15ff2766546e5c25d23f5aab469364bac2c3f5dd594cfefc9f221310c289a45ec35b7ad1dfe51016bf4dc4d61e0e3d5268907803751e693a57eaddb9c8970da47c888b2ea8637265c9eda7b1ac7e9ea50da22046d78459bba143fd65b665d25f2fb2b4704aa2e28c3b93c66abfcec8fed46556564fb8cdef19908e63b887aea2bd24f37bde602b7cc4e94d3257a5d2affa85f4e7272a6f6282c70f5b74ce63cb3115bbae603ae880274fc5bb9aae049c5a4c92b984987b9ee6cd57ac4dcdaeed1b04750", 0x1000}, {&(0x7f0000002280)="34a2861c49e9d9f005e36611d0ac030e0757cd3b3a4fab06dde89f325e08131663f3f3661812da48adfb03e4f5b8e8eb3f780fbfa112cdd8317b60e3cf901bb64ea5d9c23beac737d131f62c4fe954ae0de6c55c37cedb7d8dbbdca42f184a2ce04ab2377fef9b4833f941138af49295707f7166d787f54e59d6c4f63409ba0a7d39ddc806cbe0b6684d1e105f70eadd85dcf2300f13eb5926448dac038b527a52e572c50a0319e7013f4b9cb946cd01be833650e1d65abb7e72cabca1922c07577117fe7eb049f525614d2e15f60c9c1f35376acf6d2e28718d26736ea9774c80b49882fa04a89839787d", 0xeb}], 0x5, 0x0, 0x0, 0x24000000}, 0x20044080) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000000c0)=0x9) r2 = openat$cgroup_int(r0, &(0x7f0000002940)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\xe3Y,\xb5m\xfbX2>@/O\xb2\x1a\xd2\xbdN\xc5\x92\xdav\xd4\xf3\xd0\xda\x84I\x88!*G\xa63.V\xa65to\x83\x83\t}^\x14\x8a\xdbXy^\xdb\xdb\x95\x86FA\xfe\x05x\x1f\xfa|.\x8d\"\x8f\x88B.\xbcS\x12\x94A\xe3g\xc8@\x94u\xa6U\xad:\xa9\xd1\x9c\xe5xJ7\x06S\x83\xea\x82\x97[BDD\x06\xa3\xd12\x9e_\xd36\xf7\xf8\xb9\xb8\x98\xcfl\xb2`\x84\xb1\xc2\xba/\xe2\bzJ\xf3\xf3x\xc0\xad\xd6\x1e\xf2\x9a\a!#<\xed\xe9\xff\x18\x9b-3\xf9\xbd\x0f\xb3\x85\x96W\x18yL\xb0+\xe0\xe6\xef\x12\x06\x95\xf3n\xdd`a\xce\x8a5\xa3\xc5\x96', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000002880)={0x7, &(0x7f0000002440)=[{}, {}, {}, {}, {}, {}, {}]}) openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x9) 00:16:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000a0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:36 executing program 3 (fault-call:6 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0) 00:16:36 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x8}, {}]}) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000012c0)={0x94, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c40000000000000000000000000086310400200000000000000000000000000000006630440020000000e630c400000000000000000000000000c63000011634840000000000000000000000000000000000000000011000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000001300)=ANY=[@ANYBLOB="852a62730a000000030000000000000000000000000000008561646600000000010000000000000000000000000000002300000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="0000f17914e7065ddcf216651a960036faceb0ab7abae883535543511024582ebe2752efb50a"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="00000000000000000563044003000000"], 0x1000, 0x0, &(0x7f00000002c0)="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"}) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000) 00:16:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x100000000000000, 0x1, 0x4}}, 0x20) 00:16:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000e0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 451.855757][T20810] FAULT_INJECTION: forcing a failure. [ 451.855757][T20810] name failslab, interval 1, probability 0, space 0, times 0 [ 451.868689][T20810] CPU: 1 PID: 20810 Comm: syz-executor.3 Not tainted 5.2.0+ #71 [ 451.876371][T20810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.886456][T20810] Call Trace: [ 451.889777][T20810] dump_stack+0x16f/0x1f0 [ 451.894230][T20810] should_fail.cold+0xa/0x15 [ 451.898850][T20810] ? fault_create_debugfs_attr+0x180/0x180 [ 451.904690][T20810] __should_failslab+0x121/0x190 [ 451.909652][T20810] should_failslab+0x9/0x14 [ 451.914174][T20810] kmem_cache_alloc+0x298/0x700 [ 451.919039][T20810] ? inet6_create+0x2ec/0xf80 [ 451.923738][T20810] ? __sock_create+0x386/0x740 [ 451.928526][T20810] sk_prot_alloc+0x67/0x310 [ 451.933051][T20810] sk_alloc+0x39/0xf60 [ 451.937143][T20810] inet6_create+0x364/0xf80 [ 451.941676][T20810] __sock_create+0x3de/0x740 [ 451.946296][T20810] sock_create_kern+0x3b/0x50 [ 451.951014][T20810] rxrpc_lookup_local+0xb70/0x1b30 [ 451.956152][T20810] ? lockdep_hardirqs_on+0x418/0x5d0 [ 451.961548][T20810] ? rxrpc_get_local_maybe+0x480/0x480 [ 451.967021][T20810] ? __local_bh_enable_ip+0x15b/0x240 [ 451.972417][T20810] rxrpc_sendmsg+0x379/0x5f0 [ 451.977031][T20810] ? rxrpc_kernel_probe_life+0x40/0x40 [ 451.982511][T20810] sock_sendmsg+0xd7/0x130 [ 451.986969][T20810] sock_write_iter+0x27c/0x3e0 [ 451.991751][T20810] ? sock_sendmsg+0x130/0x130 [ 451.996491][T20810] ? rw_verify_area+0x126/0x360 [ 452.001379][T20810] aio_write+0x2f2/0x540 [ 452.005693][T20810] ? aio_read+0x3b0/0x3b0 [ 452.005726][T20810] ? __fget+0x388/0x560 [ 452.005752][T20810] ? lock_downgrade+0x920/0x920 [ 452.019125][T20810] io_submit_one+0xfb4/0x2de0 [ 452.023826][T20810] ? __lockdep_free_key_range+0x120/0x120 [ 452.029577][T20810] ? ioctx_alloc+0x1cc0/0x1cc0 [ 452.034392][T20810] __x64_sys_io_submit+0x1bd/0x540 [ 452.039526][T20810] ? __x64_sys_io_submit+0x1bd/0x540 [ 452.044845][T20810] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 452.050331][T20810] ? trace_hardirqs_on_thunk+0x1a/0x20 00:16:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0) 00:16:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000f0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x4, 0x0, "64dcce4ab1acb2da26abedd38053cd8e14938c949074f4238a9a65b535db5c6a3d2de6cf3ef2295809461a04511c11dfde37324163408bfb32ebe043b74b0259c95a1816909458b967883a8b9311d2a7"}, 0xd8) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 452.055818][T20810] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 452.061395][T20810] ? do_syscall_64+0x26/0x6a0 [ 452.066179][T20810] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.072284][T20810] ? do_syscall_64+0x26/0x6a0 [ 452.076988][T20810] ? lockdep_hardirqs_on+0x418/0x5d0 [ 452.082289][T20810] do_syscall_64+0xfd/0x6a0 [ 452.082306][T20810] ? do_syscall_64+0xfd/0x6a0 [ 452.082330][T20810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.082344][T20810] RIP: 0033:0x459819 [ 452.082360][T20810] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.082368][T20810] RSP: 002b:00007f2e0ff89c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 452.082384][T20810] RAX: ffffffffffffffda RBX: 00007f2e0ff89c90 RCX: 0000000000459819 [ 452.082393][T20810] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f2e0ff69000 [ 452.082402][T20810] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:16:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x200000000000000, 0x1, 0x4}}, 0x20) 00:16:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00480021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 452.082418][T20810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e0ff8a6d4 [ 452.091607][T20810] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:16:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) sendfile(r1, r2, 0x0, 0x10000) 00:16:36 executing program 3 (fault-call:6 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00100003", 0x17}], 0x1}, 0x0) 00:16:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x4000000000000000, 0x1, 0x4}}, 0x20) 00:16:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x1}) sendfile(r1, r2, 0x0, 0x10000) 00:16:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e004c0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0) [ 452.616393][T20850] FAULT_INJECTION: forcing a failure. [ 452.616393][T20850] name failslab, interval 1, probability 0, space 0, times 0 [ 452.629373][T20850] CPU: 0 PID: 20850 Comm: syz-executor.3 Not tainted 5.2.0+ #71 [ 452.637024][T20850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.647090][T20850] Call Trace: [ 452.650492][T20850] dump_stack+0x16f/0x1f0 [ 452.654847][T20850] should_fail.cold+0xa/0x15 [ 452.659461][T20850] ? fault_create_debugfs_attr+0x180/0x180 [ 452.665303][T20850] __should_failslab+0x121/0x190 [ 452.670270][T20850] should_failslab+0x9/0x14 [ 452.674789][T20850] kmem_cache_alloc_trace+0x2c3/0x770 [ 452.680193][T20850] apparmor_sk_alloc_security+0x87/0x110 [ 452.685848][T20850] security_sk_alloc+0x77/0xc0 [ 452.690641][T20850] sk_prot_alloc+0xb8/0x310 [ 452.695160][T20850] sk_alloc+0x39/0xf60 [ 452.699255][T20850] inet6_create+0x364/0xf80 [ 452.703779][T20850] __sock_create+0x3de/0x740 [ 452.708401][T20850] sock_create_kern+0x3b/0x50 [ 452.713113][T20850] rxrpc_lookup_local+0xb70/0x1b30 [ 452.718271][T20850] ? lockdep_hardirqs_on+0x418/0x5d0 [ 452.723581][T20850] ? rxrpc_get_local_maybe+0x480/0x480 [ 452.729060][T20850] ? __local_bh_enable_ip+0x15b/0x240 [ 452.734470][T20850] rxrpc_sendmsg+0x379/0x5f0 [ 452.739087][T20850] ? rxrpc_kernel_probe_life+0x40/0x40 [ 452.744575][T20850] sock_sendmsg+0xd7/0x130 [ 452.749014][T20850] sock_write_iter+0x27c/0x3e0 [ 452.753886][T20850] ? sock_sendmsg+0x130/0x130 [ 452.758590][T20850] ? rw_verify_area+0x126/0x360 [ 452.763456][T20850] aio_write+0x2f2/0x540 [ 452.763478][T20850] ? aio_read+0x3b0/0x3b0 [ 452.763508][T20850] ? __fget+0x388/0x560 [ 452.763533][T20850] ? lock_downgrade+0x920/0x920 [ 452.781127][T20850] io_submit_one+0xfb4/0x2de0 [ 452.785818][T20850] ? __lockdep_free_key_range+0x120/0x120 [ 452.791567][T20850] ? ioctx_alloc+0x1cc0/0x1cc0 [ 452.796369][T20850] __x64_sys_io_submit+0x1bd/0x540 [ 452.801496][T20850] ? __x64_sys_io_submit+0x1bd/0x540 [ 452.806793][T20850] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 452.812269][T20850] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 452.817745][T20850] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 452.823219][T20850] ? do_syscall_64+0x26/0x6a0 [ 452.827913][T20850] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.827935][T20850] ? do_syscall_64+0x26/0x6a0 [ 452.838666][T20850] ? lockdep_hardirqs_on+0x418/0x5d0 [ 452.844059][T20850] do_syscall_64+0xfd/0x6a0 [ 452.848586][T20850] ? do_syscall_64+0xfd/0x6a0 [ 452.853287][T20850] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.859188][T20850] RIP: 0033:0x459819 [ 452.863106][T20850] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.882985][T20850] RSP: 002b:00007f2e0ff89c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 452.891425][T20850] RAX: ffffffffffffffda RBX: 00007f2e0ff89c90 RCX: 0000000000459819 [ 452.899444][T20850] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f2e0ff69000 [ 452.907441][T20850] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:16:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0) 00:16:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x2, 0x4}}, 0x20) 00:16:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x80000001, 0x40}, 0x8) [ 452.915436][T20850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e0ff8a6d4 [ 452.923510][T20850] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:16:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0) 00:16:37 executing program 3 (fault-call:6 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00600021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x3, 0x4}}, 0x20) 00:16:37 executing program 1: close(0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) r2 = openat$cgroup_int(r0, &(0x7f0000000200)='io.ma\x01\xff', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401) 00:16:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a8064", 0xc}], 0x1}, 0x0) 00:16:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00680021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 00:16:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a8064", 0xc}], 0x1}, 0x0) 00:16:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x223, 0x4}}, 0x20) 00:16:37 executing program 1: close(0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e006c0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setresgid(0x0, 0xee00, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) setgroups(0x0, 0x0) setresuid(0x0, 0xfffe, 0xffffffffffffffff) shmget$private(0x0, 0x2000, 0x3fffe, &(0x7f0000ffe000/0x2000)=nil) sendfile(r1, r2, 0x0, 0x10000) 00:16:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a8064", 0xc}], 0x1}, 0x0) 00:16:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00740021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x300, 0x4}}, 0x20) 00:16:38 executing program 1: close(0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e007a0021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500", 0x12}], 0x1}, 0x0) [ 453.957895][T20944] hugetlbfs: syz-executor.5 (20944): Using mlock ulimits for SHM_HUGETLB is deprecated 00:16:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0xffffff1f, 0x4}}, 0x20) 00:16:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu\xceet.\x17\xaf,Gp', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000) 00:16:38 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500", 0x12}], 0x1}, 0x0) 00:16:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00f00021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500", 0x12}], 0x1}, 0x0) 00:16:38 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x400000}}, 0x20) 00:16:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa41a80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0xf9fc, 0x0, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @empty}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendfile(r1, r2, 0x0, 0x10000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x9, 0x2, 0x200, 0x9, 0x0, 0x80000000, 0x8, 0xf, 0x10000, 0x10001, 0xd7, 0x3ff, 0x6f72, 0xfffffffffffffff8, 0x8, 0x8, 0x2, 0xffff, 0x9, 0x6, 0x9ca, 0x6, 0xccf, 0x1, 0x1, 0x6, 0x7fffffff, 0x6, 0x3, 0x9, 0xf800000000000000, 0x4, 0x2, 0x3, 0xd4a4, 0xcb5f, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0x6, 0x6, 0x7, 0x0, 0x4, 0xfffffffffffffffa}, r4, 0x0, r2, 0x9) 00:16:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00f70221000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc0010", 0x15}], 0x1}, 0x0) 00:16:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x4, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc", 0x13}], 0x1}, 0x0) 00:16:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x20000004}}, 0x20) 00:16:39 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000180)) sendfile(r1, r2, 0x0, 0x10000) 00:16:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000321000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x5, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc", 0x13}], 0x1}, 0x0) [ 454.969315][ C0] net_ratelimit: 21 callbacks suppressed [ 454.969324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 454.980891][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 454.986741][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 454.992602][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 454.998446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.004326][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x2, 0x30}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={r2, 0x258c}, &(0x7f0000000440)=0x8) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB='\b\x00\x00j', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x24) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x80}) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000480)={0x2f, 0x3, 0x0, {0x2, 0xe, 0x0, 'user{vboxnet1*'}}, 0x2f) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000300)={r4, 0x1}, &(0x7f0000000340)=0xfa) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r5, 0x7fa}, &(0x7f0000000380)=0x202) 00:16:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x7) 00:16:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000521000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc", 0x13}], 0x1}, 0x0) 00:16:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x2, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x6, 0x7}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e20, 0x1f, @rand_addr="719ac5c2221cd15c9a906b919d662705", 0x2}}}, 0x84) 00:16:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000621000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20000060) 00:16:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x3, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc", 0x13}], 0x1}, 0x0) 00:16:40 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x801c0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000721000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000240)={{0x3, @null}, [@rose, @null, @netrom, @rose, @netrom, @default, @netrom, @null]}, &(0x7f0000000080)=0x48) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={'veth0\x00', {0x2, 0x4e23, @multicast1}}) 00:16:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc", 0x13}], 0x1}, 0x0) 00:16:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000a21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x4, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 456.009317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 456.015432][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:16:40 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xff, 0x99c9157772599a8d}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r1, 0x3, 0x400000000000, 0x3, 0x1ff, 0x7}, 0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r3, 0x0, 0x1, 0x4}}, 0x20) 00:16:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc", 0x13}], 0x1}, 0x0) 00:16:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000e21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 00:16:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x5, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:40 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x100000000000000, 0x1, 0x4}}, 0x20) 00:16:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x410800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x2}, {0xa, 0x0, 0x4, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f258247381f2853bda6a7d1278d3f73782e6370756163"], &(0x7f0000000100)='cpuset.cpus\x00', 0xc, 0x1) 00:16:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000f21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x11, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:41 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 456.729314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 456.735182][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) 00:16:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000240)=0x3) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x82000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x5, 0x40}) 00:16:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00002021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 456.908384][T21170] FAULT_INJECTION: forcing a failure. [ 456.908384][T21170] name failslab, interval 1, probability 0, space 0, times 0 [ 456.921441][T21170] CPU: 1 PID: 21170 Comm: syz-executor.4 Not tainted 5.2.0+ #71 [ 456.929100][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.939168][T21170] Call Trace: [ 456.942485][T21170] dump_stack+0x16f/0x1f0 [ 456.946843][T21170] should_fail.cold+0xa/0x15 [ 456.951461][T21170] ? fault_create_debugfs_attr+0x180/0x180 [ 456.957302][T21170] __should_failslab+0x121/0x190 [ 456.962264][T21170] should_failslab+0x9/0x14 [ 456.966786][T21170] kmem_cache_alloc_node+0x25d/0x720 [ 456.972104][T21170] __alloc_skb+0xd5/0x5e0 [ 456.976456][T21170] ? netdev_alloc_frag+0x140/0x140 [ 456.981588][T21170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.987858][T21170] ? netlink_autobind.isra.0+0x231/0x310 [ 456.993510][T21170] netlink_sendmsg+0x972/0xd60 [ 456.998306][T21170] ? netlink_unicast+0x710/0x710 [ 457.003271][T21170] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 457.008843][T21170] ? apparmor_socket_sendmsg+0x2a/0x30 [ 457.014333][T21170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.020603][T21170] ? security_socket_sendmsg+0x8d/0xc0 [ 457.026074][T21170] ? netlink_unicast+0x710/0x710 [ 457.031205][T21170] sock_sendmsg+0xd7/0x130 [ 457.035649][T21170] ___sys_sendmsg+0x803/0x920 [ 457.040352][T21170] ? copy_msghdr_from_user+0x440/0x440 [ 457.045843][T21170] ? __fget+0x388/0x560 [ 457.050104][T21170] ? ksys_dup3+0x3e0/0x3e0 [ 457.054545][T21170] ? __fget_light+0x1a9/0x230 00:16:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@rose, @remote, @rose, @null, @remote, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x80800) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000) 00:16:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00003f21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 457.059299][T21170] ? __fdget+0x1b/0x20 [ 457.063407][T21170] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.069678][T21170] __sys_sendmsg+0x105/0x1d0 [ 457.074327][T21170] ? __sys_sendmsg_sock+0xd0/0xd0 [ 457.079385][T21170] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 457.084868][T21170] ? do_syscall_64+0x26/0x6a0 [ 457.089566][T21170] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.095650][T21170] ? do_syscall_64+0x26/0x6a0 [ 457.100347][T21170] __x64_sys_sendmsg+0x78/0xb0 [ 457.100366][T21170] do_syscall_64+0xfd/0x6a0 [ 457.100389][T21170] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.100401][T21170] RIP: 0033:0x459819 [ 457.100417][T21170] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.100432][T21170] RSP: 002b:00007fabf3c31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.109684][T21170] RAX: ffffffffffffffda RBX: 00007fabf3c31c90 RCX: 0000000000459819 00:16:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00004021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00004821000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 457.109694][T21170] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 457.109702][T21170] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 457.109711][T21170] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabf3c326d4 [ 457.109719][T21170] R13: 00000000004c7560 R14: 00000000004dcac0 R15: 0000000000000004 00:16:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLERRORu(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000007020013006370756163b4312bfd736167655f7573657200cb02f0b3"], 0x20) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x210000, 0x0) r5 = accept4$inet(r4, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f0000000240)=0xffffff59, 0x7fffc) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000001c0)=0x2) r6 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) io_setup(0x80000000, &(0x7f0000000040)=0x0) io_submit(r7, 0x4, &(0x7f0000000680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x6, r2, &(0x7f0000000300)="584d334a984c71408b8781c0dc3206892f2177ac8222e7dbdd93dbf9135e44ebedccb40273834068715946fe65aa9f3b8adc1539b29d35832c991900fbc7a0c949a64a0abc0fae73989ae1f378f159d10a634933baec4936703e283071e6233a40fc00c452cd6057d21d2009ea", 0x6d, 0xfffffffffffffff8, 0x0, 0x3, r6}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x20, r2, &(0x7f0000000380)="c35e12fde8299129a0bff7f459bcd6482bf49f42fd96d53ae50551174cd919d97565487b59e9a3bdbdc6a057c97c7481e5d9a67aa204aa052beb9aa7e8424b3687c7e7178eb746871b0bd6b444215287c594f1e3d722d01b314916d030f2586aeff428964c4a43850709849dd1c35c54a0567cf319ef5f072bc3620ca4e74670329a718820be9eba", 0x88, 0x0, 0x0, 0x2, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000440)="4d29a4aa212620f2fa2c067603e08349eda3e76da4a9d807f9f5072b826d79a92f74db4d5898b5b4012e1082000ab091ce59aca4bbbe7cf4865871fce7020663497e4ffd1410914459728ef381bf9b7a68ef9d8aacd4213c72b207e40b6e044a4e3624275f3f9ea09d0ff1e1ad47c42e7667bb3d3fc2379d5e9cf7ba228ac520d6ed7701408f49", 0x87, 0x7, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x100000001, r5, &(0x7f0000000540)="1d7929c546f23f78275b11854b4e6e3f461862da78e00a33a3e4cb8d6eb87c347964cca1ac28d333faf74e7ac15ca7de758edba133162661007a417703a1dae936d0c4ccfa7a306f73f2754c8d7d6b4429c24d5d918d154f6ee631a9f2197b98af3e88a4de89690e9cc00b11b40f04b767b72d54c0354f3a37e298f48fe35b2db79485f059ad303159c8d5280db5b18ff156b196c328352c91ad158d556deed6659442dced0d2c18c2f2ec03113771df1c9cfb1c848041a9ab4555392ebccb66e58524ff4cfe456f032feba461b516", 0xcf, 0x8000, 0x0, 0x2, r4}]) sendfile(r1, r6, 0x0, 0x10000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) socket$pppoe(0x18, 0x1, 0x0) 00:16:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x5, 0x40) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000140)) 00:16:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x300, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:41 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00004c21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20100, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000ff038b000510cdfc79586f8e4a911ce4e505aeeb8a233347efdab0ff9c2670753c198d0a3b22d1bac54b9fc3373c03b00a1e713a63b529000a313a3d6404f91b7ff044aadcc0839ef461e6da29216742e5ca1eb6a7e0e541323ce7c4cd70b5031684b8a9129faee54efd7aedd47e610661117cebbd4ff8c29da6c97306bff8678905fdc71254c9330646"], 0x97) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xbcb17e1f, 0xfa00, {0x20000000, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x3fffe}}, 0xfffffffffffffec8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x80000) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0xfffffffffffffdfb, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x5b2) write$P9_RRENAME(r3, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) chdir(&(0x7f0000000380)='./file0\x00') [ 457.434911][T21207] FAULT_INJECTION: forcing a failure. [ 457.434911][T21207] name failslab, interval 1, probability 0, space 0, times 0 [ 457.447703][T21207] CPU: 0 PID: 21207 Comm: syz-executor.4 Not tainted 5.2.0+ #71 [ 457.455352][T21207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.465412][T21207] Call Trace: [ 457.468714][T21207] dump_stack+0x16f/0x1f0 [ 457.473062][T21207] should_fail.cold+0xa/0x15 [ 457.477681][T21207] ? fault_create_debugfs_attr+0x180/0x180 [ 457.488251][T21207] __should_failslab+0x121/0x190 [ 457.488277][T21207] should_failslab+0x9/0x14 [ 457.497712][T21207] kmem_cache_alloc_node_trace+0x269/0x730 [ 457.503538][T21207] __kmalloc_node_track_caller+0x3d/0x70 [ 457.509187][T21207] __kmalloc_reserve.isra.0+0x40/0xf0 [ 457.514580][T21207] __alloc_skb+0x10b/0x5e0 [ 457.519042][T21207] ? netdev_alloc_frag+0x140/0x140 [ 457.524158][T21207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.524176][T21207] ? netlink_autobind.isra.0+0x231/0x310 [ 457.524200][T21207] netlink_sendmsg+0x972/0xd60 [ 457.540849][T21207] ? netlink_unicast+0x710/0x710 [ 457.545801][T21207] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 457.545822][T21207] ? apparmor_socket_sendmsg+0x2a/0x30 [ 457.545840][T21207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.545858][T21207] ? security_socket_sendmsg+0x8d/0xc0 [ 457.545881][T21207] ? netlink_unicast+0x710/0x710 [ 457.556892][T21207] sock_sendmsg+0xd7/0x130 [ 457.568572][T21207] ___sys_sendmsg+0x803/0x920 [ 457.568594][T21207] ? copy_msghdr_from_user+0x440/0x440 [ 457.568626][T21207] ? __fget+0x388/0x560 [ 457.578152][T21207] ? ksys_dup3+0x3e0/0x3e0 [ 457.588261][T21207] ? __fget_light+0x1a9/0x230 [ 457.588280][T21207] ? __fdget+0x1b/0x20 [ 457.588297][T21207] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.588327][T21207] __sys_sendmsg+0x105/0x1d0 [ 457.596894][T21207] ? __sys_sendmsg_sock+0xd0/0xd0 [ 457.605628][T21207] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 457.616448][T21207] ? do_syscall_64+0x26/0x6a0 [ 457.631613][T21207] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.631637][T21207] ? do_syscall_64+0x26/0x6a0 [ 457.642424][T21207] __x64_sys_sendmsg+0x78/0xb0 [ 457.647206][T21207] do_syscall_64+0xfd/0x6a0 [ 457.651732][T21207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.657631][T21207] RIP: 0033:0x459819 [ 457.661536][T21207] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:16:42 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) io_setup(0x3, &(0x7f0000000000)) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_pgetevents(r3, 0x80000000, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0xff}, 0x8}) sendfile(r1, r2, 0x0, 0x10000) [ 457.681176][T21207] RSP: 002b:00007fabf3c31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.689604][T21207] RAX: ffffffffffffffda RBX: 00007fabf3c31c90 RCX: 0000000000459819 [ 457.697591][T21207] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 457.705576][T21207] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 457.713562][T21207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabf3c326d4 [ 457.721545][T21207] R13: 00000000004c7560 R14: 00000000004dcac0 R15: 0000000000000004 00:16:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x1b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00006021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:42 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:42 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) sendfile(r0, r2, 0x0, 0x10000) 00:16:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x500, 0x0, 0x8, 0x0, r0, 0x0}]) [ 458.122821][T21249] FAULT_INJECTION: forcing a failure. [ 458.122821][T21249] name failslab, interval 1, probability 0, space 0, times 0 [ 458.135706][T21249] CPU: 0 PID: 21249 Comm: syz-executor.4 Not tainted 5.2.0+ #71 [ 458.143348][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.153540][T21249] Call Trace: [ 458.156846][T21249] dump_stack+0x16f/0x1f0 [ 458.161202][T21249] should_fail.cold+0xa/0x15 [ 458.165808][T21249] ? fault_create_debugfs_attr+0x180/0x180 [ 458.171635][T21249] __should_failslab+0x121/0x190 [ 458.171656][T21249] should_failslab+0x9/0x14 [ 458.171672][T21249] kmem_cache_alloc+0x47/0x700 [ 458.171697][T21249] ? lock_acquire+0x190/0x400 [ 458.190564][T21249] ? netlink_deliver_tap+0x148/0xbf0 [ 458.195890][T21249] skb_clone+0x154/0x3d0 [ 458.200161][T21249] netlink_deliver_tap+0x955/0xbf0 [ 458.205301][T21249] netlink_unicast+0x5a2/0x710 [ 458.210082][T21249] ? netlink_attachskb+0x7c0/0x7c0 [ 458.215215][T21249] ? _copy_from_iter_full+0x25d/0x8a0 00:16:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00006821000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:42 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) write$P9_RRENAME(r0, &(0x7f0000000240)={0x7, 0x15, 0x1}, 0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) r2 = semget(0x0, 0x1, 0x400) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000280)=0x400000000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) socket$bt_hidp(0x1f, 0x3, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r3, 0x0, 0x1, 0x4}}, 0x20) [ 458.220605][T21249] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 458.226345][T21249] ? __check_object_size+0x3d/0x43c [ 458.231557][T21249] netlink_sendmsg+0x8a5/0xd60 [ 458.236343][T21249] ? netlink_unicast+0x710/0x710 [ 458.241293][T21249] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 458.246852][T21249] ? apparmor_socket_sendmsg+0x2a/0x30 [ 458.252326][T21249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.258581][T21249] ? security_socket_sendmsg+0x8d/0xc0 [ 458.264053][T21249] ? netlink_unicast+0x710/0x710 [ 458.269014][T21249] sock_sendmsg+0xd7/0x130 [ 458.273447][T21249] ___sys_sendmsg+0x803/0x920 [ 458.278146][T21249] ? copy_msghdr_from_user+0x440/0x440 [ 458.283654][T21249] ? __fget+0x388/0x560 [ 458.287835][T21249] ? ksys_dup3+0x3e0/0x3e0 [ 458.292276][T21249] ? __fget_light+0x1a9/0x230 [ 458.296971][T21249] ? __fdget+0x1b/0x20 [ 458.301052][T21249] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 458.307310][T21249] __sys_sendmsg+0x105/0x1d0 [ 458.311915][T21249] ? __sys_sendmsg_sock+0xd0/0xd0 [ 458.316968][T21249] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 458.322438][T21249] ? do_syscall_64+0x26/0x6a0 [ 458.327130][T21249] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.333210][T21249] ? do_syscall_64+0x26/0x6a0 [ 458.337910][T21249] __x64_sys_sendmsg+0x78/0xb0 [ 458.342693][T21249] do_syscall_64+0xfd/0x6a0 [ 458.347242][T21249] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.353137][T21249] RIP: 0033:0x459819 00:16:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00006c21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 458.357047][T21249] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.376886][T21249] RSP: 002b:00007fabf3c31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.385340][T21249] RAX: ffffffffffffffda RBX: 00007fabf3c31c90 RCX: 0000000000459819 [ 458.393322][T21249] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 458.402009][T21249] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 458.402019][T21249] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabf3c326d4 [ 458.402026][T21249] R13: 00000000004c7560 R14: 00000000004dcac0 R15: 0000000000000004 00:16:42 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x62d4, 0x80400) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200082, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x2, 0x8001, 0x4, 0x8}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000180)) 00:16:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00007421000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:42 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7fd0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x106, 0x7}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0x4, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) 00:16:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x1100, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 00:16:43 executing program 4 (fault-call:1 fault-nth:3): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00007a21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@mcast2, 0x62, r4}) sendfile(r1, r3, 0x0, 0x10000) fcntl$notify(r2, 0x402, 0x21) 00:16:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x4000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0xffffffffffffffad, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r1, 0x0, 0x0, 0x1}}, 0x20) 00:16:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000f021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 458.974355][T21297] FAULT_INJECTION: forcing a failure. [ 458.974355][T21297] name failslab, interval 1, probability 0, space 0, times 0 [ 458.987475][T21297] CPU: 0 PID: 21297 Comm: syz-executor.4 Not tainted 5.2.0+ #71 [ 458.995138][T21297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.005297][T21297] Call Trace: [ 459.008607][T21297] dump_stack+0x16f/0x1f0 [ 459.013053][T21297] should_fail.cold+0xa/0x15 [ 459.017675][T21297] ? fault_create_debugfs_attr+0x180/0x180 [ 459.023516][T21297] __should_failslab+0x121/0x190 [ 459.028492][T21297] should_failslab+0x9/0x14 [ 459.033017][T21297] kmem_cache_alloc+0x47/0x700 [ 459.037806][T21297] ? lock_acquire+0x190/0x400 [ 459.042558][T21297] ? napi_disable+0xe0/0xe0 [ 459.047098][T21297] skb_clone+0x154/0x3d0 [ 459.051371][T21297] dev_queue_xmit_nit+0x344/0x990 [ 459.056476][T21297] ? validate_xmit_xfrm+0x40f/0xed0 [ 459.061746][T21297] dev_hard_start_xmit+0xbb/0x930 [ 459.066809][T21297] __dev_queue_xmit+0x221b/0x3510 [ 459.071858][T21297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.078124][T21297] ? should_fail+0x1de/0x852 [ 459.082743][T21297] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 459.088050][T21297] ? __copy_skb_header+0x260/0x550 [ 459.093183][T21297] ? skb_pull_rcsum+0x300/0x300 [ 459.098058][T21297] ? rcu_read_lock_sched_held+0x110/0x130 [ 459.103836][T21297] ? __kasan_check_write+0x14/0x20 [ 459.108962][T21297] ? __skb_clone+0x5c8/0x820 [ 459.113571][T21297] dev_queue_xmit+0x18/0x20 [ 459.118088][T21297] ? dev_queue_xmit+0x18/0x20 00:16:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000080)={0x9, 0x3, @name="2fd974453df2b971b5385a91e65224311df1f76b08a22d6a5fe8a7e1c50217b3"}) [ 459.122794][T21297] netlink_deliver_tap+0x8ea/0xbf0 [ 459.128024][T21297] netlink_unicast+0x5a2/0x710 [ 459.132797][T21297] ? netlink_attachskb+0x7c0/0x7c0 [ 459.132831][T21297] ? _copy_from_iter_full+0x25d/0x8a0 [ 459.132861][T21297] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 459.149239][T21297] ? __check_object_size+0x3d/0x43c [ 459.154468][T21297] netlink_sendmsg+0x8a5/0xd60 [ 459.159280][T21297] ? netlink_unicast+0x710/0x710 [ 459.164236][T21297] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 459.169792][T21297] ? apparmor_socket_sendmsg+0x2a/0x30 [ 459.175262][T21297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.181516][T21297] ? security_socket_sendmsg+0x8d/0xc0 [ 459.186995][T21297] ? netlink_unicast+0x710/0x710 [ 459.191980][T21297] sock_sendmsg+0xd7/0x130 [ 459.196414][T21297] ___sys_sendmsg+0x803/0x920 [ 459.201115][T21297] ? copy_msghdr_from_user+0x440/0x440 [ 459.206611][T21297] ? __fget+0x388/0x560 [ 459.210803][T21297] ? ksys_dup3+0x3e0/0x3e0 [ 459.215253][T21297] ? __fget_light+0x1a9/0x230 [ 459.219945][T21297] ? __fdget+0x1b/0x20 [ 459.224026][T21297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 459.230278][T21297] __sys_sendmsg+0x105/0x1d0 [ 459.234883][T21297] ? __sys_sendmsg_sock+0xd0/0xd0 [ 459.239940][T21297] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 459.245411][T21297] ? do_syscall_64+0x26/0x6a0 [ 459.250109][T21297] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.256189][T21297] ? do_syscall_64+0x26/0x6a0 [ 459.260900][T21297] __x64_sys_sendmsg+0x78/0xb0 [ 459.265685][T21297] do_syscall_64+0xfd/0x6a0 [ 459.270209][T21297] entry_SYSCALL_64_after_hwframe+0x49/0xbe 00:16:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x165, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0xffffff7f) statx(r2, &(0x7f0000000340)='./file0\x00', 0x6000, 0x10, &(0x7f0000000380)) [ 459.276112][T21297] RIP: 0033:0x459819 [ 459.280015][T21297] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 459.299627][T21297] RSP: 002b:00007fabf3c31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.308052][T21297] RAX: ffffffffffffffda RBX: 00007fabf3c31c90 RCX: 0000000000459819 [ 459.316121][T21297] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 459.324113][T21297] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 459.332110][T21297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabf3c326d4 [ 459.340090][T21297] R13: 00000000004c7560 R14: 00000000004dcac0 R15: 0000000000000004 00:16:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0002f721000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 00:16:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff00, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:43 executing program 4 (fault-call:1 fault-nth:4): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x0, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x171, 0x121000) recvfrom$netrom(r1, &(0x7f0000000240)=""/4096, 0x1000, 0x10040, &(0x7f0000001240)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @default, @default]}, 0x48) accept$netrom(r1, &(0x7f00000012c0)={{0x3, @null}, [@default, @default, @null, @netrom, @bcast, @null, @default]}, &(0x7f0000000100)=0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0xffffffffffffffff, 0x0, @local}, r2, 0x100000000000000}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) [ 459.673573][T21343] FAULT_INJECTION: forcing a failure. [ 459.673573][T21343] name failslab, interval 1, probability 0, space 0, times 0 [ 459.686971][T21343] CPU: 1 PID: 21343 Comm: syz-executor.4 Not tainted 5.2.0+ #71 [ 459.694626][T21343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.704704][T21343] Call Trace: [ 459.708011][T21343] dump_stack+0x16f/0x1f0 [ 459.712365][T21343] should_fail.cold+0xa/0x15 [ 459.716987][T21343] ? fault_create_debugfs_attr+0x180/0x180 [ 459.722828][T21343] __should_failslab+0x121/0x190 [ 459.727797][T21343] should_failslab+0x9/0x14 [ 459.732322][T21343] kmem_cache_alloc_node+0x25d/0x720 [ 459.737645][T21343] __alloc_skb+0xd5/0x5e0 [ 459.741996][T21343] ? netdev_alloc_frag+0x140/0x140 [ 459.747477][T21343] ? __kasan_check_write+0x14/0x20 [ 459.752614][T21343] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 459.758273][T21343] netlink_ack+0x25c/0xb30 [ 459.762719][T21343] ? netlink_sendmsg+0xd60/0xd60 [ 459.767668][T21343] ? mutex_unlock+0xd/0x10 [ 459.772108][T21343] ? genl_rcv_msg+0x106/0x16c [ 459.776798][T21343] netlink_rcv_skb+0x376/0x450 [ 459.781570][T21343] ? genl_family_rcv_msg+0xf90/0xf90 [ 459.786877][T21343] ? netlink_ack+0xb30/0xb30 [ 459.791475][T21343] ? __kasan_check_write+0x14/0x20 [ 459.796624][T21343] ? netlink_deliver_tap+0x25c/0xbf0 [ 459.801934][T21343] genl_rcv+0x29/0x40 [ 459.805934][T21343] netlink_unicast+0x531/0x710 [ 459.810745][T21343] ? netlink_attachskb+0x7c0/0x7c0 [ 459.815869][T21343] ? _copy_from_iter_full+0x25d/0x8a0 [ 459.821261][T21343] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 459.826993][T21343] ? __check_object_size+0x3d/0x43c [ 459.832210][T21343] netlink_sendmsg+0x8a5/0xd60 [ 459.836988][T21343] ? netlink_unicast+0x710/0x710 [ 459.841942][T21343] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 459.847502][T21343] ? apparmor_socket_sendmsg+0x2a/0x30 [ 459.852979][T21343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.859244][T21343] ? security_socket_sendmsg+0x8d/0xc0 [ 459.864716][T21343] ? netlink_unicast+0x710/0x710 [ 459.869665][T21343] sock_sendmsg+0xd7/0x130 00:16:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000009000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 459.874093][T21343] ___sys_sendmsg+0x803/0x920 [ 459.878798][T21343] ? copy_msghdr_from_user+0x440/0x440 [ 459.884285][T21343] ? __fget+0x388/0x560 [ 459.888458][T21343] ? ksys_dup3+0x3e0/0x3e0 [ 459.892896][T21343] ? __fget_light+0x1a9/0x230 [ 459.897600][T21343] ? __fdget+0x1b/0x20 [ 459.901708][T21343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 459.907971][T21343] __sys_sendmsg+0x105/0x1d0 [ 459.912569][T21343] ? __sys_sendmsg_sock+0xd0/0xd0 [ 459.917638][T21343] ? trace_hardirqs_on_thunk+0x1a/0x20 00:16:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 459.923108][T21343] ? do_syscall_64+0x26/0x6a0 [ 459.927804][T21343] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.933889][T21343] ? do_syscall_64+0x26/0x6a0 [ 459.938586][T21343] __x64_sys_sendmsg+0x78/0xb0 [ 459.943373][T21343] do_syscall_64+0xfd/0x6a0 [ 459.947903][T21343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.953898][T21343] RIP: 0033:0x459819 00:16:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x0, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000000f000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 459.957817][T21343] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 459.977442][T21343] RSP: 002b:00007fabf3c31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.985877][T21343] RAX: ffffffffffffffda RBX: 00007fabf3c31c90 RCX: 0000000000459819 [ 459.993874][T21343] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 460.001864][T21343] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 460.009852][T21343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabf3c326d4 [ 460.009862][T21343] R13: 00000000004c7560 R14: 00000000004dcac0 R15: 0000000000000004 00:16:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x0, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000080)={0x7, 0x435}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff0f, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:44 executing program 4 (fault-call:1 fault-nth:5): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 460.170997][ C1] net_ratelimit: 20 callbacks suppressed [ 460.171006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 460.182520][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:16:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002880)='/dev/dlm-control\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000028c0)={0x3, 'veth1_to_hsr\x00', 0x8c}, 0x18) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendfile(r2, r3, 0x0, 0x10000) 00:16:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, 0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000221000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 460.411327][T21385] FAULT_INJECTION: forcing a failure. [ 460.411327][T21385] name failslab, interval 1, probability 0, space 0, times 0 [ 460.424276][T21385] CPU: 1 PID: 21385 Comm: syz-executor.4 Not tainted 5.2.0+ #71 [ 460.431926][T21385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.441991][T21385] Call Trace: [ 460.445309][T21385] dump_stack+0x16f/0x1f0 [ 460.449681][T21385] should_fail.cold+0xa/0x15 [ 460.454304][T21385] ? fault_create_debugfs_attr+0x180/0x180 [ 460.460146][T21385] __should_failslab+0x121/0x190 [ 460.465104][T21385] should_failslab+0x9/0x14 [ 460.469640][T21385] kmem_cache_alloc_node_trace+0x269/0x730 [ 460.476971][T21385] __kmalloc_node_track_caller+0x3d/0x70 [ 460.482643][T21385] __kmalloc_reserve.isra.0+0x40/0xf0 [ 460.488040][T21385] __alloc_skb+0x10b/0x5e0 [ 460.492475][T21385] ? netdev_alloc_frag+0x140/0x140 [ 460.497610][T21385] ? __kasan_check_write+0x14/0x20 [ 460.502735][T21385] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 460.508299][T21385] netlink_ack+0x25c/0xb30 [ 460.512758][T21385] ? netlink_sendmsg+0xd60/0xd60 [ 460.517727][T21385] ? mutex_unlock+0xd/0x10 [ 460.522158][T21385] ? genl_rcv_msg+0x106/0x16c [ 460.526855][T21385] netlink_rcv_skb+0x376/0x450 [ 460.531646][T21385] ? genl_family_rcv_msg+0xf90/0xf90 [ 460.536961][T21385] ? netlink_ack+0xb30/0xb30 [ 460.541566][T21385] ? __kasan_check_write+0x14/0x20 [ 460.546706][T21385] ? netlink_deliver_tap+0x25c/0xbf0 [ 460.552033][T21385] genl_rcv+0x29/0x40 [ 460.556038][T21385] netlink_unicast+0x531/0x710 00:16:44 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0) fallocate(r0, 0x0, 0x4, 0x3ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000180)) 00:16:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x1000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x101000) accept4$tipc(r2, 0x0, &(0x7f0000000100), 0x800) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="ccf417dab136aa95b2ead4ef557e3680530583fa0af03812f434a0924b84becc9a7df0ebb888255b62c419829852b58d7f0cf1108b343cf83dd49a583d44774f893be7b94a7b7da3229deef7936e1b1cf33af505e86e4153ef5c4cf2c975d8bd081fbb456761db8cea5da1b83e6c6efed34dc90d04cb2cf277d26d418886ea1d14c2923e3f673e0a2084ef3ad83a2bdc7fe18b03d9ca73d04cb5de2293ae3162f903de996477b06035ee9c98523f277fc94d52d948450cb53ff79ed5c242e240eb6ffc5b51b9a906cfcc4ca0262da98672ee1021b8fa6ec6e2", 0xd9}], 0x1, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) [ 460.560829][T21385] ? netlink_attachskb+0x7c0/0x7c0 [ 460.565953][T21385] ? _copy_from_iter_full+0x25d/0x8a0 [ 460.571346][T21385] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 460.577080][T21385] ? __check_object_size+0x3d/0x43c [ 460.582294][T21385] netlink_sendmsg+0x8a5/0xd60 [ 460.582320][T21385] ? netlink_unicast+0x710/0x710 [ 460.592019][T21385] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 460.592037][T21385] ? apparmor_socket_sendmsg+0x2a/0x30 [ 460.592054][T21385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.592071][T21385] ? security_socket_sendmsg+0x8d/0xc0 [ 460.592085][T21385] ? netlink_unicast+0x710/0x710 [ 460.592116][T21385] sock_sendmsg+0xd7/0x130 [ 460.624323][T21385] ___sys_sendmsg+0x803/0x920 [ 460.629032][T21385] ? copy_msghdr_from_user+0x440/0x440 [ 460.634531][T21385] ? __fget+0x388/0x560 [ 460.638715][T21385] ? ksys_dup3+0x3e0/0x3e0 [ 460.643172][T21385] ? __fget_light+0x1a9/0x230 [ 460.647872][T21385] ? __fdget+0x1b/0x20 [ 460.651962][T21385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.658220][T21385] __sys_sendmsg+0x105/0x1d0 [ 460.658239][T21385] ? __sys_sendmsg_sock+0xd0/0xd0 [ 460.658271][T21385] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 460.658288][T21385] ? do_syscall_64+0x26/0x6a0 [ 460.658306][T21385] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.658320][T21385] ? do_syscall_64+0x26/0x6a0 [ 460.658342][T21385] __x64_sys_sendmsg+0x78/0xb0 [ 460.667950][T21385] do_syscall_64+0xfd/0x6a0 [ 460.667973][T21385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.667992][T21385] RIP: 0033:0x459819 [ 460.708201][T21385] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 460.727822][T21385] RSP: 002b:00007fabf3c31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.736282][T21385] RAX: ffffffffffffffda RBX: 00007fabf3c31c90 RCX: 0000000000459819 [ 460.744304][T21385] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 460.752289][T21385] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:16:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x80) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x9, 0x6, 0x1, 0x9}}) recvfrom$netrom(r2, &(0x7f00000000c0)=""/87, 0x57, 0x0, &(0x7f0000000180)={{0x3, @null, 0x1}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x4, &(0x7f0000000200)='[#$\x00', 0xffffffffffffffff}, 0x30) setpriority(0x1, r3, 0x5) sendfile(r1, r2, 0x0, 0x10000) [ 460.760284][T21385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabf3c326d4 [ 460.768272][T21385] R13: 00000000004c7560 R14: 00000000004dcac0 R15: 0000000000000004 00:16:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xffd2, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000140)={0xffffffffffffffff}, 0x5, 0xd}}, 0x20) fcntl$getflags(r0, 0xb) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x80000000000000, 0x4a02) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000003c0)={r3, 0x1, 0x6, @local}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000321000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, 0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 460.889377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 460.895225][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 460.901152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 460.906973][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:45 executing program 4 (fault-call:1 fault-nth:6): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x2000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000421000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) unshare(0x10000000) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) [ 461.122334][T21426] FAULT_INJECTION: forcing a failure. [ 461.122334][T21426] name failslab, interval 1, probability 0, space 0, times 0 [ 461.135657][T21426] CPU: 1 PID: 21426 Comm: syz-executor.4 Not tainted 5.2.0+ #71 [ 461.143302][T21426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.153389][T21426] Call Trace: [ 461.156700][T21426] dump_stack+0x16f/0x1f0 [ 461.161050][T21426] should_fail.cold+0xa/0x15 [ 461.165673][T21426] ? fault_create_debugfs_attr+0x180/0x180 [ 461.171498][T21426] ? find_held_lock+0x35/0x130 [ 461.176311][T21426] __should_failslab+0x121/0x190 [ 461.181268][T21426] should_failslab+0x9/0x14 [ 461.185785][T21426] kmem_cache_alloc+0x47/0x700 [ 461.190568][T21426] ? lock_acquire+0x190/0x400 [ 461.195270][T21426] ? netlink_deliver_tap+0x148/0xbf0 [ 461.200579][T21426] skb_clone+0x154/0x3d0 [ 461.204855][T21426] netlink_deliver_tap+0x955/0xbf0 [ 461.209990][T21426] __netlink_sendskb+0x62/0xc0 [ 461.214779][T21426] netlink_unicast+0x60a/0x710 00:16:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000521000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 461.219586][T21426] ? netlink_attachskb+0x7c0/0x7c0 [ 461.224729][T21426] netlink_ack+0x63f/0xb30 [ 461.229171][T21426] ? netlink_sendmsg+0xd60/0xd60 [ 461.234135][T21426] ? mutex_unlock+0xd/0x10 [ 461.238575][T21426] ? genl_rcv_msg+0x106/0x16c [ 461.243288][T21426] netlink_rcv_skb+0x376/0x450 [ 461.248071][T21426] ? genl_family_rcv_msg+0xf90/0xf90 [ 461.253373][T21426] ? netlink_ack+0xb30/0xb30 [ 461.257988][T21426] ? __kasan_check_write+0x14/0x20 [ 461.263124][T21426] ? netlink_deliver_tap+0x25c/0xbf0 [ 461.268428][T21426] genl_rcv+0x29/0x40 00:16:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu\x00\x00t.cpus[\xb3d\xe2\xb0y\x9f\xa6o\xb1\xc9+=\xb4jyT\x85\x89\x86\x1b\x00\xad;\n\x00j\xba\x1c\x93`JU\x96\xeb$\xc0\x84l2\xbffu\xc9\xda[\xf3\xfc\x96q\x9fk\x0e\b2t\x8a$Q\x9ci\x10\x1fD9^\x86\x8a\xda%\x8c\x8c$\x11g\xd0-\xa8}\xc0Wo\x01\xc4js\xaa\xde\x00\x82\xd7Qo\b;PxV\th\x06\xf8\xee\x9fo`\xfd\xde\x8d\x15A\xf3!u#', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, 0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 461.272439][T21426] netlink_unicast+0x531/0x710 [ 461.277242][T21426] ? netlink_attachskb+0x7c0/0x7c0 [ 461.282371][T21426] ? _copy_from_iter_full+0x25d/0x8a0 [ 461.287763][T21426] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 461.293498][T21426] ? __check_object_size+0x3d/0x43c [ 461.298713][T21426] netlink_sendmsg+0x8a5/0xd60 [ 461.303500][T21426] ? netlink_unicast+0x710/0x710 [ 461.308446][T21426] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 461.314016][T21426] ? apparmor_socket_sendmsg+0x2a/0x30 [ 461.319491][T21426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.325750][T21426] ? security_socket_sendmsg+0x8d/0xc0 [ 461.331224][T21426] ? netlink_unicast+0x710/0x710 [ 461.336170][T21426] sock_sendmsg+0xd7/0x130 [ 461.336205][T21426] ___sys_sendmsg+0x803/0x920 [ 461.336225][T21426] ? copy_msghdr_from_user+0x440/0x440 [ 461.336253][T21426] ? __fget+0x388/0x560 [ 461.345338][T21426] ? ksys_dup3+0x3e0/0x3e0 [ 461.359372][T21426] ? __fget_light+0x1a9/0x230 [ 461.364675][T21426] ? __fdget+0x1b/0x20 [ 461.368765][T21426] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 461.369354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 461.375051][T21426] __sys_sendmsg+0x105/0x1d0 [ 461.380894][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 461.385435][T21426] ? __sys_sendmsg_sock+0xd0/0xd0 [ 461.392301][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 461.398116][T21426] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 461.403914][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 461.409300][T21426] ? do_syscall_64+0x26/0x6a0 [ 461.409319][T21426] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.409341][T21426] ? do_syscall_64+0x26/0x6a0 [ 461.409364][T21426] __x64_sys_sendmsg+0x78/0xb0 [ 461.435222][T21426] do_syscall_64+0xfd/0x6a0 [ 461.439750][T21426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.445655][T21426] RIP: 0033:0x459819 [ 461.449569][T21426] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.469214][T21426] RSP: 002b:00007fabf3c31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.469230][T21426] RAX: ffffffffffffffda RBX: 00007fabf3c31c90 RCX: 0000000000459819 [ 461.469238][T21426] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 461.469247][T21426] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 461.469255][T21426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabf3c326d4 [ 461.469264][T21426] R13: 00000000004c7560 R14: 00000000004dcac0 R15: 0000000000000004 00:16:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./bgrou&5\x86\a7\xab6*p.!$\x04\x00u/\tyz\xaa=lB:\xc4i\xd6\x7f\xd2\xfd$\x92\x1a#\v\x1cJ\xad=#\xb3\xe0S\xf7\x04f$;\xec~\xd3\xe4\xd5\xc9\xef\xad\xd3g\xb09\xb5\xee\xb1A\xaaC\x1e2\x15\t@m\xd9h\x9d\aU~\xe7\xea\"\xf2\\.k\x8f\x96/#\xb5A\xe3!\xbd\x83Q\xe8\xef\xe2\xc0\xee\xb1c\x92Ad\x91\xa9\xb02\xc0\xdc\xf1\xe9\x9b\xc8\xb4L\x10\xe1\x06\x94\x88\xa0\xb6j\xc1o\xc5]\xa1\xb4w>i\x14\xb8\"p)c\xef\xa8Z\x05\ri\xfeQ\xdb\x01R\xb2\xab\xda@Q\xcc\xbcChw`\x19Ak_/\x9f`\x00\xd2\xf0\nD\x94\xde\xc6\xb6\xad,\xd8\x8f&R8\x9c\xf9\xee\xea\xc1a\x8e\x9fiN\xc4\x9d\xdf%\xbd\xcd\xc5\xb6\x97\xc9V\x0f^k\xbf\xbb\xb9\xbe\x06\x1d\xa1h?c\x19/\xc0\x8b\xac\xc9\xa6\x91+<\xbd', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x1000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x7}}, {@cache_loose='cache=loose'}, {@posixacl='posixacl'}], [{@fowner_lt={'fowner<', r3}}]}}) 00:16:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000621000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x18042, 0x30) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x9, 0x4) 00:16:46 executing program 4 (fault-call:1 fault-nth:7): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x3000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000721000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) sendfile(r1, r2, 0x0, 0x10000) prctl$PR_GET_DUMPABLE(0x3) 00:16:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) socketpair(0x3, 0x80000, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xec, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x93}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x6c0}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) [ 461.965028][T21477] FAULT_INJECTION: forcing a failure. [ 461.965028][T21477] name failslab, interval 1, probability 0, space 0, times 0 [ 461.978130][T21477] CPU: 1 PID: 21477 Comm: syz-executor.4 Not tainted 5.2.0+ #71 [ 461.985771][T21477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.985795][T21477] Call Trace: [ 461.985823][T21477] dump_stack+0x16f/0x1f0 [ 461.985849][T21477] should_fail.cold+0xa/0x15 [ 462.008109][T21477] ? arch_stack_walk+0x97/0xf0 00:16:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000a21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 462.012897][T21477] ? fault_create_debugfs_attr+0x180/0x180 [ 462.018906][T21477] __should_failslab+0x121/0x190 [ 462.023881][T21477] should_failslab+0x9/0x14 [ 462.028395][T21477] kmem_cache_alloc+0x47/0x700 [ 462.033175][T21477] ? lock_acquire+0x190/0x400 [ 462.037865][T21477] ? napi_disable+0xe0/0xe0 [ 462.042405][T21477] skb_clone+0x154/0x3d0 [ 462.046661][T21477] dev_queue_xmit_nit+0x344/0x990 [ 462.051700][T21477] ? validate_xmit_xfrm+0x40f/0xed0 [ 462.056914][T21477] ? __x64_sys_sendmsg+0x78/0xb0 [ 462.061874][T21477] dev_hard_start_xmit+0xbb/0x930 [ 462.066927][T21477] __dev_queue_xmit+0x221b/0x3510 [ 462.071961][T21477] ? __kasan_check_read+0x11/0x20 [ 462.071980][T21477] ? mark_lock+0xc0/0x11e0 [ 462.071997][T21477] ? should_fail+0x1de/0x852 [ 462.072019][T21477] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 462.081455][T21477] ? __copy_skb_header+0x2e8/0x550 [ 462.081472][T21477] ? skb_pull_rcsum+0x300/0x300 [ 462.081489][T21477] ? rcu_read_lock_sched_held+0x110/0x130 [ 462.081508][T21477] ? __kasan_check_write+0x14/0x20 00:16:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f00000002c0)=""/173, 0x19, 0x20, &(0x7f0000000240)={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 462.081521][T21477] ? __skb_clone+0x5c8/0x820 [ 462.081541][T21477] dev_queue_xmit+0x18/0x20 [ 462.081555][T21477] ? dev_queue_xmit+0x18/0x20 [ 462.081573][T21477] netlink_deliver_tap+0x8ea/0xbf0 [ 462.081606][T21477] __netlink_sendskb+0x62/0xc0 [ 462.135998][T21477] netlink_unicast+0x60a/0x710 [ 462.140786][T21477] ? netlink_attachskb+0x7c0/0x7c0 [ 462.145923][T21477] netlink_ack+0x63f/0xb30 [ 462.150469][T21477] ? netlink_sendmsg+0xd60/0xd60 [ 462.155435][T21477] ? mutex_unlock+0xd/0x10 [ 462.159854][T21477] ? genl_rcv_msg+0x106/0x16c [ 462.159871][T21477] netlink_rcv_skb+0x376/0x450 [ 462.159887][T21477] ? genl_family_rcv_msg+0xf90/0xf90 [ 462.159902][T21477] ? netlink_ack+0xb30/0xb30 [ 462.159917][T21477] ? __kasan_check_write+0x14/0x20 [ 462.159939][T21477] ? netlink_deliver_tap+0x25c/0xbf0 [ 462.159959][T21477] genl_rcv+0x29/0x40 [ 462.194469][T21477] netlink_unicast+0x531/0x710 [ 462.199254][T21477] ? netlink_attachskb+0x7c0/0x7c0 [ 462.204384][T21477] ? _copy_from_iter_full+0x25d/0x8a0 [ 462.209773][T21477] ? __sanitizer_cov_trace_cmp8+0x18/0x20 00:16:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 462.215499][T21477] ? __check_object_size+0x3d/0x43c [ 462.220713][T21477] netlink_sendmsg+0x8a5/0xd60 [ 462.225500][T21477] ? netlink_unicast+0x710/0x710 [ 462.230463][T21477] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 462.236028][T21477] ? apparmor_socket_sendmsg+0x2a/0x30 [ 462.241495][T21477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.247744][T21477] ? security_socket_sendmsg+0x8d/0xc0 [ 462.253215][T21477] ? netlink_unicast+0x710/0x710 [ 462.259050][T21477] sock_sendmsg+0xd7/0x130 00:16:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000e21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 462.263482][T21477] ___sys_sendmsg+0x803/0x920 [ 462.268176][T21477] ? copy_msghdr_from_user+0x440/0x440 [ 462.273661][T21477] ? __fget+0x388/0x560 [ 462.277841][T21477] ? ksys_dup3+0x3e0/0x3e0 [ 462.282309][T21477] ? __fget_light+0x1a9/0x230 [ 462.287096][T21477] ? __fdget+0x1b/0x20 [ 462.291202][T21477] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 462.297739][T21477] __sys_sendmsg+0x105/0x1d0 [ 462.302345][T21477] ? __sys_sendmsg_sock+0xd0/0xd0 [ 462.307397][T21477] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 462.312885][T21477] ? do_syscall_64+0x26/0x6a0 [ 462.317582][T21477] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.323669][T21477] ? do_syscall_64+0x26/0x6a0 [ 462.328370][T21477] __x64_sys_sendmsg+0x78/0xb0 [ 462.333156][T21477] do_syscall_64+0xfd/0x6a0 [ 462.337705][T21477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.343702][T21477] RIP: 0033:0x459819 00:16:46 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000001b40)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x6000) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000001d00)={0x80000001, 0x0, &(0x7f0000001b80)="bf5b848e1a9f60d2ded5b39fba5c17cce0b624432ae2bbd71d3f671117ab257b06c597003437e097db5c61ce0f75fd19b940ae2ddeb9398d47f0fb910bbfcf58b379964c6c072a7ab2bc10148bc5a1f6ee155329c5b78f2603a45e4e8877a4de1c7b1a9791547f6925f12f8a578df1dd215f26cedcbea4f87b68d5e48f177477cf95a27ad818439f5dc0cc8d91ca74beb192ef", &(0x7f0000001c40)="e628404f0182ddc35f6a05232742951f51e16700e0e299ecdfcca2b526ce55adfef70b7cb4c20c67986c8bf4f705c1f05ef7b4647acbe8e269025261a25f9963a47aadd27cc87d2fb8ad071145786dc6799f47f006192fa1e9a5c6388ec1d3970fdd71f2f978b68d1fc3c6e48aaa5d3f2142a1b64813e242808f69284073dfe3d2974e494b1f121446093df9bfe05d872fde80c603a9a512b9f7a561913dc7", 0x93, 0x9f}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/self/net/pfkey\x00', 0x40, 0x0) sendfile(r2, r3, 0x0, 0x10000) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000500)='./file0\x00', 0x8000000000000, 0xa, &(0x7f0000001a00)=[{&(0x7f0000000540)="6747d3664b4bb7de8dc7bd5caa75cf6c2186e625ec6b8a9a851c55d692fdcf417e544d557f485f306d71254e9e24e43c3b693913e1f71fde62c99f0d7bb7fc42ab0d1e3fb935e5840bd1ba263356d6defda15173400ede3234082aaf7b3f0e123f410bb9df1272c7f9e99d43852bd4ddafd418583ae9ee8848420e581889a0c6be6ec18d19a92c2646df543bf922d9178a27d410c95245a9fa790e5eea1de65e1162865577d84a668413469e", 0xac, 0x6}, {&(0x7f0000000600)="68b7959aebe80345d95075f02a8e7bceb5583587fc6f9fafa3d5eef78b236aea45d3517015c31497be4abc160f65d213e646d00b1ab72cafbf6029778e41398ec5552bc2b880a2dfda4d1fc58f9e9fd7607f65c0936d29ffd312ac910c4ad7750a88c47fbee8dd72dd63580e37717e71aa9f7d0c3ebfa5c541c8010a68acbe5b9c477c347c36ffae46fec3e8b6468706be65937de6a0ab0d4742f11d69ef933a493ded20b124a07a6feec7e20028df82228261ab7ca936", 0xb7, 0x20}, {&(0x7f00000006c0)="a7dc6e0fcc273b55269de1fb562ffa4f38f6003fdfc15c0bc9bf2d1f7fe0930e2fb11a6a0269c933ff3b8642ffbb2b32c4256959508fb2398320f838817fe95edf8c11a5d1bbdb160a8e94bb08957fc51f02f675276c57ed23bef0bcede9862be72ff13af6c6688f013f39bbd45dd0f7c8c2fc25d36091b07717719045f1d1c000b1ec86bc53d05b68f989375d564e1b598be315058364fc69d3c61f8f96b5c9e07175a1dc202854b1659fdc082077e70c906fda94ebaffbe3b300cefdaed5471b2ad3ceb40e862ead90d29fd88dc4c8097b65b7ded2ea", 0xd7, 0x9}, {&(0x7f00000007c0)="433c09f19199b5d0da1e74229d9d85b0c3f98694f4ccad79e2fd25e5bd3303870f046e8d0cfc3198fe0d625d224bf05e9d6f56ef3b9f7c3d4d8af4", 0x3b}, {&(0x7f0000000800)="303016dea2a860698680bc70cb", 0xd, 0x7}, {&(0x7f0000000840)="76d323f06756116540a10d9e72d3049c8e58ba62b5c22f0b78c38ba23df1fed99fba591e9b3663726addaed70008f07ebe697aaf06ad5eb77a5baa1445905b1880d51aa38924195045fc31e0c01b07a61f4c6ff09a95fecfa1a7782637d8fb520bd09a6e5d6ab8b9add80db6d2ef26cefe08c83e4cdfc3f1ae0b656b2116f972107cd0cc2aa05d2aff720abdba5d01849ea8836d469fca1034d0c1bc8deb35", 0x9f, 0x8001000}, {&(0x7f0000000900)="1b8a1e353e1d3781b2c412f74aa9c7c213", 0x11, 0x9}, {&(0x7f0000000940)="cfad3020b3a9e85c25ce814a13b3b48aecbf607df3f4a582f8baa4ec9a4abcd75d3fd563678bf8aeba39b7d324b8d57cec9388b8333864bdc62772c4aefc7f4db6a8ac779d25605ec74810b58548c4164e93de2e38128d1f232f20d47e8045c4271ab5bf34395a929b327eac01ca00db1080bb7d32b9a2652ce7cd0148d0401a74436e33cdde970d6adac560fb5d814a091ade0f66190c712ef6062a755735d285f21193ce804e8a0558b3487ecc0ee7e6a5fdf126c04f2c9e2cb8c9644d3a56f6ecfc3d9bb1da35374d9a1350ef38790cd20b635b3288cf6ad27fb782d4e53058fa85b7300f010590c26d7972f242553b2640170e65b72f2d7515014b43a09c7d1b97d916da407d8cf41530108e4530338013cffcbbca5f44315ff125a89e6386cf73614cf1a27bc914e478ba4e5942050bd0a7024018bd77c3b51c8a028abf40c318a3e15774a8fad018045e63cc596b2bca491522d523584ddc058132c2a61473789c623c999c2492bd2dd0af1944d28977d80b2498f802f122ba4b7d084d6505cb3d9b68790b725d17e3e0ea78a184fac42ba3986c96e0323f5dff7130a53a7070f074a7ba1a0fa1c90ac603b0ef343ab5409e4644da2d434ab2211e86680581dc6164919dfd049e35a94822b6b505fd995bf5150d84497ddef52bd0c4521c95f624b4a12eb9b02bee875da1215520f28f8386d1b77a2cc79b69cc7dc2dcc49990f8d0bb3ec4e5ff643cd0494c69dacafa5bcac5e6a6e8ae0a0ea2210a15fc5d2071fafc2ed41dff8f6075c35022d1cc6f3e7180c1643856ff1a673f2e178993e2d809e352344795f8f33ac1843d8453ba634da919874cb63fca2965419b079b4b7df3fd7ffbf2da98f0b835bdae6674f16b9008be9256c97e57778c877683a7ecdf6403d25231bac4467220f9f4e1eebdfe76ff264033e522c5e05f372f493172625004f733dff1e7c5a5c3887f38199fa90202c7dd493075478b0bc8d809eafae979f9d9df0cacef4b7d22f997e8c1ff0e1a06f6cae4d1a07d79893d2bf97430673a8c23775f0fddd953ad1bce6dfba55c3dc1125dafb65563de9273a64832855d04d55cbcd2df101935da65a982c28ab7b920e7dcf19ec9c88a0b9f4356d707960ca4fa1df383c25bfddb9a16e708c17ca482cb99a79cb611355bf4a81c56839f4d73865226a5cf710da9956a3dcaaaf13ec0127faa5d974337db5e01591b2cd13d8d26a67c61e64f596f95751c1a6b4839bd5dc42d51cbbe985799447ddad53d5c338388a63b4139a5d1cf8c82534fef1f7dc14a16e6d74f48fde03ab8fa919f56eaa721104cea8028adb9a35a137b878526275081bbf669f8686a9cf3b0b502e69b9feb70065d46f7a44f9a6180c2050d11f1dcd02e663ac885705e9cb4ff9a7693126927fcb58067f22ac125bda0d400a62304a99e6cdd4a8452563eddec1a04f8db22ff79c01b668f81a8e1fd7224a448af89ff1c923237bc436b2b5e23ef48571eeb7b264712eb40c0a540ef33fdab1a29449bd179ee2bc22eb7acdd2d751dd23c7cc4952313b356b0149bacda0a7004edb219c10e9befd0865904cec27bac7c85f77f0e99678d844438cb5377f69723340f5486708970638592d23d8c664468927ac3bcb24181e8796a10ec1847be1e97bbdea555a879d4e8591f642c58d271b208df0fda1111cc3a658d735dde487072f4d74f1613e66a49c03fa5916e850421192a1aabaf9fb516d010e41b450aa52ef6b4ef5ed5d37e1bd3414e602709e06422969574d95bc27a514d59b3759a9dd4464e4ac196e09f2174f2971ff0d8f7da02f5916312a0d3038a6fde87ee1dcbd6245375c14b272f678b92dce6eb1d7e27bc35ef670f5430532c2c2a6c3df53e2102bd1ba3c09b286cba1a71576d8acf91885378abcc9b47909bb3523a6a363030ec3219f902a627fdf846210adee0ccc1c0922adb44765479081b8e857c9b9459769548d723722dc79a10d3e9849b9241289216e16d650a7a6c9a93b930e910013a177acde89c759196c1948b65ba4470be61ae1762520e3f2523ca566a18e5f15c65765311ec6fce9381ba459a6c6e16ee55be9e6f837be065dbabeecb2ce2c94f6bf6d8440738f993aae62178798e2dd431f62803a6a30b9d26913e7fa4ca2a7b096de4bdd73cfd334cdef9095f42bee49239caea4399427b886e1fa41600485cbeecfa5b7a0a6ff63b24e16d8abcb7462bb1bbb9f076c9c90b55e1f3fd0e5af8eb9c2a3094c58fefe02bc4e3d108a849fe739c0bb3c5ea9178ba465713add43b27c055f650ee9dcf799f6c3f6211532f65f335609227cfdff5b945ae278f56c1dd255c1200babfa4663e7dcdd3b980d49ddd5ac36433d3088a43d0959ec5d6dcfa0b040d3093c1274ac709d703268cc5cf3b8d813e4d8a2d439b9ffc6aa8f78a8070490632d86843f3e64503e79ddc706affdee09531a89ae7f8b1ddbea07d6b75c5480fd3080eb3a367113333bf5d8c0b1d375a2d81a30a80c22de096114a0b7a869fa2d88ffd2b0253e910f156d2098ae37ff58a11a18ba7aabd4179d2369534a94db0558d5a81211adda4a9381a72766a9c9a1190db80db576aec13b8b26b3589868f380b490b176c7cebd46231f18d607685f30f17dc4993a15e80a54ef693c00a7daad43add2997ab1f4feeb0cacd8bd2f6c954790cae008d890a3936a6a4273e5c8ff9b361bbdca5622c4e4c8cb04534b14353e6ecced37c730cf4bc3ef0419ef5ebd0edee7ae1b15a65304d2a54a5d8a054c12e747985323f083312bfdfc93e33a83c45d14e4d7a7fc82b698ab45bb5c05babe183d27963e197401472b84223500d5dccb86dd17c4c6fffc910825733ad194e75a8475c97fa4434f97506d905d4cfbe17659e0b28e82507cfabb991e9f2b018b420f558be01f5e2b23880ddf56c6459a52245ec4529b08fc18c53d319d02c35f3352c0fe50987738885694eaea3d30b248566fdd0e37a408de4625d8d2d3243a8709c56eb21b5fede3b5f721e4dc2f04263bb429d01a13f8ae1305eab4e16ed4fc24b493cc21f974a6fb6c8e74c00384bb4308f6e1846c17f625760e02ed258c2beb69ccfa37187473728da75c976d342c71893b64d7cb43ebbb28c4d51bbd66265a8c038c408396c75eaaa9b298ef290a814e6c595515b6378b21429d05b771b3b8a93fca10e1fec46af116eb57a1b5047c25046369b1815b24f13058884e16656fc3e671b1146dbc31b87656441db75c07050349a21d0fac9b1945a44215aec5b013e0892911c914f1c03981bca185ca8073b5ba69fd2521d385ebe8b9d0cf38d1af6c903ca2efa36519be2ecd83ae8969c3e4218c9e5ff93a3a0a8db247615a44894dd66f4c54c086b020066bc2f6eabc48566dd778808681fde68a85f647ce90d798416d3d7d5bf8a7d0f00db716e70dc28ede6fb3a0ac0d95262f9dddbb9260b9b7c81d0f82db4ebddef183a1c64da2a3287a405a378d5979f6069d88db08b5bb9f237f3caabd27cbc09f725f6b38cfd54e088b2b9033900bca0647d07fe3fa8a16fcfce870107a0f170b8ca0ed9d6172ff629f05bab9d8be3c2b20961071f1a3ec4532b585705f4ed09f15971cfe038ad98cd4b5f713068f427ba257050ef45a2903ccd338fda92efc80380672b3aa87bbdd0befaa746abd1c4f4c7ab9c2e216a1cf3e6b4450b5f5cafcbe96ac5605f97433902933e7d8e8549fc3b4de32ff33339864dc25b066da974789a3cdbb4b0707d026ec471059954f4b07e7150630482875cc02ac18946154acc020586c1d652a334a694632992a34d3c36cea69b80c232755983bf730f87f6350401612024db7ff6c15edd9012790b225be28d003016543da2e3ded747b5ec22591bf06ccef8ba93767eabdb30270a20e475b9fed53a16ff1ffd28ba01e809a19dc9bc2fce16b9b6914de95868801f43118dcd8f73e7d268b03892d47801ac39854b2920b2d18c400769130992413fc5c7bcd778a17172a106b7d55bda041db6acb61864d50a37e19830ac42eebbc0247b9ba2b6cea41dccf0ab40565719873f0f18f35e7f68a1b80cfb66951f65e533ad4fc1c19fc6b2557fde575a04f3e98ad8b00d538028cd5a57488b0c9ac7ed95d38697dcf2b8030e1f00148d093270bec9da19589e5f28272f1348fae804a0e8d9f592a1b8a0556d63a1cbb5c5759025771f6543d9c3dafb5a59166314b8621aac19a5a9b4014274bc0d66489212dfc752ca8e518697f4ccc6ab4cfdb6af5e4b86d505fee5520e8e6a4b3d36584028e59253e59526c321113929bd010d63e1e67d57f0c7ca4a988aafbf02d536579859607567f8c2fb8bd80b290d2a73d86a85c636d784d9a508800ab23c90c59c3964bb7a48d5cc81f9255a0af1d5187a699abdaaf5c00645da066899384c335f738b335472bae5c5cd0d279b48cb3a1acb90a017370e9d43bbcc1063015b8228563ea57c30f96f3793feb5f00ec04f2bad0ffa299f53f610659b8de7221dfc63cb6efcffc13f58af89c108c646bf5fcd26386a65093bc3bb530fdb741ea85697d08a529f56f239fcd95801a21e593a0e72cb735a4e5876124a28bdb65f830c8831fd5787ce561a3104b1382d13009c86c35d38a22e92d40ef4b4f687359213017c60500d97dc518887b523ce74d0d9a67c5fb439ef655858387b94f99dcc890399e5e7de7714a34a415ae88c4f144e427af43ced76980f16382ebcea0155df5ffbc4a1b7a2a67c94387ffeb68e6cb8cfbd1ed974791e0fe281192282c5f3be221b076479dac4d7c0fb6c5352f2a1cd52a3851801e3e5a2b82d7e46b96fc1cce75350dcca37e9df2a84c236246c939cc2ed1dfb7df4d16be1d89ab68a4ce8c46ce159c5128e755e2ef1fdcc3a2911d8bd87460a9fb58fe4757b796d481d9ed8e60c36505ec489a464735f0b42093d0d3bcb7dd91461f5b9eb51593658fd224c24984a7c81aece80446ca17048c2fa4bf91e0483ee64c10e1d3f23b14cbb1c330c458c3852fbccf2fd3524c73f811d96b3e95656e3af507ca6f6ea56ee833a466accf37e197cc829325493d4ab5cb185eb1e45ff8d882c16e6befd674fd4e2272d09ccbfca3ffc3004e2ffda08e8b7043eab8199a6b687f88b23a3ca3cece7ade0b54f71bf0aa0e131f4ba42e084d2579f08985e5441a50f6f4aaa2c562829f865ac03fa80f9a6e12e9038a753e3e299366c1986b44e118fe8aa8f7572b4312fd526a9984352c052650733a5a76065632e079f04bad394ba39345a9705875d704c48bb9a7c5a9a54b183a214b61357b8a376ad4e876c62cc5f3183c30c9d8c66637a71f9090ed02c4de9064945184c4efa3393741cd4a5dee5e0fa899266bf5e16671b03452ebd7097df48eaf70c1aea5a44b0f2418ebe88450d1198e6e7d8b5673d3cf5acd6e84c55fff78c7447be48b8363f4ecd72f3db735b1149342f683ab6e875cdcee3a25d1a97f62b7b4f7169ea8b426eed5d140a24b8d9860f9bfbb8819ffb8f31830710804046713f0cc68d293f6988612562f91aac89b4e0ad0dd6f085f077d568e5ef51c933367c6b766b725ae9f1711809bc1a5d4c23a8a8c34294fb0ed1295acba6c767a94503df6c01ecf3001d116262a3d37e29b66a9a1e877e356b19de7faa54b5a688ad8aa654b013d160bc7d62fc528230c95c8477e03e0bf4527785714c8d512268a72f9f3a4e538075eeedda79b205e8a090962dddb82f54f9a6029133d3d0e3ad35b3a33e7de55c71bbb8d41333ec114c900795e401f690950eb7ca32", 0x1000, 0x1}, {&(0x7f0000001940)="f41380e4175156a18fd49dae3650899694e3e103b2c0fd9bf2384815cb5a0c2f7b6258bb", 0x24, 0x7fffffff}, {&(0x7f0000001980)="43e698837eaf77c39569ba4f1240488019082d32afa2d7f5df3e81ffad066a9634f5795331591dbe82042a4e954dad8035119132f9f435847dff017ecbad4f31820b5e92a4753e1a", 0x48, 0x9}], 0x0, &(0x7f0000001b00)='\x00') r4 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0xf2e, 0x20300) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0xc0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="056304400100000011634840030000000000000000000000000000000000000010000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="7ff9975501000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000000000000000000004000000000000000852a747000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/69], @ANYBLOB="4500000000000000010000000000000032000000000000008561646600000000050000000000000000000000000000003400000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000d63000001634040020000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="85616466000000000700000000000000020000000000000017000000000000008561646600000000070000000000000002000000000000000600000000000000852a646600000000", @ANYRES32=r4, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0d63000006630440010000000c630000086310400200"/36], 0xba, 0x0, &(0x7f0000000400)="671596df19d49f6e2400c1d5428354abff8c2026a4a00bf015a0060be5b8c074c20e1b9a21d8fb58369acd86555602c4f093b94a65094a679a3fdf8c806feadee4a046fdbef8af187999046ec9f8f0529c63ccdcd2ad8cde7c28d3624bce9cdf5926d42ee26bedeccaa6b6b139192fb939290de5c70ce2cac68de942cae45989f97900ca07172a0910f63b1c8dba2bb2928d2f77132c0f9685e715142dc71e70d69d76ef7764c8a97f3350a7d0c788e84f0a9dcd24180aaddf1d"}) [ 462.347641][T21477] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.367355][T21477] RSP: 002b:00007fabf3c31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.375781][T21477] RAX: ffffffffffffffda RBX: 00007fabf3c31c90 RCX: 0000000000459819 [ 462.383780][T21477] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 462.391763][T21477] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 462.399741][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabf3c326d4 [ 462.407718][T21477] R13: 00000000004c7560 R14: 00000000004dcac0 R15: 0000000000000004 00:16:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xb5, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000240)) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x4000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:46 executing program 4 (fault-call:1 fault-nth:8): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000f21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00004821000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000240)="a0e24446e55f89d6095be022325d2311e9b2241305782dd60bf5c7076f5b8dc49f29f376c1d96fd1cb21284bbff59f64b8de1aa95357150063922818eec6381cbfcc54b4ca47c08360d0d6c20c01b410b19c9c857f6a5caa6586d80ae80132bf03470cbd", 0x64, 0x100000000}], 0x1002, &(0x7f0000000500)=ANY=[@ANYBLOB="636f6d6d69743d3078303030303030303030303030303030342c626c6f636b2d616f723d6e6f5f756e6861736865645f72656c6f636174696f6e2c757365725f78617474722c6e6f61636c2c686173683d7465612c6e6f61747472732c61756469742c61707072616973652c66736e616d653d2f6465762f696e66696e6962616e642f72646d615f636d002c7065726d69745f646972656374696f2c726f6f74636f6e746578743d757365725f752c61756469742c6673636f6e746578743d73797361646d5f752c726f6f74636f6e746578743d756e636f6e66696e65645f752c0000000000000049cd11b00327273eda550f667130a08c9409105633ce45b7f5a52cd1a03ad5b8a8569365ee62622384b39b45d1304849a6982ca2f5dd89a41c26373d0748f9"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0xffffffffffffffd7, 0xfa00, @id_afonly={&(0x7f0000000100), r1}}, 0x59f6bdd36b281cc4) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000004c0)={0xf, 0x8, 0xfa00, {r1, 0x9}}, 0x10) r2 = perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0x3, 0xfffffffffffffff8, 0x4, 0x2e0d, 0x0, 0x1, 0x40000, 0xa, 0x5, 0x8, 0x5, 0xb0, 0x2, 0x7, 0x8001, 0x5, 0x4c, 0xb0d, 0x8cd, 0x7, 0x80000000, 0x3f, 0xfff, 0xfff, 0x202, 0x5, 0x10001, 0x8, 0x7, 0x55a00000, 0x1c, 0xffffffff, 0x8, 0xfffffffffffffc01, 0x3, 0x3, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x2fd0, 0x3f, 0x1f, 0x5, 0x6, 0x5, 0x7}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1f) 00:16:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x80}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x2}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={r3, 0xf5, 0x2b, "7eded803e0cbfbd8d9d4c45e358fa9458e14e3101b7a61c9764bbbc6785201fe4973ee3c2f7786a622ec9a"}, 0x33) sendfile(r1, r2, 0x0, 0x10000) 00:16:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x5000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:16:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00004c21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x4002}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x13f, 0x2}}, 0x20) r2 = request_key(&(0x7f0000000000)='user\x00', 0xffffffffffffffff, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r2, 0x101) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000400), r1, 0x0, 0x2, 0x4}}, 0x20) set_thread_area(&(0x7f0000000080)={0xd79, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x8000000000000, 0xc6, 0x8, 0x8b8000000, 0x2}) r3 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x20000) r4 = getuid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = semget(0x1, 0x1, 0x400) semop(r6, &(0x7f0000002340)=[{0x4, 0x4, 0x800}, {0x0, 0x5, 0x800}, {0x2, 0x7, 0x800}, {0x0, 0x5, 0x800}, {0x3, 0x32, 0x1800}, {0x1, 0x20, 0x1000}, {0x0, 0x9, 0x1000}, {0x1, 0x3ff, 0x1800}, {0x4, 0x200, 0x800}], 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00'}, 0x30) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000002380), &(0x7f00000023c0)=0x4) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0}, &(0x7f0000002180)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000002400)={@mcast1, 0x59, 0x1, 0x0, 0x4, 0x8, 0x1}, 0x20) stat(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000002300)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1102202}, 0xc, &(0x7f0000002100)=[{&(0x7f0000000440)={0xd4, 0x22, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x1e, @uid=r4}, @generic="167e36dcf275e01d3f6b727e85f6ce6a4e7e2e95a61c79dd9285ba3f12fda8d56ab011e773a268df938101866f19cca279bb91c7ded79bea8597fb8f7fdcb6cce5c2348e160fad558b8958992c9c06225a24a2b5db325bb701c5897bdc2b3c39252bd053c566543e3a59fa101d200ecd09b9fef276bc1f6a42b32df34afae161b8ccd5112b3c71e40457521cc2fa6122261dfc32d8c56792c2f103f96f1432", @typed={0x8, 0x70, @fd=r0}, @typed={0x14, 0x4c, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic]}, 0xd4}, {&(0x7f00000005c0)={0x438, 0x22, 0xa00, 0x70bd26, 0x25dfdbfd, "", [@nested={0xe8, 0x7f, [@typed={0x8, 0xb, @str='\'\x00'}, @typed={0x8, 0x8b, @fd=r0}, @typed={0x8, 0x60, @u32=0x66d}, @typed={0x8, 0x82, @uid=r5}, @generic="c8a1fac888e463a2c439851650b35914c2fa81b99bd5552b442c560a0a026d6ce9379e021dcb3a903af78dc904bae4581749309623103c14914469babe807ac51e522f23f8406b1a85f7b27d306fd74b22639922", @typed={0x8, 0x42, @pid=r7}, @typed={0x68, 0x8c, @binary="a530222a7d8c562cb096d595ddf6f37f4d9eb0c2058057fc4ca359fbfb8c868893784698c801846dd1af9d7243571b30330b02c77277e42afb33906238a1df28851c51e9da1f38b3fca6b868dc233f8dc53321765a5cf35ffcc3ef021e7a9e501e9167"}]}, @generic="0ec2949e74f6589376dea09872517e94e8125bfb036354e680159565fa7c0c6e0223b141d9d815aad359ec5490ab8df716ea56cb37d4867e67e39a3fa159795831fb60ebe699bc514f3e199b011682b0d7ab08702c62dd0e189be4a23ed2bbaebe464c443abad81bfb058da852528e285f9111b2715eba3c303b9cf9885401db625c6eb2a25f3d4a843fded78008e74369b02b45bbe1a125b9d70e1dd287c30ab678823bae137f89d2a889d10076efe3e194660a91e5b3fd04c189079ca238c2a0c13e00d04d45f66ee840604d58c4057269712802b9353eb83e57510835", @generic="77eced368ad14cd4e74d7e9978642f99582a0fa772bf9a0086e43e1e78419d9986ece501a170e645ccee5056f62e518fb0d352c775b582803bbe45e1ebc4167041c2ab3cebb6775b81fedd70100d582ba536a2644ca6a47a7d83c123d9a501d29791281188c4a48a8461047a88e475a19bdad9f3a7bb22d05ede8a8e1adf206d3955ce246c096049c24f101c119299dae6c7b199035bd2e383e9f14b178c133eaf456bc633583bf6cb11f125cc8057e66c5fdc1e8c96dc4da10a1968bb00750c6d6a109dd22bd2bcdce74b3264cb2cc475f8fd01cd66aeaccae9f4ec866d", @generic="043e55b4484d2042b8162aa069ababba680e", @generic="b8ef8234ba3182131ea52ecbba9d8b6beaf2b16e2939e09061b953", @generic="941f3fb07a176fa81605bb5b49ef00a58568b31a4d25950124f99899e52945e1fc2df76ed94435e81ff7b3be616070c40bccd1b3b447c10c5463a8406c75530d748d969fe09e50c74b2f460b284bee0a4070e63240b1a5387d359860cf5b812a2f0362f5a816c8da2467f23835394ecf4c3a310071f750db0caec732c835593178528a75df274a8c288095bd8c28a0", @nested={0xa0, 0x55, [@generic="7c3f4db1c01f900bb24b9e25b25346574676dbdde61b663d0c30eb6bd82015de97727be1436da17f261ded12897311ba33b7d9e861b33a723b477baecc3372c4759c0ff07988bc3b406a2b7ccb081a6d0a6efc889ff8ce5ab4c319c57dced173879b3fb124c100cf41b1fcea47da3b8f4b980e1df1e8394c18e597", @typed={0xc, 0x29, @str='user\x00'}, @typed={0x14, 0x34, @ipv6=@loopback}]}, @generic="f29bdfaf39928dac24691c3089622afa49850f0a054ff6ac8c421f2c5aabdddec1617eed5f37c8"]}, 0x438}, {&(0x7f0000000a00)={0x6c, 0x37, 0x15, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x18, 0x2, [@typed={0x4, 0x6d}, @typed={0x8, 0x60, @fd=r0}, @typed={0x8, 0xf, @fd=r0}]}, @generic="d9e13a90bd8c0504f23c458095853b2f14c64d2d1f4bed31fdae45f9f1cb260f0bd81176e303037cdb2a05bdb19b37b087ed703ac2533713accbe49c2bbd52d38f"]}, 0x6c}, {&(0x7f0000000b00)={0x15e8, 0x10, 0x1, 0x70bd28, 0x25dfdbfc, "", [@typed={0x4, 0x6c}, @generic="a5", @nested={0x110, 0x15, [@generic="bbd12e389e53395af85300a9352ea5a3ae2dba8063a1e59254c1e7a537aee0e21e136a6b14a1cbca98e8ea27ed95e43b367e333e2f870e4596bcb0e93ffd1e72db965c074dcee7d5138e36dd78c97df5be93ac7ff41711b5b4479296594f918421741ae18cb7bc3558037c4c0c9156826fb580c22da048638b7e4880e6d17e908eaac585e38ae08dd485e238cd5d1685685e54ca7888da3ab19611e7bb0867e8e55b4970aaa2214dfb867cef972863fe1f3c4accd8d4d73da147cf147c5606510a2d083dc4b745457999", @typed={0xc, 0x34, @u64=0x240b}, @typed={0x14, 0x4f, @ipv6=@local}, @typed={0xc, 0x71, @u64=0x5}, @typed={0x8, 0x40, @uid=r8}, @typed={0xc, 0x61, @str='user\x00'}]}, @nested={0x100c, 0x8d, [@typed={0x8, 0x6, @ipv4=@empty}, @generic="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"]}, @typed={0x8, 0x26, @fd=r0}, @nested={0xc4, 0x22, [@generic="588113608a7dad192b71e80a5032f0a3c509b774441821550d226be6d5e8adc379263c72f8e52252b00ae9c0ced8fc560bdc26d7faeffe478ffcf76809984919afa88fdaf2ba6cc12a37bea18397fe2e24da97d1a43a26fe12dc13cbea2c7460cacc1bb1c8e5", @typed={0xc, 0x57, @str='user\x00'}, @typed={0x8, 0x6f, @u32=0xf7}, @generic="d63cb9988b4b86538544d03ca73608ebd3497b26e767094dad8a79ac40b7d38b601bbfe3380f1755448bb2714a838a611ffc16aa782232a8ff77314cab7ed703808718"]}, @nested={0x20, 0x50, [@typed={0x8, 0xf, @fd=r0}, @generic="1d75995678ebd148493b3bdbcdec108187a868"]}, @nested={0x1d0, 0x11, [@typed={0x14, 0x1d, @str='keyring#vmnet1\x00'}, @generic="8db684ba095f1a8bb96df4118e5faf0436794307e0147e822574550b25e73d01cf420d306a542553fe9c1d69f92e4f1d6d01ebc1bf2df3da845aad5a6db06526dafb5eb3318bf18e32ef285a6b39c14f33c9ed77f60dcf57c789684c4a5ee324a30067dfa3335e24524cca4b2e446a89fcf37954495b5f62202785e1415a8bfe", @generic="2a833f2bd70200bfcdd651bfb39b24a3c70f28ff0566417615007cf488258c8fe8121c97755b7ef353b7b343c817628a837d3b02946d1425ddc935b7ba262cbaf3a6bd2fb191bef791e1a4d3af2e675c7efd5db9fc", @typed={0x8, 0x28, @str='$^\x00'}, @typed={0x8, 0x4, @ipv4=@broadcast}, @typed={0x8, 0x7e, @ipv4=@multicast2}, @typed={0x4, 0x89}, @generic="ff3e487d4f149471e562e3f63c0273374ee2bc243e7c4aff876e119004b1c85aaa78f3ae882b41541ce3f2276a7dc7f47b7fa56df1d868ac1a13073d8c337c7214bb099ea75d611164bb6cb2f3f8d2a5ec3b26f0acd5acd432204791e81d27a4529c1980770257b30cfd1c66e008cfa02b434b5ea9b0247d494af3d51857b9e50576f998992d377d6f5ae8bde2bfff3a98b4632504791e8ae1eaa968e8ef59aa99da01595d0c8b570a14a70e5fbaa8c9ef1eba1e7477b08e28ca6028b16a02f6ac3f497a37"]}, @nested={0x17c, 0x50, [@generic="f924452106a4941f39e88af3773c1528cd512b36673d52f7e400d98587be64ee8d21b6897155ab7cf873153819066db5042aa06a7d636da97fd9b1be654cdac9934c6460055be6a78e5bfb396e28d3bc81891e98f22a8dcc872fd7ced679ad59f9531f6feb8815f9c39210da8c6fd888fc9308a7b84e2be935339495f311ed85d12e47c20b9c6ff07114bfa32c37ffb3b96abd4b6402e0d1bc702117d3f54e91f877ef171d", @generic="e25c1a8a67ccca8ecd1e1dcfb8570a912eaf71ced1770bea70f7042b88c187a2b731aa1c87cf37f548680c2aaf6cc568e9c40f4c6950cefcdef8ff54a52758ba9c749ea401d90ef1254e81db46f958f1", @typed={0xc, 0x13, @u64=0x81}, @typed={0x14, 0x29, @ipv6=@mcast1}, @generic="7cba949b2e71af800625274464c686b55a9009aa28c8f0e71141e22a90b5239d973375b1b02d3c64d3f9147334db312975f44e4e5289e026c2cad8274c49bc479a1b22f1caffadee7b3541afa7d906a55e5d1c5b892d3414c8f024965f93cc1af04f"]}, @generic="d413c7ba5bb674de3aa3d617d1667ca66e5949c3d6edc41aab96d6a00d5553540afca5a06e4d95768ffcc8af016840ce0125c89c50f80aec2677435ee98934d48385072ec0450e728c0fa8210325a535edfd014de920a67a95ac89e9d2ec5e24e39e14597524316e59b8005b41f8883056f86a90f52099f7787657fddb"]}, 0x15e8}], 0x4, &(0x7f0000002280)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0x70, 0xc0}, 0x4000000) 00:16:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x11000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00006021000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) sendfile(r1, r2, 0x0, 0x10000) 00:16:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00006821000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x40000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x41, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x20) timer_create(0x5, &(0x7f0000000100)={0x0, 0x17, 0x7, @thr={&(0x7f0000000180)="512ffa3aab42cd8077bf84e9e0730496bca76e7e56b4e80733cec65886471519f6693542dc5e36ea8f1ded2935d4cc1327d4ea44bcc13d8a62e56eacb8f8ca1d3f28061398943c8867cc9e2b118c9c487ff9d1e1fb8efcdfc94b9783fa933bf3dbf1bc207a29b7920d52a6268b3b514ee43cc39410ad357e763678346315890f14e52a44cab06bd97bc0f01b8e24bd7a1d4c74e93c", &(0x7f0000000240)="bda45d96b3164d81545b258f491221b910fc60b65786a0ae1887e9ef0da2c04991761978d07171a69862006024e2dc02e300ec3862c832bdd75ef8703f04f6770a97ae938756bca29bd3387d0b168ceac63539c187ad51916a40d697c0f6f50f560274bbcefed123711b1a5f31c94070c5a9c2281f76591f4dfe360c8023af93f9170775f0f9a2a57f616ea60d17877f17103fb852fefea239ba301acd87"}}, &(0x7f0000000300)) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0xaf, 0x4, 0x40, 0x3330000000000, 0x3, 0x6, 0x400, 0x7f, 0x200, 0x7, 0x3ff, 0x8, 0x10000, 0x100, 0xc3], 0x0, 0x8000}) openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) 00:16:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00006c21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) ioctl(r0, 0x0, &(0x7f0000000240)="23dde30b5bce9beae9f0608e9100aa6ed68fb6029a634bebfa4e10bcf63801b981007f82bff423f33f0f10081a11e63bed007f6a082a0bca893f773d818b9cdcac36bd2619d0cd1b7055837c2c3d7d0f2be8675962939cd401006be624f6c7335ae10efb70869c553b1ff8deb51bc21448e394bc46712dfb910ea3c90e8b966ffbb4b683e5c24b0de03966b0fc7df55ab90c98b0bab3e18472d612c54bb1a08f9b8caadff676025095bb2af05876cb50972b9c13b9f05c2f3a87dfc79313a4e5db97d5fa841341554e2d980b1a6cb04461a2a51fea826dbc496dcc69cf10") write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x8200) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000340)) [ 463.832992][T21603] Unknown ioctl 19250 [ 463.879392][T21603] Unknown ioctl 44698 00:16:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xfeffffff, 0x0, 0x8, 0x0, r0, 0x0}]) [ 463.927231][T21606] Unknown ioctl 19250 00:16:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 463.948465][T21610] Unknown ioctl 44698 00:16:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, 0x0, 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00007421000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000180)=""/155, 0x9b, 0x40002000, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendfile(r1, r2, 0x0, 0x10000) 00:16:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x111) sendto$netrom(r2, &(0x7f0000000180)="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", 0xfe, 0x4000000, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000) 00:16:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, 0x0, 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00007a21000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgr\x00\x15\t\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuW\xedw\x91Z\x8c\x9a\xe4\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff0f0000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000003f000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, 0x0, 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) socketpair(0x2, 0xa, 0x200, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x200, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r5 = getpgrp(0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_GETNSID={0x4c, 0x5a, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x47397d009b9cd39a) 00:16:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendfile(r1, r2, 0x0, 0x10000) 00:16:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xfffffffe, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000005a000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 464.851705][T21684] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 00:16:49 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) 00:16:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000063000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x100000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='\xf0\xd5\x84OC\xa6\xd5\xf4#\xdd\xce\xda>\xe6\xbc*)\xc7\xa1Fsc\x9d\xb8\xe3\xf0\x8cApK\xbdp-[\xedi\x9fY\xcc\xb0\xcd\\f\b\xfbn\xd2\xa1\xc3\x80\nQH\xeb\xabw\x18\xbcF\xbd\xe5\b\xacB\x82\xe5\xb9V\x96\xb0\xcb\xb7\xb4\x00+\xe7\x86\xf5\xc4\x8a\x8dz\xc8\xc8\xc4\x9f\xa9\xfa\x808\xafm\xd6H\x00\x9bN\xbday\xd0\x05Yj>\xd6\xdci\x84A1\x05\xd2\xe6\xa1\x00\xb9\x01\xe1\xe7B\xb5\xdeG\xdb\xb0\xcc\xac\x18D[\x86\xda\xe6U\r\xf3\xd3\xcb\xeb\x88\xe6\v\x83\x91O\xa2Z+\x9f\x88\x9b\xe9w\x13S\xcb\xf1i\xc8\xecT\xa8\xe2\xaf\x8e\xf5\x1c\xe1\xd3\v\xdc\x04\x1c\x8b\x81\xca\x8a#', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='ciuaccu.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./\xaccgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x3411fe, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0xffffffffffffffff, &(0x7f00000000c0)) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) 00:16:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000240)={0xb, 0x7, 0x100000001}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x200000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000068000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5db, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 465.529322][ C0] net_ratelimit: 20 callbacks suppressed [ 465.529331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 465.540900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 465.546772][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 465.552642][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 465.558490][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 465.564311][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = fcntl$getown(r0, 0x9) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x6, 0x1, 0x2, 0x5f91, 0x1, 0x8, 0x7}, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x300000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0xfffffffffffffffe, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000009000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) 00:16:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000000f000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x121000, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000300)={0x4, 0x0, 0x3ff, {r3, r4+30000000}, 0x93, 0x757}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x0, &(0x7f0000000400)=0xffffffffffffff52) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000440)={r7, 0xffffffffffffffff}, 0xfffffffffffffffd) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'vcan0\x00', 0x2}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r5, 0x0, 0x1, 0x4}}, 0x20) 00:16:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendfile(r0, r1, 0x0, 0xffff) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0x835, @rand_addr="28fa20c736b9762b82b9951995d8676f", 0x2}, {0xa, 0x4e22, 0xd97e, @ipv4={[], [], @rand_addr=0x7}, 0x1}, 0x20, [0x1, 0x4, 0x4, 0x2, 0xce, 0x5e, 0x10000, 0x1]}, 0x5c) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) finit_module(r1, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, 0x44}) 00:16:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x400000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) [ 466.203742][T21786] Unknown ioctl 1076646722 00:16:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000005a000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0xffffffff80000000, 0x6}) [ 466.317414][T21807] Unknown ioctl 1076646722 00:16:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000063000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x500000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x159, 0x100) accept4$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) epoll_create(0xffffffffffff0000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x40) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)=0x1) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000040)=0x8963) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r4) sendfile(r1, r3, 0x0, 0x10000) [ 466.569351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 466.575177][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:16:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000068000500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x1100000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp6\x00') ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000100)={0x0, 0x100}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$P9_RLERROR(r1, &(0x7f0000000240)={0x13, 0x7, 0x2, {0xa, 'net/igmp6\x00'}}, 0x13) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) 00:16:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:51 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1e5000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000540)=0x0) r3 = getuid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000800)='.\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000880)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000980)=0xe8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000b00)={0x7f, 0x1, 0x1, 0x6, 0x0}, &(0x7f0000000b40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000b80)={r7, @in={{0x2, 0x4e20, @rand_addr=0x8001}}, [0x2, 0x0, 0x6, 0x3, 0x5, 0xcbc, 0x9, 0x407, 0x2, 0x7, 0x4, 0x40008000, 0x3, 0x8, 0x3]}, &(0x7f0000000c80)=0x100) getresgid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40)) r9 = epoll_create(0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000ac0)={&(0x7f0000000100), 0xc, &(0x7f00000007c0)=[{&(0x7f0000000180)={0x280, 0x1e, 0x410, 0x70bd25, 0x25dfdbfb, "", [@generic="69510d8f3b5c17b53ef76a818faa9f22073413968babb7e30fa772bf2e3b0f08f1bfe0d3f339f23e9bb4e4cc6b6ce0ff0f941f3bd1dbe9d7521f3d89f7c32d78cd3069c577308f2c433e8c4f0963de1d869eeb40dca2e7a612492cb09df9c6af3952899e3955aa30460be7fc69b9492f4bd973c4038d929a4c33", @nested={0xc0, 0x36, [@generic="93d53e60065f2fd2c948d450229e3619799477364b95993e573bc84d5470472814534cc33b50037d31248f9936de68c15da971a4de99ed0640c3e7c5ec89d0326681d04c22590dad4454cf8e5cf1108a13e7a1b9c5eaa18905b904ebe757e79976e287736a8d51eda40e283403570f60ecd6330c65d1e8148db25fb8252dd68709bc83fdfd8f8229f280177dbc78f77fbd4aae7f1cd654bd436c02190fc6dcf5ae0e36fa1776bed2083555f939cb63e8d14eede22f111fb43ffe3c"]}, @generic="41ff84c54ce5b24d7978c89630ef3c6ff504fb12fff829117354b281c42d9f5d14a11b8a1dc7ff8e2362b948af39721867792dd2fd8eb353a10fb1623faefbba6177c34bd5c2c1c0d64db0892f8821890c9bf2c657a4f8f7", @typed={0x8, 0x13, @ipv4=@broadcast}, @typed={0x34, 0x67, @binary="787cd6648a0f0e1f2476f7d2df948b13b56bf7cca02c2856abb6635f66fd24fabea78583ff9a2d8a13cdd30887"}, @generic="cc7c8a074ac16830182f6bc74e993452ec3adaa9b81b078f86e4d26b4cac85934cc2d8740986381ffc628611eabd349cf350e6ddc77d5f613064805d7089099594df27dd3da33eb1e0d20b71738e8f05d1e8439c6ea821efe05462230f0ff62f74519974778ac4ab7d68199ccca1b093e0cd251b128dc74e045a09b325ade52e34da7794a5b222ff5e2509e05e39a73c46d0d4d0579a25b9be6ff755f33aeed427fc"]}, 0x280}, {&(0x7f00000005c0)={0x11c, 0x41, 0x0, 0x70bd26, 0x25dfdbfd, "", [@nested={0xdc, 0x8d, [@typed={0x8, 0xd, @uid=r1}, @typed={0x14, 0x1c, @ipv6=@rand_addr="bffe1a59a9ed5e999f3b4994793a5ac1"}, @typed={0x8, 0x2c, @pid=r2}, @typed={0x8, 0xd, @uid=r3}, @generic="15f7fa", @generic="fb0d1f81e5ae64d20c02a24af8b0a9be6d25b767ae14a0b96edea8d42dfee5fba61ef30f7ff66929526ad7c4765f75e6ec6a5f2623e113af40cdf8704c43134e3fd43e70a783f0959491f6ccfb84c7de6968d7e19f0f8a56d12e4d89cba26a5d25b497", @generic="cef8541b6975e278496e193c7ee30751b19c7891772cabec74ba380fcd82d27ce20fbdfcb2", @typed={0x8, 0x40, @u32=0x81}, @typed={0x8, 0x34, @fd=r4}, @typed={0x10, 0x8b, @str='wlan1ppp1\x00'}]}, @generic="8cfb3cd349b28d4a3dac8792fb08499d3a0d6de839be54e69a9180bff0a75a768e21c0c5552f6c01b165579849"]}, 0x11c}, {&(0x7f0000000700)={0x9c, 0x3c, 0x10, 0x70bd27, 0x25dfdbfc, "", [@nested={0x8c, 0x8c, [@generic="6f6109481dab6866f2a8b602db9eb38642e62f8b73a0b27830253ed0e7268259be31265eabb16221c71318412b7199931339451dd1d65f10174847f6e0a2ecf71aa3e18a3021ba2e4f459f5efe71bbba518cbd12d538fe3d4d91d46682d7afcb5f8ddc03717d1a575cd9ed8b284191f0dab4863ca21be90bd283450d96275f78d6987e7dcd739f3d"]}]}, 0x9c}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}], 0x38, 0x40}, 0x8050) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r13 = openat$cgroup_ro(r11, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r13, 0x10f, 0x80, &(0x7f0000000040)=0xfb37, 0x4) sendfile(r12, r13, 0x0, 0x10000) 00:16:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xdb05, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000300d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=0x0, &(0x7f0000000300)=0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r3, 0xaa27}, &(0x7f0000000380)=0x8) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x3, 0x6, "a3940344acdc071449d69dc8da8c5f439ce9bb4a39253d3dfc3bddefbea347151dad6b004217fffb96a6167cdb886576f4a5e0dd3408739eff69a3e04a07cbb7b405b5a8c151a35cd4ea488b842bdcdcbe620ce4b6af84ed1f791074ad2ed811c4d82de5bf3fb5beb34a62710170551357d580acc256b555e3ed45340f5a9d5da7bf43d4a398fe7c50523a006b190614eb5d1c6949bc6f4ea2fed06d3bb19d72aa2259c16332af14b4bf972fa7295d9b8799ed8db371bbf24a330d3115528e729e97ba249704c547ef463cfa6b3b1f50a3adba3c9c5581899cb9cf52b23e218092b02c5cab480f426f2df8f25204e84bca82afeddc793198cec42840386b9698", 0x5c, 0x9, 0x9, 0x2, 0xffffffff, 0x9, 0x0, 0x1}, r2}}, 0x120) r4 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000) 00:16:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f0000000280)=ANY=[@ANYRESOCT=r2]}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$sock_ifreq(r2, 0x8977, &(0x7f0000000100)={'veth1_to_team\x00', @ifru_map={0x43, 0x10000, 0x6, 0x9, 0x200, 0x2}}) 00:16:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 467.129333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 467.135171][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x4000000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) [ 467.172093][T21880] validate_nla: 3 callbacks suppressed [ 467.172105][T21880] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 467.186015][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@generic={0x2, 0xa2b}) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) 00:16:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x30000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021020500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x8000000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x100, 0x6000000000, 0xffff, 0x10001, 0x8001}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3, 0xffff}, &(0x7f0000000180)=0x8) 00:16:52 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xfff, 0x4000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x620, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) 00:16:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021030500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xfeffffff00000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x5}}, 0xfce7) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e22, 0x4, @loopback, 0x9}, r1}}, 0x38) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x67, 0x0) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz0\x00', {0x100000001, 0x80000001, 0x1, 0x1}, 0x1c, [0x7, 0x1, 0x80000000, 0x33, 0x3, 0x0, 0x4, 0x3e, 0x81000000, 0x9e, 0x4, 0xfffffffffffffffa, 0x4, 0x4, 0x10001, 0x7ff, 0x100000001, 0x1, 0x3, 0x200, 0x2, 0xfffffffffffffe00, 0x7fffffff, 0x7ff, 0x6, 0x9, 0xe9d, 0x1ff, 0xfda, 0x4, 0x6, 0x1, 0x9, 0x800, 0x3, 0x4, 0x13e9, 0x7, 0x557, 0x4, 0x1, 0x2, 0x1, 0x7, 0xd1f, 0x8001, 0x6, 0xfff, 0x6, 0x3ff, 0x2, 0x8, 0x6, 0x4, 0x3ff, 0x3ff, 0x9d, 0x1, 0x7, 0x61, 0x9, 0x1, 0x9], [0x8001, 0x8001, 0xb8fe, 0x8d, 0x20002000, 0xffff, 0x2, 0x696e2957, 0x3, 0x8, 0x8, 0x9, 0x1ff, 0x3ff, 0x6, 0x0, 0x9, 0x8001, 0x5, 0x2, 0x8, 0xfff, 0x6, 0x21ddb27f, 0x3ff, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x1, 0x5, 0x5, 0x7, 0x0, 0x1, 0x8000, 0xc06, 0x1, 0x0, 0x8, 0xfffffffffffffff9, 0x100000001, 0xe0e, 0x1ff, 0x3, 0x8, 0x8, 0x6, 0x5, 0xcf, 0x8, 0x7ff, 0xb0, 0x40, 0x8, 0x6a, 0x10001, 0x5, 0x20, 0x3f, 0x56, 0x0, 0x7fff, 0x6, 0xca5c, 0x2], [0x3, 0x2, 0xfff, 0x2, 0x847c, 0xfffffffffffffff7, 0x2, 0x8, 0x6, 0xdb, 0xaf3, 0x10001, 0xfffffffffffffffe, 0x100000001, 0xffffffff, 0x0, 0x3ff, 0x5, 0xa14, 0x8001, 0x10001, 0x7, 0x7, 0x5, 0x5, 0x8, 0x40, 0x20, 0x0, 0x5d03, 0x0, 0x7, 0x9, 0x5, 0x1, 0x9, 0x4, 0x3, 0x7, 0x7f, 0xffffffffffffffc2, 0x4f, 0x818e, 0x5, 0x100, 0x8, 0x7, 0x6, 0xd9, 0xffffffff, 0x9, 0x401, 0x1, 0x8000, 0xffff, 0xa32, 0xff, 0x6, 0x3ff, 0x80000000, 0xb05, 0x4, 0xffffffff, 0x1], [0xfffffffffffffffb, 0x5, 0x7, 0x0, 0x2, 0x9, 0x81, 0x4, 0x1, 0x8000, 0x6, 0xfffffffffffffc00, 0x5db, 0x2, 0x9, 0x4, 0x400, 0x5, 0x0, 0x7fffffff, 0x79, 0x1f, 0x8975, 0x3, 0x9, 0xfffffffffffffffe, 0x7, 0x91d3, 0x6, 0x4000000000000000, 0x2, 0x4, 0x7f, 0x380, 0x10000, 0x5, 0x68a8, 0x8, 0x4, 0x3ff, 0xfffffffffffffff9, 0x7, 0x3f, 0x1, 0x4, 0x2, 0xd65, 0x4, 0x8, 0xfffffffffffffffd, 0x3, 0x401, 0x4, 0x1000, 0x3, 0x55ad7a59, 0x2, 0x7ff, 0x6, 0x2b7a, 0x5a, 0x5, 0x7, 0x18]}, 0x45c) 00:16:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x0, 0x0) 00:16:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021040500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff00000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:16:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021050500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x3, 0x410000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @rand_addr="a334558f4f3108a3520743537cd174c6", 0x6, 0x7, 0x1, 0x400, 0x6, 0x1000000, r2}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r3, 0x0, 0x1, 0x4}}, 0x20) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x501000, 0x0) 00:16:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x0, 0x0) 00:16:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmsg(r1, &(0x7f0000000740)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000280)=""/255, 0xff}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000580)=""/162, 0xa2}], 0x9, &(0x7f0000000700)=""/7, 0x7}, 0x2) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) 00:16:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff0f000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000240)=0x4) sendto$rxrpc(r2, &(0x7f00000002c0)="8c062c6acb1e3ae2b7a1b8531bbb5554b00e444381488ab8bdcab1b40c32fae675907432a3f736b7e71f8aa4307a5bca1a51927cd0e5488476275c70347dd2c6a16626baa725105e6c07fb79168b497d100898f556b43b8a86c28fc16c248f2802d622949d93c5e16d7de6d1032f7c912fce0e77b2f9a50938efec0d2c7c4517400c8610a859d6cb2c6db84a74eb4bb966722755ca5d5e9a39385e77bcd7ae5d1c416aae8e65bc04321ec4163ba3a54b22a433775c1c70919d00435f7e0210a0e4c84dcc4dc50a352cb7b254573a032b72b660095b74d1a31742", 0xda, 0x20000000, &(0x7f00000003c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000280)=ANY=[@ANYBLOB="d80e37000e5cea0d6903fe72aaa91d06edcc036d82ac3079798c37224fff09ad27598dc2e283643e85d0d2145d89826d"]) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x37a) 00:16:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021060500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x0, 0x0) 00:16:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$P9_RMKNOD(r2, &(0x7f0000000240)={0x14, 0x13, 0x2, {0x80, 0x0, 0x5}}, 0x14) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000280)=0x100000, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x2, 0x8, 0x0, r0, 0x0}]) 00:16:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021070500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x0, &(0x7f0000000600)) 00:16:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f0000000200)=0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000100)={0x6c, 0x0, 0x3004, 0x6, 0x6, 0x8, 0x100000000, 0x1}) r4 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x10000) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0xfffffffffffffff8, 0x66, 0x8, 0x7}, 0x6) 00:16:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:53 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40082, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x101, 0x0, 0x5, 0x7, 0x80}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r1, 0x5}, &(0x7f0000000200)=0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8e7, 0x2000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x4bb}, 0x8) r5 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000) 00:16:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x3, 0x8, 0x0, r0, 0x0}]) 00:16:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000000210a0500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4c458ad8e48eb193, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x0, r0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x0, &(0x7f0000000600)) 00:16:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:53 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x2}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x10000) 00:16:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000000210e0500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x4, 0x8, 0x0, r0, 0x0}]) 00:16:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x268, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x5}}, 0xe) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = msgget$private(0x0, 0x3fd) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) r4 = getegid() r5 = getgid() getgroups(0x6, &(0x7f0000000100)=[r5, 0x0, 0xee00, 0xffffffffffffffff, 0xee01, r4]) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x10001, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r7, 0x408c563e, &(0x7f0000000780)={0x3, 0x4, 0x33, "52eff6e92a36007088a5fef82b1dbadad3cb4d4dd1a926147fbdb090cb89f76c10e6e43352329df78a49385656f4772b246278a3da4cbdfd7a59da4b", 0x3c, "f270b9d41457e2c07f80e310928f475ba56340ba9c0ec0b7cec7998b1952ec08ac4ed1998b35f26277099799e9a8561922d6fd503db17dd91379550d", 0x28}) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000980)={0x4, 0x8, 0xffffffffffffff81, 0xae4, 0x3, 0x5}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000d00)={'yam0\x00', 0x600}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) timer_create(0x7, &(0x7f0000000c40)={0x0, 0x3}, &(0x7f0000000c80)=0x0) timer_gettime(r9, &(0x7f0000000cc0)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/audio\x00', 0x0, 0x0) getresgid(&(0x7f0000000600), &(0x7f00000009c0)=0x0, &(0x7f0000000540)) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000008c0)) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dlm_plock\x00', 0xc4042, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x8cb3, 0xfffffffffffff000, 0x400, 0x3, 0x9, 0x9, 0x6, 0x0, 0x3d, 0x6, 0x0, 0x2e, 0x69ed, 0x1, 0x8]}, &(0x7f0000000bc0)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000000c00)=@assoc_value={r13, 0x4}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000840)={0x3, 0x1}) r15 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000900), &(0x7f00000004c0)=0x60) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r15, 0x10e, 0x1, &(0x7f00000005c0)=0x9, 0x4) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x8000, r3, r6, r3, r11, 0x52, 0x3}, 0x4, 0xdb, 0x100000001, 0x3, 0xfffffffffffffff8, 0xdf33, r14, r14}) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f0000000700)=0x5) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0xc028ae92, &(0x7f0000000a40)={0xffffffffffffffc1, 0x1}) 00:16:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xe000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x0, &(0x7f0000000600)) 00:16:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xb6, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0)={0x2, 0x401, 0x401, 0x5}, 0x6) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000001c0)={0xb90000, 0x0, 0x5, [], &(0x7f0000000180)={0x9a0910, 0x10001, [], @p_u8=&(0x7f0000000100)=0x5}}) sendfile(r1, r3, 0x0, 0x10000) 00:16:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000000210f0500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x5, 0x8, 0x0, r0, 0x0}]) 00:16:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[0x0]) 00:16:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021480500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) sendfile(r1, r2, 0x0, 0x10000) 00:16:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x11, 0x8, 0x0, r0, 0x0}]) 00:16:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x40000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000000214c0500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendfile(r1, r2, 0x0, 0x10000) 00:16:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[0x0]) 00:16:54 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x3fffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xffff, 0x749a2e0f3b02e3bd) 00:16:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021600500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='\".\x14i\xccY\xa3\x8b\xb6cup.c\x00\x00\x00\x00\x00\x00-d\xd7\xcc8\xce7\xa10\xeb\xb2\xf6\xe6\xb3\xf5\xc94\xdf\x85\xd4h\xcb\xf0\xb4\xdc&\x92L\xd0\x80a1\xd4\xf8\xeb\xb9\x95\xe4<8xo\x8e\x95m\f\x87\xe2\xb3#\xd3\x8a\xf2$|\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) 00:16:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x300, 0x8, 0x0, r0, 0x0}]) 00:16:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[0x0]) 00:16:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x10) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[0x1f]}) 00:16:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021680500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000003d00)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000003d40)=0xffffffffffffffe0, 0x4) fcntl$getown(r0, 0x9) mq_notify(r1, &(0x7f0000000300)={0x0, 0x32, 0x4, @thr={&(0x7f0000000180)="d8abddf59e16cdf9c2d392a59407e255770ee95d074ea43637b92b7ac245ade1153dff4a0bd6846f7ad86979aec6e22616d75c256d034cf972a6e43b11a5722906f60597d8fba1407bd0041c6706000f91966a1c9ef31d8c794b198aae3a4d4c0527fc83edd4821d989ad3f577ee08aea0f19e3250a3fef0b1de4d7981fc0c37ac52510aa3c784581bd8330d91b70cad3c69f54bb858ae58565e51dc5824", &(0x7f00000000c0)="12c6365efff1b512b151244b9a835339b6978d187e43851fdd1d5e90e650642f5a205d492ddb5364ce4ee3c7ddcac98f685ee084b9c9256e9ca27623f90db20377a8e3734beabade591ca2a4e805428f6eb0218b405aff63afc0279b5ce140644974ca717cc0f7a469ce85cc2bfe8a3eb7237ec456f70751c278c84e6117153b"}}) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x1, 0x7fff, 0x14c, 0x9, 0xfba, 0x10001}) sendfile(r2, r3, 0x0, 0x10000) 00:16:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x500, 0x8, 0x0, r0, 0x0}]) [ 470.729359][ C1] net_ratelimit: 20 callbacks suppressed [ 470.729367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 470.740886][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:16:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xdb050000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000000216c0500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:16:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0xb3c87229cc7279a7, 0xfa00, @id_tos={&(0x7f00000001c0)=0x3, r1}}, 0xfffffffffffffd91) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x101, 0x3f) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) 00:16:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x1100, 0x8, 0x0, r0, 0x0}]) 00:16:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021740500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 00:16:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x4000, 0x8, 0x0, r0, 0x0}]) [ 471.289350][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 471.295234][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 471.301330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 471.307141][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:16:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0xf2, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000000217a0500d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x10000) 00:16:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff00, 0x8, 0x0, r0, 0x0}]) 00:16:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000600d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x6, 0xfa00, {0x3, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0xb}}, 0xfffffe87) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000400)) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000240)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x1fd, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) read$eventfd(r2, &(0x7f0000000100), 0x8) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x7, 0x8, "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", 0x6e, 0x1, 0x1b4, 0x1, 0x8, 0xcce, 0x6}, r1}}, 0x120) 00:16:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') sendfile(r1, r2, 0x0, 0x10000) [ 471.769326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 471.775258][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 471.781220][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 471.787072][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:16:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:16:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff0f, 0x8, 0x0, r0, 0x0}]) 00:16:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000900d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0xb3c87229cc7279a7, 0xfa00, @id_tos={&(0x7f00000001c0)=0x3, r1}}, 0xfffffffffffffd91) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x101, 0x3f) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) 00:16:56 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x65c6, 0x20000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x5e6, 0xfa00, @ib_path={&(0x7f0000000700)=[{0x2, 0x0, [0x401, 0x100000000, 0x0, 0x401, 0x1ff, 0x401, 0x8, 0x0, 0x5, 0x81, 0x2, 0x7fff, 0x400, 0x7, 0x6, 0x61e]}, {0x13, 0x0, [0x2, 0x4, 0x7b0d, 0xda3, 0x6, 0x1, 0x5f20, 0x8, 0x7, 0x9, 0x2, 0x1, 0x3, 0x6e85, 0x6]}], r1, 0x1, 0x1, 0x90}}, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000340)={'security\x00'}, &(0x7f0000000000)=0x54) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000003c0)={0xa67}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000002c0)={{0x1ff, 0x401}, {0x2, 0x9}, 0x9, 0x5, 0x1}) [ 472.187391][T22272] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 472.195782][T22272] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x1000000, 0x8, 0x0, r0, 0x0}]) 00:16:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000a00d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x3000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc0000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r3, 0x4}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x2000000, 0x8, 0x0, r0, 0x0}]) 00:16:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021004000d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x40030000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x80000, 0x0, [0x1af, 0x80000001, 0x100000000, 0x3, 0x0, 0x7715, 0x6, 0x5]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x114, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r3, 0x0, 0x1, 0x4}}, 0x20) 00:16:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021005a00d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x410800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x2}, {0xa, 0x0, 0x4, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 00:16:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf0ffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x3000000, 0x8, 0x0, r0, 0x0}]) 00:16:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x410800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x2}, {0xa, 0x0, 0x4, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x81, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x36ae}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x80, 0x5, 0x8, 0xffffffffffff8000, 0x1400000, 0x2, 0x20, 0x554, r3}, 0x20) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x2000) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000100)={0x5, 0x3, 0x0, 0x2, 0x80}) 00:16:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021006800d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x100000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x410800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x2}, {0xa, 0x0, 0x4, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x4000000, 0x8, 0x0, r0, 0x0}]) 00:16:57 executing program 1 (fault-call:7 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000200d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x22, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="9b077ab97eab4827290a0f8417484a8a"}, {0xa, 0x0, 0x0, @local, 0x100000000000000}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 00:16:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x200000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000300d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x81, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x36ae}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x80, 0x5, 0x8, 0xffffffffffff8000, 0x1400000, 0x2, 0x20, 0x554, r3}, 0x20) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x2000) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000100)={0x5, 0x3, 0x0, 0x2, 0x80}) 00:16:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x8000) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x12fa, 0x40, 0x85, 0xf49}]}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) fdatasync(r0) [ 473.744830][T22380] FAULT_INJECTION: forcing a failure. [ 473.744830][T22380] name failslab, interval 1, probability 0, space 0, times 0 [ 473.757702][T22380] CPU: 1 PID: 22380 Comm: syz-executor.1 Not tainted 5.2.0+ #71 [ 473.765349][T22380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.775414][T22380] Call Trace: [ 473.778722][T22380] dump_stack+0x16f/0x1f0 [ 473.783080][T22380] should_fail.cold+0xa/0x15 [ 473.787696][T22380] ? fault_create_debugfs_attr+0x180/0x180 [ 473.793533][T22380] __should_failslab+0x121/0x190 [ 473.798485][T22380] should_failslab+0x9/0x14 [ 473.803036][T22380] kmem_cache_alloc+0x298/0x700 [ 473.807928][T22380] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 473.814185][T22380] ? _copy_from_user+0x12c/0x1a0 [ 473.819172][T22380] io_submit_one+0x10e/0x2de0 [ 473.823869][T22380] ? __lockdep_free_key_range+0x120/0x120 [ 473.829622][T22380] ? __might_fault+0x12b/0x1e0 [ 473.834404][T22380] ? find_held_lock+0x35/0x130 [ 473.839195][T22380] ? ioctx_alloc+0x1cc0/0x1cc0 [ 473.844012][T22380] __x64_sys_io_submit+0x1bd/0x540 [ 473.849153][T22380] ? __x64_sys_io_submit+0x1bd/0x540 [ 473.854474][T22380] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 473.859970][T22380] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 473.865449][T22380] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 473.870923][T22380] ? do_syscall_64+0x26/0x6a0 [ 473.870945][T22380] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.870963][T22380] ? do_syscall_64+0x26/0x6a0 [ 473.870985][T22380] ? lockdep_hardirqs_on+0x418/0x5d0 [ 473.871007][T22380] do_syscall_64+0xfd/0x6a0 [ 473.871026][T22380] ? do_syscall_64+0xfd/0x6a0 [ 473.871059][T22380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.881781][T22380] RIP: 0033:0x459819 [ 473.881798][T22380] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.881806][T22380] RSP: 002b:00007f8159a3dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 00:16:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x300000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000400d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 473.881819][T22380] RAX: ffffffffffffffda RBX: 00007f8159a3dc90 RCX: 0000000000459819 [ 473.881827][T22380] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f8159a1d000 [ 473.881835][T22380] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 473.881850][T22380] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8159a3e6d4 [ 473.881859][T22380] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:16:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x5000000, 0x8, 0x0, r0, 0x0}]) 00:16:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$inet6(0xa, 0x3, 0x400000088) syz_emit_ethernet(0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)=0x7) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 00:16:58 executing program 1 (fault-call:7 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:16:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000600d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x400000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 474.370164][T22416] FAULT_INJECTION: forcing a failure. [ 474.370164][T22416] name failslab, interval 1, probability 0, space 0, times 0 [ 474.383051][T22416] CPU: 1 PID: 22416 Comm: syz-executor.1 Not tainted 5.2.0+ #71 [ 474.390711][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.401077][T22416] Call Trace: [ 474.404391][T22416] dump_stack+0x16f/0x1f0 [ 474.408744][T22416] should_fail.cold+0xa/0x15 [ 474.413355][T22416] ? fault_create_debugfs_attr+0x180/0x180 [ 474.419210][T22416] __should_failslab+0x121/0x190 [ 474.424262][T22416] should_failslab+0x9/0x14 [ 474.428802][T22416] kmem_cache_alloc_trace+0x2c3/0x770 [ 474.434206][T22416] rxrpc_lookup_local+0x650/0x1b30 [ 474.439376][T22416] ? rxrpc_get_local_maybe+0x480/0x480 [ 474.444870][T22416] ? __local_bh_enable_ip+0x15b/0x240 [ 474.450361][T22416] rxrpc_sendmsg+0x379/0x5f0 [ 474.455013][T22416] ? rxrpc_kernel_probe_life+0x40/0x40 [ 474.455036][T22416] sock_sendmsg+0xd7/0x130 [ 474.455061][T22416] sock_write_iter+0x27c/0x3e0 [ 474.465179][T22416] ? sock_sendmsg+0x130/0x130 [ 474.476165][T22416] ? rw_verify_area+0x126/0x360 [ 474.481068][T22416] aio_write+0x2f2/0x540 [ 474.485332][T22416] ? aio_read+0x3b0/0x3b0 [ 474.489687][T22416] ? __fget+0x388/0x560 [ 474.493862][T22416] ? lock_downgrade+0x920/0x920 [ 474.498742][T22416] io_submit_one+0xfb4/0x2de0 [ 474.503442][T22416] ? __lockdep_free_key_range+0x120/0x120 [ 474.509182][T22416] ? ioctx_alloc+0x1cc0/0x1cc0 [ 474.513983][T22416] __x64_sys_io_submit+0x1bd/0x540 [ 474.519114][T22416] ? __x64_sys_io_submit+0x1bd/0x540 [ 474.524422][T22416] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 474.529900][T22416] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 474.535554][T22416] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 474.541054][T22416] ? do_syscall_64+0x26/0x6a0 [ 474.545743][T22416] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.551824][T22416] ? do_syscall_64+0x26/0x6a0 [ 474.556516][T22416] ? lockdep_hardirqs_on+0x418/0x5d0 [ 474.561817][T22416] do_syscall_64+0xfd/0x6a0 [ 474.561834][T22416] ? do_syscall_64+0xfd/0x6a0 [ 474.561855][T22416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.561869][T22416] RIP: 0033:0x459819 [ 474.561886][T22416] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.561901][T22416] RSP: 002b:00007f8159a3dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 474.571060][T22416] RAX: ffffffffffffffda RBX: 00007f8159a3dc90 RCX: 0000000000459819 00:16:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000900d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x80000000}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x12, 0x0, [0xfff, 0x7fff, 0x30e3, 0xcebf, 0x1, 0xb1d, 0x40, 0x8000, 0x3, 0xd431, 0x0, 0x80000000, 0x9, 0x2, 0x9, 0xfff]}], r1, 0x1, 0x1, 0x48}}, 0x20) 00:16:58 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x2000) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, r0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setresgid(r1, r2, r3) [ 474.571069][T22416] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f8159a1d000 [ 474.571078][T22416] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 474.571087][T22416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8159a3e6d4 [ 474.571095][T22416] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:16:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x500000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000240)=""/103) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000100)) [ 474.684044][T22436] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 474.692458][T22436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:59 executing program 5: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000c2dbd7000fbdbdf2501000000010000002178a800000000001400185f2c27f37564703a73797a3200"], 0x30}, 0x1, 0x0, 0x0, 0x24008040}, 0x81) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") unshare(0x10002000400) r3 = socket(0x40000000015, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x100, 0x5, 0x9, 0x100, 0xfffffffffffffffc}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r4, 0x7fff, 0x2, 0x10001, 0xed, 0x8be1}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000200)='bridge0\x00') setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000005c0)=0x8d, 0x4) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000380)='bridge_slave_0\x00') getsockopt$sock_int(r2, 0x1, 0x23, 0x0, &(0x7f0000000240)) 00:16:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x11000000, 0x8, 0x0, r0, 0x0}]) 00:16:59 executing program 1 (fault-call:7 fault-nth:2): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xa00000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000a00d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c}, 0x24) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x7, r4, 0x1}) [ 475.033733][T22457] FAULT_INJECTION: forcing a failure. [ 475.033733][T22457] name failslab, interval 1, probability 0, space 0, times 0 [ 475.046682][T22457] CPU: 1 PID: 22457 Comm: syz-executor.1 Not tainted 5.2.0+ #71 [ 475.046699][T22457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.064395][T22457] Call Trace: [ 475.067701][T22457] dump_stack+0x16f/0x1f0 [ 475.072057][T22457] should_fail.cold+0xa/0x15 [ 475.076693][T22457] ? fault_create_debugfs_attr+0x180/0x180 [ 475.082623][T22457] __should_failslab+0x121/0x190 [ 475.087581][T22457] ? sock_free_inode+0x30/0x30 [ 475.092363][T22457] should_failslab+0x9/0x14 [ 475.096880][T22457] kmem_cache_alloc+0x298/0x700 [ 475.101770][T22457] ? ___might_sleep+0x131/0x280 [ 475.106733][T22457] ? __might_sleep+0x95/0x190 [ 475.111463][T22457] ? sock_free_inode+0x30/0x30 [ 475.116247][T22457] sock_alloc_inode+0x1c/0x1d0 [ 475.121049][T22457] alloc_inode+0x68/0x1e0 [ 475.125433][T22457] new_inode_pseudo+0x19/0xf0 [ 475.130124][T22457] sock_alloc+0x41/0x270 00:16:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021005a00d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 475.134382][T22457] __sock_create+0xc2/0x740 [ 475.138997][T22457] sock_create_kern+0x3b/0x50 [ 475.143700][T22457] rxrpc_lookup_local+0xb70/0x1b30 [ 475.148837][T22457] ? rxrpc_get_local_maybe+0x480/0x480 [ 475.154310][T22457] ? __local_bh_enable_ip+0x15b/0x240 [ 475.159703][T22457] rxrpc_sendmsg+0x379/0x5f0 [ 475.164308][T22457] ? rxrpc_kernel_probe_life+0x40/0x40 [ 475.169784][T22457] sock_sendmsg+0xd7/0x130 [ 475.174217][T22457] sock_write_iter+0x27c/0x3e0 [ 475.179025][T22457] ? sock_sendmsg+0x130/0x130 00:16:59 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000001480)=[{&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000200)=""/172, 0xac}, {&(0x7f0000000100)}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/222, 0xde}], 0x7, &(0x7f0000001500)=""/175, 0xaf}, 0x9d9}, {{&(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001640)=""/234, 0xea}, {&(0x7f0000001740)=""/144, 0x90}], 0x2, &(0x7f0000001840)=""/4096, 0x1000}, 0x8001}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)=""/224, 0xe0}, {&(0x7f0000002940)=""/110, 0x6e}], 0x2, &(0x7f0000002a00)=""/83, 0x53}, 0x7ff}, {{&(0x7f0000002a80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b00)=""/252, 0xfc}, {&(0x7f0000002c00)=""/55, 0x37}, {&(0x7f0000002c40)=""/80, 0x50}], 0x3, &(0x7f0000002d00)=""/28, 0x1c}, 0xfffffffffffff932}, {{&(0x7f0000002d40)=@generic, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)=""/224, 0xe0}], 0x1, &(0x7f0000002f00)=""/38, 0x26}, 0x7}, {{&(0x7f0000002f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002fc0)=""/143, 0x8f}, {&(0x7f0000003080)=""/247, 0xf7}], 0x2, &(0x7f00000031c0)=""/190, 0xbe}, 0x7}, {{&(0x7f0000003280)=@can, 0x80, &(0x7f0000003480)=[{&(0x7f0000003300)=""/61, 0x3d}, {&(0x7f0000003340)=""/136, 0x88}, {&(0x7f0000003400)=""/89, 0x59}], 0x3}, 0x101}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f00000034c0)=""/85, 0x55}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/207, 0xcf}, {&(0x7f0000004640)=""/231, 0xe7}, {&(0x7f0000004740)=""/38, 0x26}, {&(0x7f0000004780)=""/130, 0x82}], 0x6, &(0x7f00000048c0)=""/180, 0xb4}, 0xfffffffffffffff8}, {{&(0x7f0000004980)=@l2, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004a00)=""/116, 0x74}, {&(0x7f0000004a80)=""/67, 0x43}], 0x2, &(0x7f0000004b40)=""/7, 0x7}, 0x2}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004b80)=""/5, 0x5}, {&(0x7f0000004bc0)=""/67, 0x43}, {&(0x7f0000004c40)=""/89, 0x59}, {&(0x7f0000004cc0)}, {&(0x7f0000004d00)=""/222, 0xde}], 0x5, &(0x7f0000004e80)=""/119, 0x77}, 0x1ff}], 0xa, 0x2002, &(0x7f0000005180)={0x77359400}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000051c0)={0x0, 0x401}, &(0x7f0000005200)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000005240)={r2, @in6={{0xa, 0x4e23, 0x7080, @dev={0xfe, 0x80, [], 0x15}, 0x2}}, [0x3f, 0x7, 0x40, 0x2, 0xffffffffffff7fff, 0xf1, 0xde9, 0x6, 0x20, 0xb9, 0x6, 0x1, 0x6, 0x3ff, 0x3]}, &(0x7f0000005340)=0x100) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x10042) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0) [ 475.183725][T22457] ? rw_verify_area+0x126/0x360 [ 475.188608][T22457] aio_write+0x2f2/0x540 [ 475.192874][T22457] ? aio_read+0x3b0/0x3b0 [ 475.197224][T22457] ? __fget+0x388/0x560 [ 475.201393][T22457] ? lock_downgrade+0x920/0x920 [ 475.206269][T22457] io_submit_one+0xfb4/0x2de0 [ 475.210960][T22457] ? __lockdep_free_key_range+0x120/0x120 [ 475.216706][T22457] ? ioctx_alloc+0x1cc0/0x1cc0 [ 475.221515][T22457] __x64_sys_io_submit+0x1bd/0x540 [ 475.226637][T22457] ? __x64_sys_io_submit+0x1bd/0x540 00:16:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) [ 475.231941][T22457] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 475.237416][T22457] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 475.242876][T22457] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 475.242893][T22457] ? do_syscall_64+0x26/0x6a0 [ 475.242912][T22457] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.242926][T22457] ? do_syscall_64+0x26/0x6a0 [ 475.242943][T22457] ? lockdep_hardirqs_on+0x418/0x5d0 [ 475.242964][T22457] do_syscall_64+0xfd/0x6a0 [ 475.253084][T22457] ? do_syscall_64+0xfd/0x6a0 [ 475.253105][T22457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.253118][T22457] RIP: 0033:0x459819 [ 475.253134][T22457] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.253143][T22457] RSP: 002b:00007f8159a3dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 475.253157][T22457] RAX: ffffffffffffffda RBX: 00007f8159a3dc90 RCX: 0000000000459819 [ 475.253166][T22457] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f8159a1d000 00:16:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) [ 475.253174][T22457] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 475.253184][T22457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8159a3e6d4 [ 475.253193][T22457] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:16:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) wait4(r1, &(0x7f0000000100), 0x1, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) 00:16:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xe00000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:16:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021006800d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:16:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x40000000, 0x8, 0x0, r0, 0x0}]) 00:16:59 executing program 1 (fault-call:7 fault-nth:3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:16:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x2, "9d5405ba7b657be2"}) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x21) ptrace$setregset(0x4, r2, 0x20000004, 0x0) 00:17:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf00000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000240)={0x7, 0x200, 0x8000, 'queue0\x00', 0x5}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xfeffffff, 0x8, 0x0, r0, 0x0}]) 00:17:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000502d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 475.792981][T22507] FAULT_INJECTION: forcing a failure. [ 475.792981][T22507] name failslab, interval 1, probability 0, space 0, times 0 [ 475.805696][T22507] CPU: 1 PID: 22507 Comm: syz-executor.1 Not tainted 5.2.0+ #71 [ 475.813332][T22507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.813340][T22507] Call Trace: [ 475.813365][T22507] dump_stack+0x16f/0x1f0 [ 475.813393][T22507] should_fail.cold+0xa/0x15 [ 475.813414][T22507] ? fault_create_debugfs_attr+0x180/0x180 [ 475.813446][T22507] __should_failslab+0x121/0x190 [ 475.846409][T22507] should_failslab+0x9/0x14 [ 475.850927][T22507] kmem_cache_alloc+0x298/0x700 [ 475.855798][T22507] ? inet6_create+0x2ec/0xf80 [ 475.860492][T22507] ? __sock_create+0x386/0x740 [ 475.865276][T22507] sk_prot_alloc+0x67/0x310 [ 475.869798][T22507] sk_alloc+0x39/0xf60 [ 475.873897][T22507] inet6_create+0x364/0xf80 [ 475.878422][T22507] __sock_create+0x3de/0x740 [ 475.883097][T22507] sock_create_kern+0x3b/0x50 [ 475.887795][T22507] rxrpc_lookup_local+0xb70/0x1b30 [ 475.890522][T22516] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 475.892925][T22507] ? rxrpc_get_local_maybe+0x480/0x480 [ 475.892946][T22507] ? __local_bh_enable_ip+0x15b/0x240 [ 475.892971][T22507] rxrpc_sendmsg+0x379/0x5f0 [ 475.892989][T22507] ? rxrpc_kernel_probe_life+0x40/0x40 [ 475.893012][T22507] sock_sendmsg+0xd7/0x130 [ 475.901224][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.906532][T22507] sock_write_iter+0x27c/0x3e0 [ 475.929308][ C0] net_ratelimit: 21 callbacks suppressed [ 475.929316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 475.935620][T22507] ? sock_sendmsg+0x130/0x130 [ 475.935652][T22507] ? rw_verify_area+0x126/0x360 [ 475.935674][T22507] aio_write+0x2f2/0x540 [ 475.935693][T22507] ? aio_read+0x3b0/0x3b0 [ 475.935718][T22507] ? __fget+0x388/0x560 [ 475.940583][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 475.946113][T22507] ? lock_downgrade+0x920/0x920 [ 475.946146][T22507] io_submit_one+0xfb4/0x2de0 [ 475.951978][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 475.956511][T22507] ? __lockdep_free_key_range+0x120/0x120 [ 475.956540][T22507] ? ioctx_alloc+0x1cc0/0x1cc0 [ 475.961480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 475.965626][T22507] __x64_sys_io_submit+0x1bd/0x540 [ 475.970061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 475.974080][T22507] ? __x64_sys_io_submit+0x1bd/0x540 [ 475.979866][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 475.984637][T22507] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 476.000713][T22507] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 476.011489][T22507] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 476.011506][T22507] ? do_syscall_64+0x26/0x6a0 [ 476.011523][T22507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.011537][T22507] ? do_syscall_64+0x26/0x6a0 [ 476.011555][T22507] ? lockdep_hardirqs_on+0x418/0x5d0 [ 476.011576][T22507] do_syscall_64+0xfd/0x6a0 [ 476.011600][T22507] ? do_syscall_64+0xfd/0x6a0 [ 476.011622][T22507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.011634][T22507] RIP: 0033:0x459819 [ 476.011650][T22507] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.011659][T22507] RSP: 002b:00007f8159a3dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 476.011681][T22507] RAX: ffffffffffffffda RBX: 00007f8159a3dc90 RCX: 0000000000459819 [ 476.126029][T22507] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f8159a1d000 [ 476.134104][T22507] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:17:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2e26ff56", 0x4) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/235, 0xeb}], 0x1}}], 0x2, 0x10120, 0x0) dup(r0) 00:17:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000503d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 476.142085][T22507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8159a3e6d4 [ 476.150062][T22507] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 00:17:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f00005e6000/0x2000)=nil, 0x2000, 0x83000021, 0x40000000000033, r0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000440)={0x2, {{0x2, 0x4e20, @multicast1}}, 0x0, 0x7, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @rand_addr=0xfffffffffffffffe}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @multicast2}}]}, 0x410) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x88}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=r3, &(0x7f0000000400)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0045540, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], 0x2}) 00:17:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4000000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:00 executing program 1 (fault-call:7 fault-nth:4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff000000, 0x8, 0x0, r0, 0x0}]) 00:17:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000504d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r3 = pkey_alloc(0x0, 0x2f5b260350d0a886) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, r3) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) 00:17:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x6000000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:00 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYRESDEC], 0x14) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) fchdir(r0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0) 00:17:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x1de) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x400000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00'}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) [ 476.553061][T22554] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 476.561384][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.612638][T22559] FAULT_INJECTION: forcing a failure. [ 476.612638][T22559] name failslab, interval 1, probability 0, space 0, times 0 [ 476.625578][T22559] CPU: 1 PID: 22559 Comm: syz-executor.1 Not tainted 5.2.0+ #71 [ 476.633414][T22559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.643483][T22559] Call Trace: [ 476.646791][T22559] dump_stack+0x16f/0x1f0 [ 476.651173][T22559] should_fail.cold+0xa/0x15 [ 476.655788][T22559] ? fault_create_debugfs_attr+0x180/0x180 [ 476.661633][T22559] __should_failslab+0x121/0x190 [ 476.666597][T22559] should_failslab+0x9/0x14 [ 476.671124][T22559] kmem_cache_alloc_trace+0x2c3/0x770 [ 476.676530][T22559] apparmor_sk_alloc_security+0x87/0x110 [ 476.682186][T22559] security_sk_alloc+0x77/0xc0 [ 476.687059][T22559] sk_prot_alloc+0xb8/0x310 [ 476.691581][T22559] sk_alloc+0x39/0xf60 [ 476.695673][T22559] inet6_create+0x364/0xf80 [ 476.700227][T22559] __sock_create+0x3de/0x740 [ 476.704838][T22559] sock_create_kern+0x3b/0x50 [ 476.709626][T22559] rxrpc_lookup_local+0xb70/0x1b30 [ 476.714767][T22559] ? rxrpc_get_local_maybe+0x480/0x480 [ 476.720247][T22559] ? __local_bh_enable_ip+0x15b/0x240 [ 476.725644][T22559] rxrpc_sendmsg+0x379/0x5f0 [ 476.730255][T22559] ? rxrpc_kernel_probe_life+0x40/0x40 [ 476.735737][T22559] sock_sendmsg+0xd7/0x130 [ 476.740180][T22559] sock_write_iter+0x27c/0x3e0 [ 476.740203][T22559] ? sock_sendmsg+0x130/0x130 [ 476.740237][T22559] ? rw_verify_area+0x126/0x360 [ 476.740260][T22559] aio_write+0x2f2/0x540 [ 476.740280][T22559] ? aio_read+0x3b0/0x3b0 00:17:01 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x80000000) 00:17:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff0f0000, 0x8, 0x0, r0, 0x0}]) 00:17:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000505d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 476.740311][T22559] ? __fget+0x388/0x560 [ 476.749735][T22559] ? lock_downgrade+0x920/0x920 [ 476.749769][T22559] io_submit_one+0xfb4/0x2de0 [ 476.749785][T22559] ? __lockdep_free_key_range+0x120/0x120 [ 476.749812][T22559] ? ioctx_alloc+0x1cc0/0x1cc0 [ 476.749850][T22559] __x64_sys_io_submit+0x1bd/0x540 [ 476.792456][T22559] ? __x64_sys_io_submit+0x1bd/0x540 [ 476.797782][T22559] ? __ia32_sys_io_destroy+0x3f0/0x3f0 [ 476.803258][T22559] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 476.808727][T22559] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 476.814203][T22559] ? do_syscall_64+0x26/0x6a0 [ 476.818914][T22559] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.818936][T22559] ? do_syscall_64+0x26/0x6a0 [ 476.829671][T22559] ? lockdep_hardirqs_on+0x418/0x5d0 [ 476.829694][T22559] do_syscall_64+0xfd/0x6a0 [ 476.829710][T22559] ? do_syscall_64+0xfd/0x6a0 [ 476.829733][T22559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.829745][T22559] RIP: 0033:0x459819 [ 476.829761][T22559] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.829770][T22559] RSP: 002b:00007f8159a3dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 476.882025][T22559] RAX: ffffffffffffffda RBX: 00007f8159a3dc90 RCX: 0000000000459819 [ 476.890008][T22559] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f8159a1d000 [ 476.897995][T22559] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 476.905974][T22559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8159a3e6d4 00:17:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x209e20, 0x1}, 0x3c) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x14) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x11036, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x7f00, 0x0, 0x0, 0x2000]}, 0x2c) [ 476.913960][T22559] R13: 00000000004c0c01 R14: 00000000004d39e8 R15: 0000000000000006 [ 476.924900][T22574] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 476.933349][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x9effffff00000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 476.969336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 476.975166][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:17:01 executing program 1 (fault-call:7 fault-nth:5): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000506d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xfffffffe, 0x8, 0x0, r0, 0x0}]) 00:17:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xdb05000000000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 477.234833][T22595] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 477.243037][T22595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 00:17:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @rand_addr="9e0220ae0c892be2435520cbac906808", 0x81}, r1, 0x5}}, 0xfffffffffffffe7f) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)={0x2d, 0x3, 0x4, 0x20010, {0x77359400}, {0x0, 0x2, 0xff, 0x1ff, 0x3272, 0x3, "455f4fb4"}, 0x7, 0x3, @fd, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xac, "e97f3049337a280577c4d7081108c7aac7e6dba507e2333716962a31ea6b9c35ef4676d510ce788135140f7796cb35b1eb3cd8f68416fe02b05dda424cfe96f66d1fa380c8dbeac0358e54f925072a24fe289c10c8dd9cec1e99329fc699cc854fdb485e66e3bf115119b51bcfddb914c94c812639b8d10b47e7e823bac84155c0fa4ecca26889d334a0a85f631e074f4964dc71b782e128c4bdbacbe96837d7731f2ae06f6afd890b32a0e7"}, &(0x7f0000000440)=0xb4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0x1b}, 0x7fff}}}, 0x84) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x70, 0x6, 0xcb6, 0x3, 0x8, 0x0, 0x20, 0x0, 0x3, 0x20, 0x3dec, 0x611b, 0x3ff, 0x2, 0x29c, 0x0, 0xfffffffffffffffa, 0x9, 0x5, 0x1f, 0x3, 0xffffffffffff0000, 0x239d303d, 0x4, 0x10001, 0x9, 0x7ff, 0x6, 0x5, 0x2, 0x14, 0x80000000, 0x9, 0x7, 0x94ee, 0x19, 0x1000, 0x0, 0x6, 0x5, @perf_config_ext={0x5, 0x3}, 0x20000, 0x1, 0x19b, 0x8, 0x8000, 0x3f, 0x809}, r2, 0x10, r2, 0x0) 00:17:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000507d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x100000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff00000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 477.529374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 477.535248][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:01 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='&\\\x00', &(0x7f0000000140)='fuse\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='fuse\x00') ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x233b, "7acf88a20700d5b4866122aac78e34e870ca189a829ece59e336deff27c83016", 0x3, 0x9, 0x5, 0x400, 0x10002, 0x2}) r1 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='fuse\x00', &(0x7f00000000c0)='-procppp1,security!&\x00', 0x0) 00:17:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000002100050ad25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xffffff7f00000000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc) 00:17:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x200000000000000, 0x8, 0x0, r0, 0x0}]) [ 477.882795][T22647] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 477.891173][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000002100050ed25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffff000, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x2, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000007b00)={0x0, @loopback, @initdev}, &(0x7f0000007b40)=0xc) sendto(r0, &(0x7f0000000080)="2153c4ff22cfbec8648c9068ec95870151fd6c43423f295aef8993bd131171245328685be09c416f66d5fc3d04fd7b0b690522f7dd7d72bf6546687d9ee40f6d830572723d27259d4bd671a8a82e5191569670db04e46cdd16922b7f37ab1bf21deacb04acb2aa262031ecbb86478ef2c210f9f7d737c8f4dac7f61a4ca0043fbc6dd559c20bef96dbdfe93fedf6dc962d3664e728227c0db3b8ede7d170736f2fba70106c65e9034d5463ffa1e1a26c38206da87806b472b6249de9fd13b83d998f5e2f3cacc65c15700aacdd0f270c9922bffc99922ce82732959b9fba207d9dae57470130c90b39132947e5df8735cbe7437857186f204ea5562fc502abcf6170f13828425bac9a8e7df01b1320fbf4322baf5b78239651066949b9d237135b5974819dd1f83ea4b766d0ca0f163019ba9223d724763bf3e7bef49b929fdc52a7ad8ffc78ac2e1f074eb4de6e43350c5ec7d173634afa08c7c02531fa31edeae9699cde15afed66605387d47b32aca2268e3b5dafedbd322e4cad4d128e23d10d328827a7a9b449d22055d1ed002460913b5da654e7c79f6bc6e7f75b3fb29e38784fcacc9047a46f8a8037827ec0e52faca75518a35d8de06465e4c357ce60ee8e88815cf75ae8c71fa8ef9b1843ccd0abb9384729847fb9108dc6c1afbf067e75b72f3742b2f81d627b30dce2dda800ff0e2f9ce028ef7e52959a35313e82723d3f06f0fb33aeb92025b76709aca516f6535ad20aeae083fe4708b696beca4e16618e5b9fecc667d2af624dfeee991efcae96d29837740d997fe313a1d67fb30455589e868290590f8687d8dd24c547db1799e308eec2e80009e5710e6588d05de9a1322cae87982fadbab9fc83eb572cabdb086f9e77fa1d679845a086d50a826ed89f1f54922f6c51aac91ef728f40410069a670efbb14fbe3ae05a842ad3047985ccf2329d10146f1648ed95480e147c3437a9a6d9d0efc12b53749baab133585a003ec38e799cebad72b51adf5ae666c04950d222dee16c49f4dbd4b1a22a6dc528de046469f9fd84a357ddf66a659dd9ab45f56be60433eca44b129719116b7318a02e7c527df4763da16a5ff01ab645bb62b1574ca21d3970a5a33c034533ff212e1f5aea2fdb5630c230e1894bb0f3bb44c61e5b03726a83ca9c9df066fdde5fddd24a9e557e5e6a496dbec32c5c6ec7bed428e688d48833a73f94b780045af590a37d40d81b1d056d0398b480b962c5c87db5f1e2e97ff2cc58dc60d8ca7dd4461456ddcae776af76ba41672e5a934eda123b502307e34aa5719ed5840189b2c8861649662e2d7d1567e2f2a478dccfc7fafa5e36466a4736d87eb2abf292e4250f062d57c43d5e0017c238ed910847bd71f2db27eafe3b96872712e20e0d6afe9aa44234b35949193c65ec00d0c1acef7d702b51f058c355f6156eba30696af3ea65f5663cb66a64314143c1678416752d0ee0b862b7ce0c0259ee789b123d154b7977f592b951b37173e7bc7e7a28a5aed96a78f69d06efc9ae56417be7356e3ce481d7344e4d60739d9cfe959abf87cd509d33efb490a8ccdffb02324c69fa6d8d480c403c91e04c558b0adbd764df71267b87e1d2b3c43751af160f1401b18fe587a044377ee06577d90e6f9c160bba22ef5dadfb1885f66e45bd86f91ad16b6b4bd6aae0c16f6bb97aed1ee591a08b6f16534b9f3ce39e373fdc45aa087d4f922a0bf10067ca222fab5d87fa02829c0a2494ef09dee4d52145a7c530279c4fa05e2dd2b31c33bf7c2c22e8a87578fa4cf3006e93b4cd440f6a65859db3de8d8e859a673946589e0529ebee681310cdba55b792902b060fe2759c1b67c3da04a7abcc66d56de8eb5c3f5439e56310372a5be33e87942664149d5481a6582d0a18d368fc99f5e4e63314f41b262d2bd922e8b4c4d89a5ff78dae0871ad3bed0320ce91aa2d56fa08bcf9b148edaf1b52b9306646b0e1341c4f9abe0afc05843a5c5557de1295e3a5c09c5f0aca58c8cfebe9f90bc7021a7e56ddd7edce7ae85658776dbc17458543b99aa22b4eb8eef952f41f5ede880003223a7e471376341dcb483270500c3f7b52b8f93e0a7286324074138be3cdc0a7820876db5b4117d87ad40c0b9e8098253d509f3a130b3ad7a0c466101c598ed194002dab9b71fb8f44b2212eeba91bb036b4e2425464add8ebc4cb05af701ed750b01c7dd28d2317fa1119f5f19042c848cf06a4632534cce0ce96caa26bf40ffd3e4e62a3e4fdb47a5e0e3c88a0d18c51146d162e95d69d3569c3c0c0efebfa54ee455e851a1791cf89256b2e3ccba13b4e168c872369fce4d9304878395853f63595c48603fa94c9afc31f986453a8030c183933a2b45ea5d44cf4e5025e92fc0117473f3894ad51c21d48582875b71a547271ad564839f38b66224cc011643fbbccee9449257c425e345cf0bed4558f2d1555acf3e75a99522905241543912a68c70d3fbc026cb9e1b94a0ac4323780907712f167fb39c7d78208242476066bfbd69854e577a523776f47d28cc4474c821f133d3cfc6ba698fdc16acf4752f012f98c4bd1b34002f7b6cc6c7a924d83ae371680552a2d3c8f0123d3d566640def9537cbff75d52b0da049e6d52a713b2027f6d71cdf49a87bcca1f056e5e0f6b7990ac90c236422cfd1fd06198df02340ddad7196e7d1e6861cb596344cae16d7697e4f622710a8b03f05b66025b4934a6e7b27963b24efaded4ab4bec96745588ebf9260accd310dd1e5e9c9e892a6f01c3e746b12b7950686f5e3b720026622c520ad9a5a68078536947847c9cd5ef004ba9eaf9bdfada8a5e43e25da24f04e37125b312e43b0f0313c9a08ba042e8a729166088ced55b3ec814c24428814577e468ddabd54b035939a4da9672fa00d26245043dec99a43d64dcfd290e781caca33897159c7b3d9094ecdaa4a9a0ae95004ffd103f3b516839a992c221455f9899358972ea402489aa0a36cfaa3b4ac2aa84305d71599921ebda375a7bf7269cbc268d2ab24fbc9a9b84b0c061b94d8f9ee6f77e50e29eed5816d25f0dea140beaf3b94aee1e3007c0d45d9fd947e1d7bcda3842e08df3e7be270ab7023f3e1ad1160254ab583fdea76eb854a1a7bb36ebc5568fee237f5ce91d5d5c33d80eb4fa2588cfde141bb71b532ae595b517caf4d4317973e4237ceaecdd19abf03f4b58abd9944658e70c83d4991cdde3109886bb5108fd317fde5173ef99ab60646d1b2cafbb5ddaf72fc44a9c2dc5ddd87c92b9cd513b1e01758e05b5f0ea6eb6dfbbb6e76c02128ce9fc60ba4281f15971f762670ccf31addde2d63113b7403d2f790c1013ebdd56e618d5ecb63a2a5cc0c7bfa53d0f67b8451bec41972669e8b457f8dbaabfa8c08d9f04968bcf341917d08fe643d52bcf98a1487935ef62e8e6444c022b8e806dfba41fcff72748cd9563e0565c1ea70e42350e2ab3d0a84145447cc18595a157f8862b79b1cac431bd8842d3f6ff2304f9fdbccd06540d115be38c978cc20b209f2d5aa63c5e77d5d99c038405ee4685d7008e97e5d6f33bbfaffaf6b273fef813d840ff2862d0a7170dd20f8bd33127cba7cfb12f81336bfc81acb61ddc0e1e9e2cfe1268b41a72385461edcb24be33668dffcc9c54380a2a877c6f63e1b3616abd127242d6d97ef279a6b09556dcacdb3ddece6c8186e4da97ba755b47de44c1978361d1669fe76645d994dee9371c1efaeb2a15478f923129955b8a8812c0f1e9e682c491373c5b095c36c83453d6256a8c3d9503ebe0cc4067a582cf12bc54758bed12e69e07f936416c4166dff897a536e1e14c76d156cafd63309c4330a85c7bcdd4ff2b7afbc984ca42df3ec343d2bd75f5a8e160fde4057d9646bbcda08ebe7d2ebfa18ca042db0af87f60e878a60fa9a4166273b0dd455e62141e4e46bb5e1e713dc8cae889e83de73077e6a63ae2f8015790fb782d0026aae4131fcf2a501452d74c6a57c1d82c94414b6b07ab8a4a5640c2df6c5ded31cbef40654eb9a8d552416c02ff0eb8e5d35805205c578a2c2e330614c79e533af6ee4dd920afc6fbac4f921f6b85e8b3728cc7ac9635771d1d41cafd0292f584f2a9e066d0699718efe3100c34eae6f6969889884f079fe76d234806f801e0c838eab14dd29614cecf965d5de82eb77474c47ce09f3aa6afa46313cd70f54655481ebdc6016d81fd2c0b99379916702a72a854884c949e02f44ee7efc2e4a52f79fbafcc625869493529c1f9317dda4952b206447ee8f7e46c91a887d0fc45069978dd6c9c887606c0fcd3f7e79133a17d1922607344e611ff198f0e1f555b6dd38898706cc1b494b2d5895e73baf10725dde90d1d7bf756685fe8a85de46964feaf61ea985241b6a8ce16ac6b7fe1e31002652775dd519ebc557d1bb2fa057b69d25029089d46b28f0eda1d22a99def1e38161970e050f67cdfbb9ea1184c069f80ab55d99447efd127c403417470b0b9a0dd56e4c036236d27fd4a83a15a5ae84a09f4455189d2be36a23a809eb2761f05879c7ba1547150567b27f592a402bc53093e88229c8806345a7a035a9a154e8f2adcc0fc87a744abadda613e71fab285695672331752942b7b32e92f2b7d63ddc1d526fe860e4d111a8e49a9236d18656e6ab9fad61acb0aa991ce2268867d79617501c37a574347ce3ac2d504743db049cabcef02cb012a847ad7942f9e4d025bec432a47aa4da43687327928875dd19b899bcbe9161619ec98fb28ff51d45f97da80980bf5dd1b41c779b0de53f73e40abd2d3ebc2dc751065959b27ecbbd1c8f663eb85580a2ffa424a32c048c32157d543d104a3cdc94a13608934d047eaeba2f153ee9e3093f730612ea63c9ffa162c009da59874d92afc594c873da2fd7a564bdf7db815b45b79d8d3c9b9646ceeb83c429cf0c0f265e6adee56269f83ffaf740f4fa9d9d1315d0cf8df8cbf3ee60b365805779a64b7e2c5583518833c1da85e021a8485ec326344c9e75468251ba46b3bbd55949a7ef2bcf12da82185560da560aa7a8ddec82a970477a0a52b3f72e293c09662ec7f6751330f771c9248966f4af1f709f90a576f8cb39989eccebe34bc637cd40fad78051cc28b4954160a7293a045b7be91cd95303f88dab1bc2462f6aedce2a1033968bd524b6d199eb3e0b8e5eaec6b733fcaf108fb75544235c82880482d937e6e0d4b49f626bc2e65513b377d03a67197f7c9ee238fb9c58405431a876c473062a04301b63f05118bf9623c51edf1e4dde65ec7e100031682e392820cb6efd18e1366b2d7f17a866fa88d3919d08c9116fef9e4e5a73ad9d933cbff10d19de472d18db9993d9c85dacb7c7b62af87af4b841fa31d529d205309d7e4c8bb2816b30207400669ffb19745cfbd1dac1fb264956103e9fb2ac3de2031f8b0bee858cb752119c63fd007f06f7a3b054200c6d0a5c32dc20c75e8bac976ad9622752bf3768afa27775bb1f5accabaa09dfe9de7112879dae0a7ced00558ae7b4051506feffdc6acf24c36bdf7dd5df214b0ebc61e6d21900bb6e45ba2f373f71560e65ac3ea8f460dc13085500fd2cdec641ab0e735d297c7b245ca213a515d86f04f6cb0f72bb2831784561c0138e792be1eba237e9708e48fa0f45fe53508d70e678a790e4b73b2d8f98a6e78ea9c2cb1321bb0e3bf85f9495fca30ad30f6e31a9ff19033da3cc092dddb3d225a2fa4d8ce45a177ca598343b896786104f04bda7408980b4d560adce37c22878ffa8d169", 0x1000, 0x84, &(0x7f0000007b80)=@xdp={0x2c, 0x4, r1, 0x1a}, 0x80) clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) 00:17:02 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x101902, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000600)="f73be22b1979bd128ab22f3784b3236e012af7f7c573db34d8b89ae6badca86f1d8137f210c8f716b86f2ee137f2e116d0f8bde8e7c4908b428213c7d7a7270f8abda9cec154d01a02256c91908a6a9cf1657c922d071a8b35959118e4face12baf7cbbc4f224ac9807c89547fefb202eacfd96dd3") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000580)=0x6) fcntl$getown(r1, 0x9) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0)={0xffffffffffffffff}, 0x0, r2, 0x30, 0x1, @ib={0x1b, 0x6, 0x1f, {"7790d82bbb4fc005b42377a9872cbcc2"}, 0x2, 0x3ff, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000280), r6}}, 0x18) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000380)={r4, 0x80000, r7}) fsetxattr$trusted_overlay_origin(r5, &(0x7f00000003c0)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2) ioctl$KDDISABIO(r3, 0x4b37) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) bind$vsock_stream(r8, &(0x7f0000000500)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000540)) syz_open_dev$midi(&(0x7f0000000680)='/dev/midi#\x00', 0x10001, 0x240900) 00:17:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x300000000000000, 0x8, 0x0, r0, 0x0}]) [ 478.150525][T22665] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 478.158688][T22665] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000002100050fd25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) r4 = getpgrp(r3) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfb) syz_open_dev$loop(0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r5 = geteuid() setreuid(r5, r5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$packet(r2, &(0x7f0000000080)="f809de", 0x3, 0x57, 0x0, 0x0) 00:17:02 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x81, 0x10000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) 00:17:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x4, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x400000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000548d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 478.685340][T22708] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 478.693747][T22708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:03 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) r1 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x80000000, 0x4) 00:17:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000002100054cd25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x500000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000002c0)={0x9, 0x0, 0x456, 0x0, 0x3}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x204000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000280)={0x0, {0x2, 0x3ff}}) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 00:17:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x5, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 478.997664][T22733] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 479.006070][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x1100000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000380)="1d43896e8d643ecf570cf55a401c44eec386b8b86f4a17523d8c73819f85a759b8faf1cf54a908c999123fae4017ddc225e3c8a37486a09b026457e7f55404fa16b6fd1b9e2c15e540eedb529ad7238edd272c7f26c0cf6d4b733dea5cc914675573f21f45f7c469372539bb425246ead10f1704c275be14062fc01e4aa3fc940f7f0b7445e426e37a08e5b37c88f2138da14530ad19d44c7bcc73615fed00a2dcac2a654144b792d7f368b246b08a95443e576a871a2ded889eb00e12a4a6717454e7738f77ac80c23524dce7a9e6faeb64f5c78c5611c262391dcade4adc94e7b06bf40f53cbd7", 0xe8}, {&(0x7f0000000480)="61c782a505da78bd34679e5f4ee210985f9b8aafed21e1cbabcb90d523564d48918ed4eb527f2565d49ccb75c6b234f0b25d63047dba9fe2d20fbc2a1ac13c98b33091f24c9d69ca2290889715e489c88dfa63dadc89688d1e5b845b24134c819392d37514bee3bba3e427093b1e181305026d146e39ac55f4c7e61f18fea8ceee584b32667b23cc17ca95189415b99d5944e83f5e469ce6dca983dc11ad2f48489d", 0xa2}, {&(0x7f0000000540)="0069925a3f5c1d155688affd613fb7378782698d89a308a7483ef5035bf3e7737db64d3f01f35b41bf13e5cedd0295892a4f4ed8322c73be4a836e69fa50328132134fa11dbb0b3fc70c503e9d16bcecd8adbe58b24e9ffda0d94b0facf5db598f29e629072c2bf96ab941557b727d9fee9e158c0cf08bc3da0089b8fd5bce3ac4ea5eb202a8d5f85b4eb8b1984cf844723e4c8b75274fd12c24633123440c3bd2dd19de242996b8d9401c47d74c509ea318", 0xb2}, {&(0x7f0000000600)="5d9364182341afde1a9c3fe0455b0689c1181cb04299082482bb93584852480822f7614713725321475bd8f4f265c53fdf395ca5722a6e7300a4ea616df220c1d25fb1a75467dd7021aa65410e3f5b624a1ede7605163e9ca162b868fe85318754415d0431db49d485ce955fb3028f4d5811541a852851cc6f5a3ce770d69236c55d9366f9cf282024ed66984154114df04179ee0aa1b80cf7e542013e879586449e8547adc0cdc78f2a498e1edd6b71879a1bc9143aabfdac97b805ba8e276dbebf03edd26c88060508c2de46089ca73ade13618b0f9c5ca4cc42", 0xdb}, {&(0x7f0000000700)="ed29af28982d7f2ba05a7e46e3a96805d9e286e9b10a49ef417c00d8f4ec3ed22931f0002fc87ca1e4c97d512b16614da7883aab7674b182dd398e07bd20acf027965fe56e6af9d427dc10d43ab9bd1cee147de9a99538c6cfb626c415", 0x5d}, {&(0x7f0000000780)="748169fafa983e255bff654c42542b9083a959e7433a6fe262404bfe34cdce2c9be0bd6e322af798a91111b5209b24a1695991905f761737deb6e8f30841b4a7c9766c7110fde874819dffd6d660b387a0284e5a734c035213105f8234027f1efe942a02eea836533e1faeaae6ac9499c7f1a359f40ef6aa220c7fc7b1ccf7ab670e7a2ee259be17959ee420156f52f9901bc8007f16d2a04a8b9b8e32122c1f3bc81bf92996cff409ed8f26ff55dd4e7ba834eeefa57ebec8b6166a1f9167c0b82781838a", 0xc5}], 0x6, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x3, 0x1, 0xc9, [{[@rand_addr=0x59], 0x3d7}, {[@dev={0xac, 0x14, 0x14, 0xb}], 0xfffffffffffffffe}, {[], 0x7fff}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x90}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xa8}, 0x4040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0x5, 0x5}]}, @ptr={0xf}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x71, 0x0]}}, &(0x7f0000000140)=""/65, 0x60, 0x41}, 0x20) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00\xcd\"\xb1\b\xc3\x94\xbaE~\x1b\x17\x9e\xd3\xcen-\x99U\a\x02w[\xa4=\x97\xd9W\xb3_\xa36|M\x9a.\xa9W\xd3\x97\x16\xe1Bg\a5k\xe0<\n\x857\x99\xdc(d\xd0\xac\x17\xce\x83\xf5\xady\x8b\xedc\xcd\xcd\xfd\xa5\x06\xf2\xb4C\xb12\xa0-`Z\xae0+\xfbUl\xe0b7\bG\"u\'\x11\x8e\xbfY_\x10\xf4\xabf\x85\x92\xed,\xafW\xc7`\x83&\xa8\x975,\x88wG\x1a\xea\xd5\xea\xe0o+\x10v\x18\x17\xbf\xe0Z\x1fc\xf2\x00\x02V7\xb6Q\x7f\x81\xc8\xc8\x02\x95\"\'(R\x98\xdb\x1b\xae\xcf\'\xc5V\xa1\xcci\t\x83', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000a00)='/dev/vcs#\x00', 0x4, 0x2000) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) getsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) sendfile(r2, r2, &(0x7f0000000040)=0xffd, 0x10a00000a) 00:17:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000560d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6316, 0x40000) write$P9_RREMOVE(r2, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x2, 0x0, 0x8, 0x0, r0, 0x0}]) [ 479.293283][T22758] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 479.302126][T22758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x4000000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b56}}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0x8, 0x3}) 00:17:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000568d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xff, @rand_addr="254d63dc4f4111a40a4b4e565bf19c4b", 0x8000}, {0xa, 0x4e23, 0x5, @ipv4={[], [], @loopback}, 0x1000}, r1, 0x25f3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x11, 0x0, [0x7, 0x3f3b, 0x1, 0x4, 0x9, 0x5, 0x40, 0x4, 0x0, 0x20, 0x6, 0x3ff, 0xe74e, 0x7, 0x9, 0xfffffffffffffffe]}, {0x5, 0x0, [0x8, 0x3, 0x9, 0xff, 0x7, 0x1, 0x628, 0x0, 0x3ff, 0x6d4, 0x6, 0x0, 0x9, 0x7ff, 0xefe, 0xffff]}, {0x10, 0x0, [0x3, 0x8, 0x6, 0x3, 0x3, 0x20, 0x4, 0x5, 0x4, 0xa1d0, 0x4, 0x6, 0x101, 0x2, 0x5, 0x5]}, {0x5, 0x0, [0x74, 0x8, 0x3, 0x39, 0x40000000000000, 0x3, 0x80000001, 0xa9d, 0x3, 0x4d, 0x20, 0x200, 0xfffffffffffffff8, 0x6, 0x6, 0x7]}, {0x6, 0x0, [0x1, 0x1ff, 0x4, 0xb989, 0x9, 0x4, 0x8, 0x9, 0xef, 0x3f, 0x5, 0x7, 0x5, 0x7, 0x7, 0x8080000]}, {0x11, 0x0, [0x6e, 0x401000000000, 0x9, 0x4, 0x0, 0x2, 0x8000, 0x3f, 0xffffffff7fffffff, 0x0, 0xfffffffffffffffb, 0x6, 0x80000000, 0x0, 0x6, 0xfffffffffffffff9]}, {0x8, 0x0, [0x9, 0x7fff, 0x7, 0x0, 0x200, 0x20, 0xffff, 0x2, 0x4, 0x7, 0x2, 0x3, 0x7, 0x200, 0x4, 0x1]}, {0x22, 0x0, [0x978, 0x2, 0x8, 0x0, 0xff, 0x4, 0xffff, 0x6, 0x20, 0x9, 0x3, 0x1, 0x637e, 0x9, 0x7, 0x10001]}], r1, 0x1, 0x1, 0x240}}, 0x20) 00:17:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:04 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f00000001c0)='-27.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000140)={'trans=tcp,', {'port'}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 479.640047][T22787] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 479.648316][T22787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x8000000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x3, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x240000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000240)=0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) 00:17:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000002100056cd25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 479.811550][T22795] 9pnet: p9_fd_create_tcp (22795): problem connecting socket to -27.0.0.1 00:17:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xff, @rand_addr="254d63dc4f4111a40a4b4e565bf19c4b", 0x8000}, {0xa, 0x4e23, 0x5, @ipv4={[], [], @loopback}, 0x1000}, r1, 0x25f3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x11, 0x0, [0x7, 0x3f3b, 0x1, 0x4, 0x9, 0x5, 0x40, 0x4, 0x0, 0x20, 0x6, 0x3ff, 0xe74e, 0x7, 0x9, 0xfffffffffffffffe]}, {0x5, 0x0, [0x8, 0x3, 0x9, 0xff, 0x7, 0x1, 0x628, 0x0, 0x3ff, 0x6d4, 0x6, 0x0, 0x9, 0x7ff, 0xefe, 0xffff]}, {0x10, 0x0, [0x3, 0x8, 0x6, 0x3, 0x3, 0x20, 0x4, 0x5, 0x4, 0xa1d0, 0x4, 0x6, 0x101, 0x2, 0x5, 0x5]}, {0x5, 0x0, [0x74, 0x8, 0x3, 0x39, 0x40000000000000, 0x3, 0x80000001, 0xa9d, 0x3, 0x4d, 0x20, 0x200, 0xfffffffffffffff8, 0x6, 0x6, 0x7]}, {0x6, 0x0, [0x1, 0x1ff, 0x4, 0xb989, 0x9, 0x4, 0x8, 0x9, 0xef, 0x3f, 0x5, 0x7, 0x5, 0x7, 0x7, 0x8080000]}, {0x11, 0x0, [0x6e, 0x401000000000, 0x9, 0x4, 0x0, 0x2, 0x8000, 0x3f, 0xffffffff7fffffff, 0x0, 0xfffffffffffffffb, 0x6, 0x80000000, 0x0, 0x6, 0xfffffffffffffff9]}, {0x8, 0x0, [0x9, 0x7fff, 0x7, 0x0, 0x200, 0x20, 0xffff, 0x2, 0x4, 0x7, 0x2, 0x3, 0x7, 0x200, 0x4, 0x1]}, {0x22, 0x0, [0x978, 0x2, 0x8, 0x0, 0xff, 0x4, 0xffff, 0x6, 0x20, 0x9, 0x3, 0x1, 0x637e, 0x9, 0x7, 0x10001]}], r1, 0x1, 0x1, 0x240}}, 0x20) [ 479.969300][T22809] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 479.977502][T22809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xfeffffff00000000, 0x8, 0x0, r0, 0x0}]) 00:17:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000300)=""/82) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) write$P9_RLCREATE(r0, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x2}, 0xffffffff00000000}}, 0x18) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x400) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) 00:17:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x4, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000574d25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xff, @rand_addr="254d63dc4f4111a40a4b4e565bf19c4b", 0x8000}, {0xa, 0x4e23, 0x5, @ipv4={[], [], @loopback}, 0x1000}, r1, 0x25f3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x11, 0x0, [0x7, 0x3f3b, 0x1, 0x4, 0x9, 0x5, 0x40, 0x4, 0x0, 0x20, 0x6, 0x3ff, 0xe74e, 0x7, 0x9, 0xfffffffffffffffe]}, {0x5, 0x0, [0x8, 0x3, 0x9, 0xff, 0x7, 0x1, 0x628, 0x0, 0x3ff, 0x6d4, 0x6, 0x0, 0x9, 0x7ff, 0xefe, 0xffff]}, {0x10, 0x0, [0x3, 0x8, 0x6, 0x3, 0x3, 0x20, 0x4, 0x5, 0x4, 0xa1d0, 0x4, 0x6, 0x101, 0x2, 0x5, 0x5]}, {0x5, 0x0, [0x74, 0x8, 0x3, 0x39, 0x40000000000000, 0x3, 0x80000001, 0xa9d, 0x3, 0x4d, 0x20, 0x200, 0xfffffffffffffff8, 0x6, 0x6, 0x7]}, {0x6, 0x0, [0x1, 0x1ff, 0x4, 0xb989, 0x9, 0x4, 0x8, 0x9, 0xef, 0x3f, 0x5, 0x7, 0x5, 0x7, 0x7, 0x8080000]}, {0x11, 0x0, [0x6e, 0x401000000000, 0x9, 0x4, 0x0, 0x2, 0x8000, 0x3f, 0xffffffff7fffffff, 0x0, 0xfffffffffffffffb, 0x6, 0x80000000, 0x0, 0x6, 0xfffffffffffffff9]}, {0x8, 0x0, [0x9, 0x7fff, 0x7, 0x0, 0x200, 0x20, 0xffff, 0x2, 0x4, 0x7, 0x2, 0x3, 0x7, 0x200, 0x4, 0x1]}, {0x22, 0x0, [0x978, 0x2, 0x8, 0x0, 0xff, 0x4, 0xffff, 0x6, 0x20, 0x9, 0x3, 0x1, 0x637e, 0x9, 0x7, 0x10001]}], r1, 0x1, 0x1, 0x240}}, 0x20) 00:17:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff00000000000000, 0x8, 0x0, r0, 0x0}]) [ 480.322108][T22836] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 480.331405][T22836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) recvmmsg(0xffffffffffffff9c, &(0x7f0000008d00)=[{{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/194, 0xc2}], 0x5, &(0x7f0000002540)=""/79, 0x4f}, 0x1}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000025c0)=""/88, 0x58}, {&(0x7f0000002640)=""/196, 0xc4}, {&(0x7f0000002740)=""/180, 0xb4}, {&(0x7f0000002800)=""/132, 0x84}, {&(0x7f00000028c0)=""/133, 0x85}], 0x5, &(0x7f0000002a00)=""/244, 0xf4}, 0x7}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/39, 0x27}], 0x3}, 0x1}, {{&(0x7f0000004b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004c00)=""/113, 0x71}, {&(0x7f0000004c80)=""/235, 0xeb}, {&(0x7f0000004d80)=""/4096, 0x1000}], 0x3, &(0x7f0000005dc0)=""/73, 0x49}, 0x40}, {{&(0x7f0000005e40)=@xdp, 0x80, &(0x7f0000006140)=[{&(0x7f0000005ec0)=""/247, 0xf7}, {&(0x7f0000005fc0)=""/171, 0xab}, {&(0x7f0000006080)=""/125, 0x7d}, {&(0x7f0000006100)=""/53, 0x35}], 0x4, &(0x7f0000006180)=""/255, 0xff}, 0x4}, {{&(0x7f0000006280)=@caif=@dbg, 0x80, &(0x7f0000006500)=[{&(0x7f0000006300)=""/210, 0xd2}, {&(0x7f0000006400)=""/163, 0xa3}, {&(0x7f00000064c0)=""/48, 0x30}], 0x3, &(0x7f0000006540)=""/212, 0xd4}, 0xa3}, {{&(0x7f0000006640)=@nl, 0x80, &(0x7f0000007940)=[{&(0x7f00000066c0)=""/133, 0x85}, {&(0x7f0000006780)=""/115, 0x73}, {&(0x7f0000006800)=""/49, 0x31}, {&(0x7f0000006840)=""/4096, 0x1000}, {&(0x7f0000007840)=""/215, 0xd7}], 0x5, &(0x7f00000079c0)=""/11, 0xb}, 0x3}, {{&(0x7f0000007a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000008bc0)=[{&(0x7f0000007a80)=""/241, 0xf1}, {&(0x7f0000007b80)=""/47, 0x2f}, {&(0x7f0000007bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000008c00)=""/215, 0xd7}, 0x18}], 0x8, 0x40002121, &(0x7f0000008f00)={0x0, 0x1c9c380}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000008f40)={0xb1d6, {{0x2, 0x4e24, @local}}, 0x1, 0x3, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, {{0x2, 0x4e20, @multicast2}}]}, 0x210) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2000, 0x0) getsockname$ax25(r3, &(0x7f0000000240)={{0x3, @default}, [@null, @rose, @rose, @rose, @null, @null, @default, @default]}, &(0x7f0000000100)=0x48) uselib(&(0x7f0000009180)='./file0\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xff, @rand_addr="254d63dc4f4111a40a4b4e565bf19c4b", 0x8000}, {0xa, 0x4e23, 0x5, @ipv4={[], [], @loopback}, 0x1000}, r1, 0x25f3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x11, 0x0, [0x7, 0x3f3b, 0x1, 0x4, 0x9, 0x5, 0x40, 0x4, 0x0, 0x20, 0x6, 0x3ff, 0xe74e, 0x7, 0x9, 0xfffffffffffffffe]}, {0x5, 0x0, [0x8, 0x3, 0x9, 0xff, 0x7, 0x1, 0x628, 0x0, 0x3ff, 0x6d4, 0x6, 0x0, 0x9, 0x7ff, 0xefe, 0xffff]}, {0x10, 0x0, [0x3, 0x8, 0x6, 0x3, 0x3, 0x20, 0x4, 0x5, 0x4, 0xa1d0, 0x4, 0x6, 0x101, 0x2, 0x5, 0x5]}, {0x5, 0x0, [0x74, 0x8, 0x3, 0x39, 0x40000000000000, 0x3, 0x80000001, 0xa9d, 0x3, 0x4d, 0x20, 0x200, 0xfffffffffffffff8, 0x6, 0x6, 0x7]}, {0x6, 0x0, [0x1, 0x1ff, 0x4, 0xb989, 0x9, 0x4, 0x8, 0x9, 0xef, 0x3f, 0x5, 0x7, 0x5, 0x7, 0x7, 0x8080000]}, {0x11, 0x0, [0x6e, 0x401000000000, 0x9, 0x4, 0x0, 0x2, 0x8000, 0x3f, 0xffffffff7fffffff, 0x0, 0xfffffffffffffffb, 0x6, 0x80000000, 0x0, 0x6, 0xfffffffffffffff9]}, {0x8, 0x0, [0x9, 0x7fff, 0x7, 0x0, 0x200, 0x20, 0xffff, 0x2, 0x4, 0x7, 0x2, 0x3, 0x7, 0x200, 0x4, 0x1]}, {0x22, 0x0, [0x978, 0x2, 0x8, 0x0, 0xff, 0x4, 0xffff, 0x6, 0x20, 0x9, 0x3, 0x1, 0x637e, 0x9, 0x7, 0x10001]}], r1, 0x1, 0x1, 0x240}}, 0x20) 00:17:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000002100057ad25a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x5, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 480.622500][T22860] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 480.630763][T22860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:05 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='\x18\xff\x16Y_\xbd:\xe6\xea\xed\xdc\x98O{\xf9z\x1aQ\xa9', 0x1, 0xfffffffffffffde6, &(0x7f0000000340)=""/207, 0x80000000040f00, 0x0, [], 0x0, 0xfffffffffffffffa, r0, 0x8, 0x0, 0xfffffd2d, 0x10, 0x0}, 0x2c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x200400) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000100)=""/46, &(0x7f0000000140)=0x2e) ioctl$RTC_AIE_ON(r1, 0x7001) 00:17:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20280648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff0f000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7fffffff, 0x20000) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000300)={@empty, @multicast1, 0x0, 0x8, [@loopback, @remote, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, @loopback, @empty]}, 0x30) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x240, 0x4, 0x5, 0x200, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x3, 0x200, 0x8, 0x3, 0x1000, 0x7, 0x7f, r3}, &(0x7f00000002c0)=0x20) 00:17:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="1f00000001031900efff07000000068100023b0509000100010120ff3fff58051e912cf0e8d6e1ad6ea4f60cb65b9f3c68e57eb11b3d149c97326bb035c79bd0fb911b28a50d90b08d9fbe2f06908755", 0x50}], 0x1) 00:17:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x11, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20380648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x2f, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {r2, r3+30000000}}, &(0x7f0000000280)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r4, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) openat$cgroup_type(r4, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) 00:17:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x80540) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000100)={0x8, 0x9}) 00:17:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) [ 481.129361][ C1] net_ratelimit: 20 callbacks suppressed [ 481.129371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 481.140899][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:17:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20480648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x300, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) 00:17:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) socket$l2tp(0x18, 0x1, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20580648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 481.689347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 481.695237][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 481.701159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 481.706943][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20680648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:06 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.u'}, 0x15) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="4780631417f1e7768bc8817a24cde4e1801ac974abb8137275e615dba52aa651bedfd3", 0x23) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, [{}]}, 0x28) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 00:17:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x500, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:06 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r0}}, 0x48) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x6d, [], 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000240)=""/109}, &(0x7f0000000340)=0x78) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r0, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x4}}, 0x20) 00:17:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 00:17:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20780648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) [ 482.170407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 482.177853][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 482.184521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 482.191617][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0xfffffffffffffcbd, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0xfffffcf6) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 00:17:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x1100, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20880648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0xf74fef3723dd530e}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000)=0x401, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0x1, r1}}, 0xc5) [ 482.475212][T22994] validate_nla: 6 callbacks suppressed [ 482.475222][T22994] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 482.489450][T22994] __nla_validate_parse: 6 callbacks suppressed [ 482.489460][T22994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0xfffffffffffffcbd, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0xfffffcf6) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 00:17:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x2, r0, 0x0}]) 00:17:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20980648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x3f00, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0xfffffffffffffcbd, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0xfffffcf6) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 00:17:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xfffffffffffffffd, 0x80800) 00:17:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 482.913644][T23025] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 482.921861][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x3, r0, 0x0}]) 00:17:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:07 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4200, r0, 0x4, 0xfffffffffffffffe) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000949daab94800000008000000000000000000000800000000000000000000000b0000000000000000519d26345af8f900000c00000000000000"], 0x0, 0x45}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000300)={{0x4, 0x0, 0x9, 0x101, 'syz0\x00', 0x60000}, 0x5, 0x200, 0xfffffffffffff455, r0, 0x8, 0x5, 'syz1\x00', &(0x7f0000000000)=['+\x00', '\x00', 'em1selinuxproc@eth0vmnet1wlan0\x00', '!self\x00', '-wlan1k^em0]\x00', '.posix_acl_access!mime_typenodevuser\x00', 'keyring\x00', '-cgroup\x00'], 0x6a, [], [0x51, 0x7, 0x629b800000000000, 0x5]}) 00:17:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup2(r0, r0) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="647fac4e01020000005d00370022d9000080010000d3070000000000000000000000005682000065726c6f00006d655f747970652a02003a28000018002f6465762f642f72646d615f636d00"], 0x64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x8000000000000, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r2, 0x0, 0x2, 0x4}}, 0xffffffffffffff58) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140), 0x10) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) 00:17:07 executing program 5: mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x802, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000002c0), 0x4) 00:17:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x4000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x4, r0, 0x0}]) [ 483.280194][T23052] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 483.288417][T23052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x1f004, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0xfb, 0x0, 0xfffffffffffffffd], 0x2000000}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000000)={0x0, 0xffff}) syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400100, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20b80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:07 executing program 2: prctl$PR_GET_DUMPABLE(0x3) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x121000, 0x10) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000100)={0x1, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x3, 0xfffffffffffffffe}}, 0x20) prctl$PR_SET_THP_DISABLE(0x29, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x3d, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty, 0x1}, r3, 0x200000}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x24, 0x0, [0x5, 0x2, 0x1, 0x3, 0x5, 0x81, 0x7, 0x46, 0x0, 0x4, 0x7f, 0x20, 0x9, 0x5, 0x3, 0x1f]}, {0x4, 0x0, [0x401, 0x46b0b11c, 0x80000001, 0x7, 0xffffffffffff8001, 0x0, 0x7fe000000, 0x94a8, 0xe7, 0x100000001, 0x5, 0x0, 0x5, 0x80, 0xfffffffffffff800]}, {0x9, 0x0, [0x0, 0x708000000000000, 0x7f, 0x1, 0x7ff, 0xbf9b, 0x5, 0x0, 0xffff, 0x0, 0x255f, 0x9, 0x4, 0x5, 0x3b, 0x8]}, {0x4, 0x0, [0x7fff, 0xffffffff83ef3c0a, 0x0, 0x2, 0x80000001, 0x3, 0x5, 0x6, 0xffff, 0x6, 0x9, 0x1, 0x9, 0xbd, 0x5, 0x5]}, {0x4, 0x0, [0x8, 0x2, 0x4c, 0x0, 0xffffffffffffff81, 0x6, 0x8, 0x0, 0x1, 0x40, 0xffff, 0x59571d78, 0x3f, 0x2, 0x8001, 0x7]}], r3, 0x1, 0x1, 0x168}}, 0x20) 00:17:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff00, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x5, r0, 0x0}]) [ 483.695212][T23078] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 483.703730][T23078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:08 executing program 2: chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) 00:17:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xda) 00:17:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20c80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff0f, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x11, r0, 0x0}]) 00:17:08 executing program 2: personality(0x400000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r0, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r0}}, 0x18) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video1\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xffffffffffffcff0, 0x0) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x1) [ 484.152307][T23117] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 484.160623][T23117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:08 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000040)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000120b43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) clock_adjtime(0x6, &(0x7f00000000c0)={0x3, 0x8, 0x800, 0x57da, 0x0, 0x68, 0x9, 0x3, 0x40, 0x4, 0x4, 0x1, 0x4, 0x80, 0x0, 0x382, 0x6, 0x4, 0x7, 0x0, 0x0, 0x7, 0x5, 0x1169af87, 0x8, 0x2000000000000}) 00:17:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20d80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9be, 0x80) ioctl$KDMKTONE(r1, 0x4b30, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0xfffffffffffffffd, @local}, r2}}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @mcast2, 0x10000}, 0x1c) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 00:17:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x1000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x300, r0, 0x0}]) 00:17:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000007c0)={0x0, @dev, @empty}, &(0x7f0000000800)=0xc) recvfrom$packet(r1, &(0x7f0000000140)=""/145, 0x91, 0x0, &(0x7f0000000840)={0x11, 0x4, r2, 0x1, 0x8a3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 484.475105][T23144] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 484.483357][T23144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20e80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x2000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x500, r0, 0x0}]) 00:17:09 executing program 5: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) keyctl$join(0x1, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x8) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/90) r2 = socket(0x1e, 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x20100) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000480)=&(0x7f0000000240)) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000180)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0xfffffffffffffdd1, 0x0, 0x0, 0x0, 0xffffffffffffff14}, 0x2400c041) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) dup2(r0, r2) [ 484.846837][T23168] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 484.855233][T23168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = semget(0x2, 0x0, 0x80) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000080)=""/32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) r5 = getgid() write$FUSE_ATTR(r3, &(0x7f0000000380)={0x78, 0x0, 0x6, {0xffffffffffff7fff, 0x7, 0x0, {0x2, 0x1, 0x40, 0xf9, 0x4, 0x10000, 0x4, 0x1f, 0x100000001, 0x2, 0x4, r4, r5, 0x6bd6, 0x800}}}, 0x78) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:09 executing program 5: r0 = socket$kcm(0x2, 0x200000000000002, 0x73) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) open$dir(&(0x7f0000000000)='./file0\x00', 0x200000, 0x82) 00:17:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x1100, r0, 0x0}]) 00:17:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d20f80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x3000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x3, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000400)="9ee9f6ff9cc875699f904b698f398d00d25babb332b01b6988783bfa5513445b8a1aa06b3345016e58569912615ace8e136c16a14e63e9d9c7e700e9090b6afcf5eda418b5a06bb8cb117daf0b64e64ff1cf3eecb5acabd1fb08") r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffffffffff9, @empty, 0xffff}, 0x1c) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000240)={{0x7f, 0x9622}, {0x3, 0x1f}, 0xc11, 0x5, 0xc6}) 00:17:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:09 executing program 5: r0 = socket(0x1b, 0x7, 0x1) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2004e20, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000010, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x214, r2, 0xa18, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ca6248b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6f4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa0d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7f) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8270edf68af669a4b2bb43eaa313dbdfdaeb614c1f7dc1252430a28c7c4a8b08153af34532270afa34458698404df479f75c6a5dd3dbabc2d7af0b9f11b86b8445ae2bad11d125c0141d0253a421c5a8ce21dcf0050aa836eb1aaf7f9b891a087e15f63e81bdda0fc92965add8dc8ec821fc69d3c0ad0b7980857469d2aa3fa1b9919583c739b67d02b03fb452bf552d58c56262c6cb"], 0x1}}, 0x1) recvfrom(r1, 0x0, 0x164, 0x1, 0x0, 0x0) [ 485.253427][T23200] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 485.261712][T23200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x4000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:09 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21080648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x4000, r0, 0x0}]) 00:17:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff77, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0xffffffffffffffda) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x5b6) [ 485.653803][T23233] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 485.662206][T23233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xff00, r0, 0x0}]) 00:17:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0xfffffffffffffccc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x8, {0x2, 0x4e24, @broadcast}, 'bond_slave_1\x00'}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x0, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) 00:17:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x5000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21180648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x7) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffffe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) ioctl$sock_ifreq(r1, 0x8947, &(0x7f00000000c0)={'bpq0\x00', @ifru_hwaddr=@dev={[], 0x14}}) 00:17:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = socket(0x2, 0xa049b2b057920d7c, 0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a500000030700e56fc44d9ceba2c5afdc3e1b400ca0b9eaefbe917fd05f0c528d6d9e5c57affc0ded50080c70f72fb1f81bfe2b0f95fdcfdb94cc1e6d85e3b0a30b76a949766f73080d90e46970bb07e6e9d997f88d4e06e45d8026746d2be53902ba06ef72795341d9b64ca91428396ea4d364a2f1de2e3cb252ad68fb2a5892f485fbeed2bd35d4f759dde216be08998050ff1e9aa19100330c1867725b1d399299a4fa7404b0a47"], &(0x7f0000000080)=0xad) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x101, 0x8001, 0xffff, 0x3, 0x3, 0x7fff, 0x8000, r3}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 00:17:10 executing program 5: unshare(0x2060400) r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xdcb, 0x400) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 486.062834][T23266] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 486.071163][T23266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xff0f, r0, 0x0}]) 00:17:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x11000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21280648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r1, 0xa}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) 00:17:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = socket(0x2, 0xa049b2b057920d7c, 0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a500000030700e56fc44d9ceba2c5afdc3e1b400ca0b9eaefbe917fd05f0c528d6d9e5c57affc0ded50080c70f72fb1f81bfe2b0f95fdcfdb94cc1e6d85e3b0a30b76a949766f73080d90e46970bb07e6e9d997f88d4e06e45d8026746d2be53902ba06ef72795341d9b64ca91428396ea4d364a2f1de2e3cb252ad68fb2a5892f485fbeed2bd35d4f759dde216be08998050ff1e9aa19100330c1867725b1d399299a4fa7404b0a47"], &(0x7f0000000080)=0xad) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x101, 0x8001, 0xffff, 0x3, 0x3, 0x7fff, 0x8000, r3}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 00:17:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 486.329297][ C0] net_ratelimit: 20 callbacks suppressed [ 486.329306][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 486.340855][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 486.346714][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 486.352558][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 486.358408][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 486.364698][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x1000000, r0, 0x0}]) 00:17:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21380648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x802, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) lstat(0x0, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 00:17:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x3f000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x80}, {r0, 0x100}, {r0, 0x61}, {r0, 0x8000}, {r0, 0x8}, {r0, 0x1040}], 0x6, &(0x7f0000000240)={r2, r3+30000000}, &(0x7f0000000280)={0xb3}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) acct(0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21480648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x2000000, r0, 0x0}]) 00:17:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x40000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21580648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x3000000, r0, 0x0}]) 00:17:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21680648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 487.369341][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 487.375188][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:17:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x3000000, r0, 0x0}]) 00:17:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xfeffffff, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:12 executing program 2: prctl$PR_SET_FPEMU(0xa, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x6}}, 0x20) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000380)="fbb21118367f052dbebd57334b7e3fb78e2d95a14117a90a0bb5c1b799cd86fdb8db99956a6b1cfb7799d30257bbe765a506c7c3117416d52522e6eb66215057d7adda8fb8dbcc764b4bc40af44f7157e65504095204693b24cd983c9fb705e080e245b109346b5e581f4adfc72f19b62ca647ebee6e7efda6a2d6c2be75e4c45f3be666dcf99f3edb25c8b8d2e19a1ffecec26bc21e0fa6e146f6a32c", 0x9d) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0xffffffffffffffeb, 0xfa00, @ib_path={&(0x7f0000000240)=[{0xa, 0x0, [0x200, 0x81, 0x0, 0x10000, 0xc75, 0x10001, 0x7, 0x8, 0xf3, 0xffffffffffff4874, 0x2, 0x6ba, 0x10000, 0x80000000, 0x6]}, {0x8, 0x0, [0x9, 0x9, 0x9, 0x68, 0x8, 0xffff, 0x401, 0x2e2, 0x64, 0x6, 0x80000001, 0x2, 0x0, 0x100000000, 0x9, 0x84]}, {0x24, 0x0, [0x7fffffff, 0x4, 0xb99, 0x400, 0x9, 0x63e, 0x8001, 0x7ff, 0x800, 0x8001, 0x1f, 0x1f, 0x1000, 0x80000000, 0x3, 0x1]}, {0x8, 0x0, [0x3, 0x7ff, 0xffffffffffffff23, 0xfffffffffffffe00, 0xffff, 0x200, 0x3, 0x5, 0x0, 0x100, 0x3ff, 0x4, 0x0, 0x5, 0xf00]}], r1, 0x1, 0x1, 0x120}}, 0x20) 00:17:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21780648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x4000000, r0, 0x0}]) 00:17:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 487.770153][T23373] validate_nla: 6 callbacks suppressed [ 487.770163][T23373] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 487.784065][T23373] __nla_validate_parse: 6 callbacks suppressed [ 487.784076][T23373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21880648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x5000000, r0, 0x0}]) [ 487.929336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 487.935255][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x80) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000100)={0x3, 0x800000}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x5, 0x4d, 0x1}, 0x7) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_read_part_table(0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000001380)="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", 0x123, 0xdd}, {&(0x7f0000002380)="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", 0x1db, 0x7}]) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8001, 0x2001) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x7ff) 00:17:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff000000, 0x0, 0x8, 0x0, r0, 0x0}]) [ 488.177272][T23408] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 488.185536][T23408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local, 0xfffffffffffffffd}, r1}}, 0x48) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x5224, 0x3, &(0x7f0000000500)=[{&(0x7f0000000240)="2428e2237ec75ca51a4119e5150e5e4e6bca6e98538ca1ddff3fca272f49a90b9ed9e1060da37f94447bcb1d8093312b70169b36a2ba4f39bb32196bc626e34647906f2ab90f1a90741be1ca31d355ccb1c3cd4474a1788708c76712e5695c13342fdcc9428ecd8c7a98bf80ccd0aa1bb3ac0776e212ae481db4e212a19af2cdf6d038385bee1cdd94e32868f5f497c89a50f082409875e78b1fc2e99089a4825c5a48f98a", 0xa5, 0x9}, {&(0x7f0000000300)="f214ecc72c8b0032ca04a1c600b4d76f6b274d6fe08ca27269e1099bbe79d42c7d74bd7a96d84015171d1998f40171746894f0451b516dca325ac74dff1232af9bc0ddd40d1108c4f079f95cf820ca18ec6b5e2bfb7d769ddb5fe4d567f8910c39978e98abebecf398949d82c8002c8006656536fc455927731f02ed28c34abe76a1a19061a3e2330b77dfa362dcb76bd48674b20db6c8a56b0d19a8590512e09bdfdd0fed8f7c5d98380dc0324bdea0401697b5079729aa3e14df53acd07f3af37f885ae1f69b9ee7", 0xc9, 0x4}, {&(0x7f0000000400)="8ac4f15e9661f8d37847816ba93889644f5dc62f08de8bcc60991623ec287fd714226ccd6d83b8d427f064bafd49a9890dd02eed34feb84a7865c1611457eba1163bb6ac508547036f091565fb1fcd72ef1bd33021d4a4b8592f492a0ccce5c73c1582e838a9924ddf214106452dfd0fdd7dad5616baa35e325bb08a17dd6e340a7201d87f98aa4c446e68463820ef60b9c6077f28c2099b6eaf24e4ac5b8f1726900aab83bf66077c9698f06c506c59d350cea48b90f7adc10261bdeb8ddfcbe4bc811df6e47bb2215dba3eb7e2fc9dcb48a5589340260b8ec9dc3e360f84c2098e840138cfb3fa25f5de", 0xeb, 0x3}], 0x401, &(0x7f0000000580)={[{@acl='acl'}, {@fault_injection={'fault_injection', 0x3d, 0x761}}, {@nouser_xattr='nouser_xattr'}], [{@appraise='appraise'}]}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffff9, 0x900) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={{0x2, 0x4, 0xff, 0x1, 0x2, 0x6}, 0x1000}) 00:17:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff0f0000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x11000000, r0, 0x0}]) 00:17:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21980648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 488.483100][T23421] erofs: read_super, device -> /dev/loop2 [ 488.489245][T23421] erofs: options -> acl,fault_injection=0x0000000000000761,nouser_xattr,appraise, [ 488.498562][T23421] erofs: cannot find valid erofs superblock 00:17:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000000c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000400)={'team0\x00', 0x7}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000140)={0x8, 0xc8, 0x39aa, 0x0, 0x0, [], [], [], 0xdca, 0x6}) 00:17:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xfffffffe, 0x0, 0x8, 0x0, r0, 0x0}]) [ 488.621218][T23442] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 488.629540][T23442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 488.639837][T23443] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:17:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 488.664745][T23443] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:17:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x40000000, r0, 0x0}]) 00:17:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x8400) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0xffffffff9f6b5082, {{0x2, 0x4e21, @multicast1}}}, 0x88) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) [ 488.830806][T23459] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 488.838958][T23459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000000c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000400)={'team0\x00', 0x7}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000140)={0x8, 0xc8, 0x39aa, 0x0, 0x0, [], [], [], 0xdca, 0x6}) 00:17:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x100000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21b80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 489.041448][T23472] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:17:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xfeffffff, r0, 0x0}]) 00:17:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000140)={0xffffffffffffffff}, 0x102, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = dup2(r0, r0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0xc) 00:17:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:13 executing program 5: r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0xfffffffffffffffd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x02', 0x0, 0x0) dup2(r1, r0) [ 489.215815][T23487] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 489.224119][T23487] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:17:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21c80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xff000000, r0, 0x0}]) 00:17:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x200000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:13 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x90000, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") close(r1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000240)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000100)=0x9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r4, 0x0, 0x1, 0x4}}, 0x20) 00:17:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:14 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x1}}, 0xfffffffffffffedb) [ 489.628069][T23515] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 489.636375][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xff0f0000, r0, 0x0}]) 00:17:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xc2, 0x4) r2 = dup(r0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x2) write$P9_RGETATTR(r2, &(0x7f0000000180)={0xa0}, 0xa0) getsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000080), &(0x7f0000000240)=0x4) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r4, 0x0, 0x1, 0x4}}, 0x20) 00:17:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21d80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x300000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:14 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1000000000000) 00:17:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 489.977208][T23548] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 489.985611][T23548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xfffffffe, r0, 0x0}]) 00:17:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x400000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:14 executing program 5: sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x2001c) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 00:17:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x40) write$selinux_attr(r2, &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22) socket$rxrpc(0x21, 0x2, 0x2) 00:17:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d21e80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x100000000000000, r0, 0x0}]) 00:17:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x500000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)="3901e1da3eb69ddd", 0x0, 0x2}, 0x28) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4080, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000140)=0x100000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000300)=@isdn={0x22, 0x0, 0x9, 0x0, 0x8}, 0x80, &(0x7f0000000bc0)}, 0x0) socketpair(0x0, 0x0, 0x100000000000, 0x0) socketpair(0x1, 0x20000000000001, 0x6000000000000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000440)='lo\xc5\x96o\xdeQ\xb9>\xa9dJ,\x00\xd2\x97\x04\x83\xdc\r') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 00:17:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x101000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)={0x10000, 0x1c, [0x5, 0x100000000, 0x5, 0x55d5, 0x3ff, 0x1, 0x34]}) getsockopt$inet6_buf(r1, 0x29, 0xdd, &(0x7f0000000100)=""/53, &(0x7f0000000240)=0x35) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x1, 0x4}}, 0x20) [ 490.527567][T23585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22180648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x200000000000000, r0, 0x0}]) 00:17:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 490.681375][T23597] device lo entered promiscuous mode [ 490.728378][T23606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x2001) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000100)={0x8001, 0x0, 0x7}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 00:17:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x1100000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0) pipe(0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) msgget(0xffffffffffffffff, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 00:17:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22280648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x300000000000000, r0, 0x0}]) 00:17:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 00:17:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x3f00000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) [ 491.219505][T23640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22380648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3fa, 0x0, 0x26}) 00:17:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x400000000000000, r0, 0x0}]) 00:17:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x4000000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) [ 491.529323][ C1] net_ratelimit: 20 callbacks suppressed [ 491.529332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 491.540836][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 491.643724][T23663] debugfs: File 'dropped' in directory 'loop0' already present! [ 491.651896][T23663] debugfs: File 'msg' in directory 'loop0' already present! [ 491.670200][T23663] debugfs: File 'trace0' in directory 'loop0' already present! 00:17:16 executing program 5: syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/128, 0x80}, {0x0, 0x19}], 0x2, 0x0) 00:17:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x8000000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22480648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:16 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xcb49) 00:17:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x500000000000000, r0, 0x0}]) 00:17:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22580648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 00:17:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 492.089372][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 492.095281][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 492.101222][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 492.107027][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xfeffffff00000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x1100000000000000, r0, 0x0}]) 00:17:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x0, 0x8013, r0, 0x0) 00:17:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22680648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 00:17:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff00000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) 00:17:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 00:17:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 492.569836][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 492.575680][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 492.581570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 492.587349][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x4000000000000000, r0, 0x0}]) 00:17:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22780648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:17 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x0, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) 00:17:17 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/anycast6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xcb49) 00:17:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:17 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') ioctl$RNDZAPENTCNT(r1, 0x5204, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xcb49) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40001, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x765539f84cf8022a) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) 00:17:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0xff0f000000000000, 0x0, 0x8, 0x0, r0, 0x0}]) [ 492.862039][T23751] validate_nla: 7 callbacks suppressed [ 492.862049][T23751] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 492.875882][T23751] __nla_validate_parse: 4 callbacks suppressed [ 492.875892][T23751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x8000000000000000, r0, 0x0}]) 00:17:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22880648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:17 executing program 5: fcntl$getown(0xffffffffffffff9c, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 00:17:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r1) [ 493.249422][T23775] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 493.257564][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x2, 0x8, 0x0, r0, 0x0}]) 00:17:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22980648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xfeffffff00000000, r0, 0x0}]) 00:17:17 executing program 5: r0 = socket$inet(0x2, 0x2, 0x73) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}], 0x2, 0x0) [ 493.541234][T23798] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 493.549596][T23798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 00:17:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 00:17:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xff00000000000000, r0, 0x0}]) 00:17:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x3, 0x8, 0x0, r0, 0x0}]) 00:17:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="0f00000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 493.893266][T23815] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 493.901972][T23815] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:18 executing program 5: r0 = socket$inet(0x2, 0x2, 0x73) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 00:17:18 executing program 2: poll(0x0, 0x0, 0x800000000004a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xffffffa9, 0x0, 0x0, 0x800e00516) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) recvfrom$inet(r2, 0x0, 0x10184, 0x0, 0x0, 0x800e00511) shutdown(r1, 0x0) 00:17:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x4, 0x8, 0x0, r0, 0x0}]) 00:17:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c000000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000000)=""/125, 0x7d, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) socketpair(0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x7c06, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) 00:17:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22b80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xff0f000000000000, r0, 0x0}]) [ 494.391748][T23849] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 494.400008][T23849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c00e000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22c80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f030021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:18 executing program 2: poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x800000000004a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xffffffa9, 0x0, 0x0, 0x800e00516) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) recvfrom$inet(r2, 0x0, 0x10184, 0x2, 0x0, 0x800e00776) shutdown(r1, 0x0) [ 494.541704][T23865] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 494.550444][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x2}]) 00:17:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 00:17:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x5, 0x8, 0x0, r0, 0x0}]) 00:17:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1401002021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22d80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x3}]) [ 494.918951][T23889] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 494.927283][T23889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="00f0ff7f21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22e80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x11, 0x8, 0x0, r0, 0x0}]) 00:17:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="be42690bbbba459e7899004e0dd50738b64feab13891701d58a3c6f61e7b443bc676bd07de202eabe72f2873eccae1f6a87a670aced3f93463f6ac8a534fe40bcb744c12db3d0d42b52a7594e433e875eb91012a1b2ae413", 0x58}], 0x1) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8c90000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b238", 0xfeb9}], 0x2) [ 495.115801][T23898] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 495.124228][T23898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d22f80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x4}]) 00:17:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="effdffff21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 495.239715][T23906] sg_write: data in/out 177333676/65167 bytes for SCSI command 0x0-- guessing data in; [ 495.239715][T23906] program syz-executor.2 not setting count and/or reply_len properly [ 495.310812][T23910] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 495.318955][T23910] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x300, 0x8, 0x0, r0, 0x0}]) 00:17:20 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000640)=[{0x0, 0x0, 0xfffffffffffff3fb}]) 00:17:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000000f000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23080648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:20 executing program 5: 00:17:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x5}]) [ 495.640182][T23931] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 495.648302][T23931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23180648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:20 executing program 5: 00:17:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1402000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:20 executing program 2: 00:17:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x11}]) 00:17:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x500, 0x8, 0x0, r0, 0x0}]) 00:17:20 executing program 5: 00:17:20 executing program 2: 00:17:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23280648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1403000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:20 executing program 2: 00:17:20 executing program 5: 00:17:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1404000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x300}]) 00:17:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x1100, 0x8, 0x0, r0, 0x0}]) 00:17:20 executing program 5: 00:17:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23380648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:20 executing program 2: 00:17:20 executing program 5: 00:17:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1405000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23480648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:20 executing program 5: 00:17:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x3f00, 0x8, 0x0, r0, 0x0}]) 00:17:21 executing program 2: 00:17:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x500}]) 00:17:21 executing program 5: 00:17:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23580648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 496.729308][ C0] net_ratelimit: 20 callbacks suppressed [ 496.729317][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 496.740903][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 496.746739][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 496.752660][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 496.758512][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 496.764430][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:21 executing program 2: 00:17:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140a000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:21 executing program 5: 00:17:21 executing program 2: 00:17:21 executing program 5: 00:17:21 executing program 2: 00:17:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x4000, 0x8, 0x0, r0, 0x0}]) 00:17:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23680648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140e000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x1100}]) 00:17:21 executing program 5: 00:17:21 executing program 2: 00:17:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23780648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:21 executing program 5: 00:17:21 executing program 2: 00:17:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff00, 0x8, 0x0, r0, 0x0}]) 00:17:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140f000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23880648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:21 executing program 5: 00:17:21 executing program 2: 00:17:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x4000}]) 00:17:22 executing program 5: 00:17:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23980648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1460000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 497.769311][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 497.775147][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:17:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff0f, 0x8, 0x0, r0, 0x0}]) 00:17:22 executing program 2: 00:17:22 executing program 5: 00:17:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xff00}]) [ 497.951190][T24084] validate_nla: 7 callbacks suppressed [ 497.951201][T24084] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 497.964972][T24084] __nla_validate_parse: 7 callbacks suppressed [ 497.964983][T24084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14f0000021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:22 executing program 5: 00:17:22 executing program 2: 00:17:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x1000000, 0x8, 0x0, r0, 0x0}]) 00:17:22 executing program 5: 00:17:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400030021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 498.329342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 498.335186][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xff0f}]) 00:17:22 executing program 2: 00:17:22 executing program 5: 00:17:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x2000000, 0x8, 0x0, r0, 0x0}]) 00:17:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400050021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:23 executing program 5: 00:17:23 executing program 2: [ 498.670298][T24125] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 498.678653][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x1000000}]) 00:17:23 executing program 5: 00:17:23 executing program 2: 00:17:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23b80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14db050021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x3000000, 0x8, 0x0, r0, 0x0}]) 00:17:23 executing program 5: [ 498.992529][T24143] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 499.000921][T24143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:23 executing program 2: 00:17:23 executing program 5: 00:17:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000a0021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x2000000}]) 00:17:23 executing program 5: 00:17:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x4000000, 0x8, 0x0, r0, 0x0}]) 00:17:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23c80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:23 executing program 2: 00:17:23 executing program 5: 00:17:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000e0021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x3000000}]) [ 499.482222][T24170] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 499.490556][T24170] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:23 executing program 2: 00:17:23 executing program 5: 00:17:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23d80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x5000000, 0x8, 0x0, r0, 0x0}]) 00:17:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000f0021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:24 executing program 2: 00:17:24 executing program 5: [ 499.781378][T24188] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 499.789641][T24188] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x4000000}]) 00:17:24 executing program 2: 00:17:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d23e80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:24 executing program 5: 00:17:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400400021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x11000000, 0x8, 0x0, r0, 0x0}]) [ 500.105059][T24211] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 500.113360][T24211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x5000000}]) 00:17:24 executing program 5: 00:17:24 executing program 2: 00:17:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400600021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24180648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:24 executing program 5: 00:17:24 executing program 2: 00:17:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x11000000}]) 00:17:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1405db0021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x3f000000, 0x8, 0x0, r0, 0x0}]) 00:17:25 executing program 5: 00:17:25 executing program 2: [ 500.596634][T24236] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 500.604830][T24236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:25 executing program 5: clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180)='\xd1?\xf3\xd7v', 0xfffffffffffffffe) 00:17:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24280648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400f00021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:25 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x0, 0xfffffffe, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:17:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x3, 0x3f) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYBLOB="000326b970030007d32e8cb3000200000800020091ac743557480ba847787aa8f8399e4e200000080006000500000000000097160b12691438d9491c1dc882f477277892963576125dde2811a4874cfd9822e1ca5050d2fe6501c9c93ccc800b3caddee9d76172c79d69e17e7645d20c62d48fe91d10b2e221c2f2c5953f06e416908b5b9879cc75591ca50492459f09f70addd6ea09e9a1f811040f0a9a29f0688d66095116796857343a06e01305c09f3d30b8e7513d5b69e0e8e96cdbff32803a59038b80577fc83861715f86e0065151a0cd6f0c4ba8fd759a0ac8bf8d4a972f825f350287229a0183c4f3b7da91697bc01fb237"], 0x2}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:17:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x40000000, 0x8, 0x0, r0, 0x0}]) 00:17:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x40000000}]) [ 501.011498][T24267] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 501.019848][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:25 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x2, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000003f000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24380648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xfeffffff, 0x8, 0x0, r0, 0x0}]) 00:17:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xfeffffff}]) [ 501.308642][T24286] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 501.317060][T24286] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:25 executing program 2: r0 = memfd_create(&(0x7f0000000000)='&\\/\\\x00', 0x5) lseek(r0, 0xffffffffffffffff, 0x1) 00:17:25 executing program 5: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000300)=ANY=[]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x7fffffff, 0x5, 0x0, 0x6, 0x0, 0x0, 0x80000, 0x3, 0x40, 0x1, 0x1, 0x3ff, 0x2, 0x1, 0x3, 0x122d, 0x0, 0x0, 0x2, 0x3a1, 0x0, 0xfffffffffffff192, 0x7, 0x8000, 0x100, 0x2, 0x5, 0x0, 0x8001, 0x4, 0x0, 0x3, 0x9, 0x3, 0x0, 0x1, 0x0, 0x10000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x400000000000}, r3, 0x1, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2f, 'io'}, {0x2b, 'rdma'}, {0x2b, 'io'}]}, 0xe) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x12, &(0x7f00000005c0)='cpuacct.usage_all\x00'}, 0x30) perf_event_open(&(0x7f0000000540)={0x7, 0x70, 0x5, 0x401, 0x8, 0x8, 0x0, 0x0, 0x80008, 0x0, 0x10000, 0x4, 0x0, 0x4, 0x0, 0x4, 0x800, 0xfffffffffffffffb, 0x1f, 0xffff, 0x10001, 0xfffffffffffffffe, 0xca4, 0x0, 0x9, 0x0, 0x3, 0x5, 0x4, 0x2734c79b, 0x9, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x9, 0x0, @perf_config_ext={0x7, 0x7}, 0x0, 0x8, 0x1, 0xf, 0x6, 0x6, 0x7}, r4, 0x10, r0, 0x9) gettid() ioctl$TUNSETLINK(r3, 0x400454cd, 0x313) r5 = openat$cgroup_ro(r1, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="046d656d6f72799a2ef96bed5247626f314a03c154e0157aacf455718d80cbafbf1f83261fb8f1fa000000060000000000000000001bfbf1638c70278258d6c80bb79fe300253ea771f20b6aa7084d9aa14eb818e3d49cb48a7718275b03a723164a2ff8415a011d1eca0cf66a05e95f868917010f02b901f231dcf06ace1c1908e3a0a51fbae735984ac07ddeecd283d22eb1ed39fe599ce177cca818fceca7cc9f431db49918499e0242e77abd0443fe3bb8f68509f4ef39af1d436d364b869c0a470ead80857053d0f63e42604f28b9246ed2e97c3e72f612eaeb69748a529bc78548"], 0xe4) openat$cgroup_type(r1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000440)="369cff807e1d5ac6310702158e1c521d8e215a38ae572f43b1946898ea339340fc4be0c2d9f93350a644edae7a190d0de36d42a214a38185509c911792a449fdad02978b6ae9a9e6cee3b7aab7f9ccf387691db4a0c6766fa429d7ab9db39be29e319163957c8d2fa48507690e5bb3650dd9fd640408ea2650289009cf2c5978a985f7c9c60ba397a26c2bbb34e653af74ed676cda4213cd6f83323a88d80a9c2c6042aec7a0d341d819dddb", 0x0}, 0x18) write$cgroup_int(r5, &(0x7f0000000040)=0x8, 0x12) r6 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000380)) write$cgroup_int(r3, &(0x7f00000000c0), 0x1802a140) socket$kcm(0x29, 0x7, 0x0) openat$cgroup_int(r6, 0x0, 0x2, 0x0) 00:17:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400020021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:25 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24480648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff000000, 0x8, 0x0, r0, 0x0}]) 00:17:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xff000000}]) 00:17:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$ax25(r1, &(0x7f0000000500)={{0x3, @default}, [@null, @remote, @netrom, @remote, @rose, @netrom, @remote, @default]}, &(0x7f0000000580)=0x48) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000005c0)) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x200000, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@uname={'uname', 0x3d, 'team0\x00'}}, {@access_client='access=client'}, {@privport='privport'}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@access_uid={'access', 0x3d, r3}}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@appraise_type='appraise_type=imasig'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) seccomp(0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'team0\x00', @ifru_map={0x80000001, 0x101, 0x2, 0x7f, 0x401, 0x9}}) [ 501.760888][T24313] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 501.769067][T24313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400030021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x0) signalfd(r0, &(0x7f0000000000)={0x3}, 0x8) 00:17:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24580648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xff0f0000}]) [ 501.929319][ C1] net_ratelimit: 20 callbacks suppressed [ 501.929328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 501.940911][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:17:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff0f0000, 0x8, 0x0, r0, 0x0}]) 00:17:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400040021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000580), &(0x7f0000000680)}, 0x20) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000001440)}, 0x20) 00:17:26 executing program 2: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x7, 0x410000) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0xfff, 0xffffffffffffff80, 0x8, 0x4]}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) fadvise64(r1, 0x100000000000000, 0x2, 0x3) 00:17:26 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24680648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xfffffffe}]) 00:17:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400050021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xfffffffe, 0x8, 0x0, r0, 0x0}]) [ 502.489350][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 502.495377][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 502.501293][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 502.507081][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:26 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) close(r0) 00:17:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000120000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) 00:17:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000a0021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x100000000000000}]) 00:17:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24780648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x100000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) request_key(&(0x7f0000000240)='logo\x02\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x8, 0x10800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@local}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bpq0\x00', r2}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x200000, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea110200000500", 0x27}], 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x80d, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) ioctl(r0, 0x1000008912, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x10000000001, &(0x7f0000b67000), &(0x7f00000000c0)=0x4) 00:17:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24880648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000e0021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x200000000000000}]) [ 502.969766][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 502.976743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 502.983168][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 502.985392][T24393] validate_nla: 3 callbacks suppressed [ 502.985402][T24393] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 502.989166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 502.994565][T24393] __nla_validate_parse: 3 callbacks suppressed [ 502.994575][T24393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000140)={0x18, 0x98d, 0x3f34}) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x200d, 0x7, 0xffffffffffffff00, 0x1, 0x81, 0x2, 0x8000, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x4, 0x3f, 0x7, 0x554a, 0x5}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x38, 0x30}, 0xc) write$P9_RCREATE(r1, &(0x7f0000000180)={0x18, 0x73, 0x2, {{0x74, 0x0, 0x2}, 0x1}}, 0x18) 00:17:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0xa, 0x0, &(0x7f00000001c0)) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x2) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000080)=0x7ff) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x3, 0x7f}) 00:17:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x200000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x300000000000000}]) 00:17:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24980648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000f0021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:27 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x8000000000000017, 0x4100) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) kexec_load(0x7ff, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000980)="fe5f09beb9e7fb3965d5373d3c1098f4ca0abafe7e65b799eaa50a44331673d6c458e4a5f8b51c7b3710dc088ca5800c7b7810252656c002c1726382822a49e60c45ea9572395e8e68df67a2b232d4f7770c23af2df35a57493c70f7ec6c9e3749906dcf", 0x64, 0x1, 0x7fff}], 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r1, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000380)={{0xa, 0x4e22, 0x4, @local, 0xfff}, {0xa, 0x4e24, 0x8, @empty, 0x4}, 0x8001, [0x7, 0x7, 0x3, 0x800, 0x3, 0xfffffffffffffffe, 0x1, 0xff]}, 0x5c) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r1, 0xa, 0x20) io_setup(0x1, &(0x7f00000001c0)=0x0) io_cancel(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000740)="3e9d1ac47d43d5b53c3face6ba73059671c44a4e19dc037c4ffd065305b189ecc490b56e586f47ef0a8c5079253eaa489217268e12485a57c971749ff5a98e5a523431f7b2d58478d3c445fcca3a4fc0226f9d83fb2247bc0a24dee0ad733a92712e43a1bfc88a1e14cebc6d3d221ca69cd3f9372f27def2d26d", 0x7a, 0x7}, &(0x7f00000008c0)) sendto(0xffffffffffffffff, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @pix={0x0, 0x0, 0x0, 0xb, 0xffffffffffffffe0, 0x0, 0xb, 0x2, 0x1, 0x6, 0x1}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @multicast1}}, [0x5, 0x4, 0x81, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x1, 0x0, 0x7fff, 0x2, 0x2, 0xd14b, 0x7ff]}, &(0x7f0000000500)=0x100) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getrandom(&(0x7f0000000b40)=""/198, 0x10000007c, 0x6) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000700)=""/48, 0x30) ustat(0x3f, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x2, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x9}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)={0xfffffffffffffffe, 0xa5}) 00:17:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x300000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x400000000000000}]) 00:17:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400600021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 503.520151][T24424] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 503.528287][T24424] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400f00021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24a80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x500000000000000}]) [ 503.882711][T24444] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 503.891057][T24444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:28 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240), 0x1e998ac98cb84409) unshare(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x400b3, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xffffc, 0x0) statfs(&(0x7f0000000680)='./file0\x00', &(0x7f0000001c00)=""/4096) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000100)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) unshare(0x0) fcntl$setflags(r1, 0x2, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, 0x0) 00:17:28 executing program 2: socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000005c0)=0x1, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x14) r0 = socket$kcm(0xa, 0x2, 0x11) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x40000) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) acct(0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xa0', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x3, "fa15ec"}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x2, @rand_addr, 0x0, 0x0, 'lc\x00', 0x22, 0x3}, {@remote, 0x4e24, 0x2, 0xe937, 0x1, 0x6}}, 0x44) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x2, r2}, {0x2, 0x2, r2}, {0x2, 0x1, r2}, {0x2, 0x2, r2}, {0x2, 0x7, r2}], {0x4, 0x7}, [{0x8, 0x4, r3}, {0x8, 0x7, r3}, {0x8, 0x3, r3}, {0x8, 0x0, r3}, {0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x2, r3}], {0x10, 0x7}, {0x20, 0x4}}, 0x8c, 0x2) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5}, 0x0) 00:17:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x400000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000321000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x1100000000000000}]) [ 504.240148][T24444] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 504.248313][T24444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24b80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000521000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c50400aeb995298992ea5600c2", 0x10) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x7ffff000, &(0x7f0000000dc0), 0x2e1, &(0x7f0000000e40)}], 0x8d9, 0x0) socket$rxrpc(0x21, 0x2, 0x0) 00:17:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x500000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x4000000000000000}]) [ 504.548084][T24468] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 504.556653][T24468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400db0521000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:29 executing program 2: socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000005c0)=0x1, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x14) r0 = socket$kcm(0xa, 0x2, 0x11) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x40000) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) acct(0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xa0', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x3, "fa15ec"}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x2, @rand_addr, 0x0, 0x0, 'lc\x00', 0x22, 0x3}, {@remote, 0x4e24, 0x2, 0xe937, 0x1, 0x6}}, 0x44) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x2, r2}, {0x2, 0x2, r2}, {0x2, 0x1, r2}, {0x2, 0x2, r2}, {0x2, 0x7, r2}], {0x4, 0x7}, [{0x8, 0x4, r3}, {0x8, 0x7, r3}, {0x8, 0x3, r3}, {0x8, 0x0, r3}, {0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x2, r3}], {0x10, 0x7}, {0x20, 0x4}}, 0x8c, 0x2) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5}, 0x0) 00:17:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x1100000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000a21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x8000000000000000}]) 00:17:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000e21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xfeffffff00000000}]) 00:17:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24c80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x3f00000000000000, 0x8, 0x0, r0, 0x0}]) [ 505.745067][T24514] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 505.753314][T24514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 506.665260][ T550] bridge0: port 3(gretap0) entered disabled state [ 506.675728][ T550] device gretap0 left promiscuous mode [ 506.681343][ T550] bridge0: port 3(gretap0) entered disabled state [ 506.980199][ T550] IPVS: stopping backup sync thread 9503 ... [ 506.987531][ T550] device bridge_slave_1 left promiscuous mode [ 506.993814][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.030209][ T550] device bridge_slave_0 left promiscuous mode [ 507.036421][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.129321][ C0] net_ratelimit: 20 callbacks suppressed [ 507.129328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.140833][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 507.146692][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.152523][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 507.158470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.164327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 508.169310][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 508.175125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 508.729354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 508.735158][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 509.330343][ T550] device hsr_slave_0 left promiscuous mode [ 509.370044][ T550] device hsr_slave_1 left promiscuous mode [ 509.427862][ T550] team0 (unregistering): Port device team_slave_1 removed [ 509.442279][ T550] team0 (unregistering): Port device team_slave_0 removed [ 509.453496][ T550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.494908][ T550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.568238][ T550] bond0 (unregistering): Released all slaves [ 509.667255][T24518] IPVS: ftp: loaded support on port[0] = 21 [ 509.743163][T24518] chnl_net:caif_netlink_parms(): no params data found [ 509.778635][T24518] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.785833][T24518] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.793565][T24518] device bridge_slave_0 entered promiscuous mode [ 509.803074][T24518] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.810246][T24518] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.817968][T24518] device bridge_slave_1 entered promiscuous mode [ 509.878528][T24518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.897277][T24518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.929865][T24518] team0: Port device team_slave_0 added [ 509.937328][T24518] team0: Port device team_slave_1 added [ 510.092610][T24518] device hsr_slave_0 entered promiscuous mode [ 510.349684][T24518] device hsr_slave_1 entered promiscuous mode [ 510.499389][T24518] debugfs: Directory 'hsr0' with parent '/' already present! [ 510.526922][T24518] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.534096][T24518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.541556][T24518] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.548632][T24518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.630782][T24518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.647035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.659436][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.667392][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.685903][T24518] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.698983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 510.708142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.716654][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.723851][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.749982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 510.758663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.767996][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.775220][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.783269][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.791938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.800742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.809260][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.817561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 510.826339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 510.834659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 510.843017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.851453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.859899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.869974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 510.879545][T24518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 510.905604][T24518] 8021q: adding VLAN 0 to HW filter on device batadv0 00:17:35 executing program 5: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=""/155, 0x0) socketpair(0xf, 0x80803, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x20) unshare(0x600) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) r2 = dup2(r0, r0) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0x0, 0x7}, 0x10) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0xffff, 0x3f, 0x9, 0x9}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5") syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') 00:17:35 executing program 2: socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000005c0)=0x1, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x14) r0 = socket$kcm(0xa, 0x2, 0x11) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x40000) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) acct(0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xa0', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x3, "fa15ec"}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x2, @rand_addr, 0x0, 0x0, 'lc\x00', 0x22, 0x3}, {@remote, 0x4e24, 0x2, 0xe937, 0x1, 0x6}}, 0x44) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x2, r2}, {0x2, 0x2, r2}, {0x2, 0x1, r2}, {0x2, 0x2, r2}, {0x2, 0x7, r2}], {0x4, 0x7}, [{0x8, 0x4, r3}, {0x8, 0x7, r3}, {0x8, 0x3, r3}, {0x8, 0x0, r3}, {0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x2, r3}], {0x10, 0x7}, {0x20, 0x4}}, 0x8c, 0x2) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5}, 0x0) 00:17:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000f21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xff00000000000000}]) 00:17:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x4000000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24d80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 511.431700][T24544] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 511.440030][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400004021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24e80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24d80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0xff0f000000000000}]) 00:17:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x8000000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:36 executing program 2: socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000005c0)=0x1, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x14) r0 = socket$kcm(0xa, 0x2, 0x11) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x40000) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) acct(0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xa0', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x3, "fa15ec"}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x2, @rand_addr, 0x0, 0x0, 'lc\x00', 0x22, 0x3}, {@remote, 0x4e24, 0x2, 0xe937, 0x1, 0x6}}, 0x44) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x2, r2}, {0x2, 0x2, r2}, {0x2, 0x1, r2}, {0x2, 0x2, r2}, {0x2, 0x7, r2}], {0x4, 0x7}, [{0x8, 0x4, r3}, {0x8, 0x7, r3}, {0x8, 0x3, r3}, {0x8, 0x0, r3}, {0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x2, r3}], {0x10, 0x7}, {0x20, 0x4}}, 0x8c, 0x2) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5}, 0x0) [ 511.845405][T24566] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 511.853713][T24566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 511.871391][T24565] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 511.879692][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:17:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400006021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xfeffffff00000000, 0x8, 0x0, r0, 0x0}]) 00:17:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0xae2b, @rand_addr="a519108d4d33a582d1033664311f0954", 0xed53}}, 0x4, 0x6, 0x5, 0x80000001, 0x6}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xfffffffffffff800, @empty, 0x4}, @in6={0xa, 0x4e21, 0x1ff, @rand_addr="2021e3130d1f93b237575c96d13599c0", 0x1000}, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @broadcast}, 0x1}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000140)=0x10) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0xc, 0x16, [@generic="fe65b73f53"]}]}, 0x20}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x200, 0x0) 00:17:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x2}]) 00:17:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d24f80648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 512.237705][T24586] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 512.246052][T24586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140005db21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:36 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x10000000004144, 0x0) r1 = dup(r0) ioctl$KDSETMODE(r0, 0x4b3a, 0x3f) fanotify_mark(r0, 0x1e, 0x20, r1, &(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x101, 0x2) [ 512.329290][ C1] net_ratelimit: 24 callbacks suppressed [ 512.329299][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 512.340815][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:17:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25080648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff00000000000000, 0x8, 0x0, r0, 0x0}]) 00:17:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x3}]) 00:17:36 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0xb0e, 0x2, 0x3, 'queue1\x00', 0x3ff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat\x00') close(r1) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) [ 512.524635][T24599] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 512.532998][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000f021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) setrlimit(0x7, &(0x7f0000000000)={0x4, 0xc4}) socketpair$unix(0x1, 0x200000000005, 0x0, 0x0) write(r1, &(0x7f0000000040)="200000001a000100000000000000a00080000f00000000800000000000002000", 0x20) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000001c0)=0x8, 0x4) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") 00:17:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25180648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0xff0f000000000000, 0x8, 0x0, r0, 0x0}]) [ 512.796934][T24621] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 512.805218][T24621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x4}]) 00:17:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x90000) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x3f, &(0x7f00000012c0)="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", 0x10ef) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:17:37 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000000f000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 512.889359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 512.895196][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25280648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 513.123517][T24642] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 513.131828][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000221000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25380648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:37 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 00:17:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x5}]) [ 513.369300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 513.369329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 513.375246][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 513.381132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 513.392655][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 513.398448][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 513.428579][T24655] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 513.436849][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000321000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:37 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x8, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write(r2, &(0x7f0000000300)="94", 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x1, 0x6, 0x5, 0x0, 0x13}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 00:17:37 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) 00:17:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25480648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000421000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x11}]) 00:17:38 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x24a}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x17ae4, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000230f92cbbad8ade028cfe4de0001000000000000000000040000001400000000000000003d1902bcd3eae71320e8311859c7f49d4c7f30c621a95c1e0d07fc4d0826010baa7abd9a18dcb15542f384110c7e2cdd6cc304809c37f6ba2b9cc9a10a91ccbc3737d94c38afc481b6485f17131a185ca4c3cd9d3860db2ea40782c1a125328a9f61bcb4c783849a4e3c5fc40659947d82a9a92f5e077f60ddc3db94f48d9c1098324e7885505575f0a52d297d38a402f558e3fee1ccdf183d"], 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000340)={@multicast1, @initdev, 0x0}, &(0x7f0000000380)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0xc10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000084) 00:17:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 513.873893][T24683] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 513.882245][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000521000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x300}]) 00:17:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25580648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:38 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x20000000) mmap(&(0x7f00004f6000/0x4000)=nil, 0x4000, 0x2, 0x5c831, 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$audion(0x0, 0x4, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x70710000000000, &(0x7f0000000180), 0x10000000000000a2) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x20001) openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:17:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000a21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:38 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 00:17:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x500}]) 00:17:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25680648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:38 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000200)=0x8000, 0x8) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x10000, {{0xa, 0x4e24, 0x100000000, @local, 0x1f}}}, 0xffffffffffffffb3) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000000280)) 00:17:39 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000e21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 514.648137][T24733] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 514.656740][T24733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x2, r0, 0x0}]) 00:17:39 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x1100}]) 00:17:39 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000280)='attr/current\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) munmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000) read$FUSE(r1, 0x0, 0x116) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2, 0x100000) 00:17:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25780648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000f21000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400006021000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x3, r0, 0x0}]) 00:17:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25880648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:39 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getregs(0x11, 0x0, 0x0, &(0x7f0000000340)=""/22) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9d, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x10000000000000) r1 = syz_open_pts(r0, 0x2) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x44047f, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffe2d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) 00:17:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x4000}]) 00:17:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000003f000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25980648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:39 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x4, r0, 0x0}]) 00:17:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000000f000500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xff00}]) 00:17:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x101800) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0xfff) fcntl$getflags(r0, 0x40a) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000380)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x2, 0x2, 0x4}}, {&(0x7f0000000240)=""/250, 0xfa}, &(0x7f0000000340)}, 0xa0) io_setup(0x57f6, &(0x7f00000000c0)=0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000180)="03123432bb6b6a1cb397803d3a900fb0d4111d1b0e7fe04461f68664b174353aaa39f8fa112a66984a09a9bcd6bf4647f3444734fd2882b6f592a5de03fc46c71af4ffa4a7570fe99328e131549fdbf80e337005c906723108b6386ff8c946b1d0d46021c6a7a02def674af2f3ff7d08ad755c4a4d506bba8deaf6d20d75", 0x7e, 0x0, 0x0, 0x2, r1}, &(0x7f0000000200)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x6, 0x6, 0xa4, 0x6, 0x8, 0x1, 0xfff}, 0xfffffffffffffe3e) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) 00:17:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d26880648c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000300d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x5, r0, 0x0}]) 00:17:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xff0f}]) 00:17:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a800a8c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021020500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) close(r0) 00:17:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x11, r0, 0x0}]) 00:17:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021030500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80238c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x1000000}]) 00:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="040000002862ae276100010000000000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES32], @ANYRES32]], 0x4600) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0xd8002, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000001c0)={0x1, @local, 0x4e24, 0x3, 'lblcr\x00', 0x8, 0x3, 0x9}, 0x2c) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 00:17:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021040500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x300, r0, 0x0}]) 00:17:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80258c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x2000000}]) 00:17:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021050500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:41 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') getdents64(r0, 0x0, 0xffffffffffffff68) [ 516.638823][T24876] validate_nla: 6 callbacks suppressed [ 516.638834][T24876] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 516.652718][T24876] __nla_validate_parse: 6 callbacks suppressed [ 516.652727][T24876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = semget(0x0, 0x4, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80ffff) semop(r1, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:41 executing program 5: r0 = io_uring_setup(0x68, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/177, 0xb1}], 0x1) accept4(0xffffffffffffff9c, &(0x7f00000002c0)=@x25, &(0x7f0000000340)=0x80, 0x80000) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000380)=@nfc, &(0x7f0000000400)=0x80, 0x80800) r2 = accept(r1, &(0x7f0000000000)=@caif, &(0x7f0000000440)=0xfffffffffffffe4f) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000000280)={0x30, 0x0, 0x1, 0x80000001, 0x4, 0x101, 0x6, 0x3}, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e23}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 00:17:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x500, r0, 0x0}]) 00:17:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000000210a0500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a802a8c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x3000000}]) 00:17:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000000210e0500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004700001c000038c5a2f2f5777e70490f000000019078ac1c14bbac1414aa0800"], 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) [ 517.047712][T24906] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 517.056347][T24906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a802b8c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x1100, r0, 0x0}]) 00:17:41 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f00000003c0)={@initdev, 0x0}, &(0x7f0000000400)=0x14) sendmsg$can_raw(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x1d, r1}, 0x10, &(0x7f00000004c0)={&(0x7f0000000480)=@can={{0x3, 0x0, 0x8, 0x100}, 0x7, 0x0, 0x0, 0x0, "ad00f166cd156b9c"}, 0x10}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x10000000005, &(0x7f0000000000)="e1affde3", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3, 0x423, 0x100, {}, {r5, r6/1000+30000}, {0x3, 0xb, 0x1, 0x5}, 0x1, @canfd={{0x4, 0x4, 0x1, 0x3ff}, 0x31, 0x2, 0x0, 0x0, "a2d4ece97a3c21f28697dec311e6d3d548212612e75fe27424f135a3f856d880589fb582a8eecefba280aea62ae209bb32a65c40af1030b9b19b33efbf15ffd8"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x40080) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@canfd={{}, 0xffffff7f, 0x0, 0x0, 0x0, "776ddeb048e9810b200a7c0cd987ae15eb9898ba5381e8ec5ad79b5fbd1a52b9c96e9344c9c263296bad1f73ff69b00c933daf15eaadc8af37819245d47a0f0e"}, 0x48}}, 0x0) 00:17:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) times(&(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x4000000}]) 00:17:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="14000000210f0500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:41 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x400) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000240)) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000660007011dfffd940101830020200a000902000000000004000000000d00ff7e", 0x24}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ipddp0\x00', 0x4}, 0x18) 00:17:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021600500d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 517.454991][T24936] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 517.463332][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000a00d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 517.529330][ C0] net_ratelimit: 17 callbacks suppressed [ 517.529338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 517.529374][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 517.535105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 517.552612][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 517.558390][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 517.564352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 517.570211][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:17:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a802d8c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x5000000}]) 00:17:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000003680)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000036c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000037c0)=0xe8) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x2, 0x6, &(0x7f00000035c0)=[{&(0x7f00000003c0)="8456827da34728de8965300995b5b2284a212623a0e9ed24110758b9d4697b755ae24201644a4bfc5b8c969eb2cdd34e8c721389a4ced45e3fbf2ed08d1e5985b9f9f5efeecf525464fdf12f41188289b091dde699f3ef9e2f3b6bee9f2cf49dfd022eefe3739850471c9a2a3f729f146219cd1c69916bf6ce7b4448a1378896a811597e9f6dc2cfdbc8651c", 0x8c, 0x6}, {&(0x7f0000000480)="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", 0x1000, 0x40}, {&(0x7f0000001480)="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", 0x1000, 0x7fffffff}, {&(0x7f0000002480)="e197b70c7cf5a97b741cf13c2463ca0be658ad2405666ed33252274d642dd905b7cdc69551927efb9a7e0b1a861c15c424671807ac56a9452ec6424d4fc9b124272c23c662298cecafc4f61303baea8aec8dfb542956d9f05cc729226c69073ba120e40e95ec2a4e9d4c4d538f374f8dc97e575a9863d57ba20d3df6dbba23a749e1b68cdc100eef1c133d01218c15ca65d3cb995e5f6e07e368673215785c2a19ba6989cfeca12dd51997dbda6bba63af0c1ff7b262cc4394376711d9b14e77fcbf05667adc2eb9b48a0b38420adff5d9425ecd7078e05c1c17d3c7a7f856ad66eacb84b8a53a4da961a7aae484d3d017df95a8893cb36ecfa979b96989e23c3e3b8c636d7ebde746268dac01175131aa8de3c6883a7dfe0f7572986f948a1ba690217fd7e65dc664faebdf75f94c1999a37c8efa02583e30b5993afcf8b60550bd7cc644c895e125b6c36070b9ff184b5aa2d7b58a26fa2f7d52287035cb5b4abfc0746914649cdc21ed3765430cceefdaf2dac603624b94833090c3f0fc955ecb635ccd2b3a8c43d6a4d9491eeab8ab12fbfd19866caecf92982b536621a90b634f9c5cde9980b83764a90b6586c22e98a977134f8831566e1bc7286313822a0e7bbc04527cfa7032055cc648761f069c7657097f2857c0b6c3df9557bf328fd5576ec7d31c524f2f170d3e864d18306bdcbb129a3497eff496e55c62c868e3c2e8df3cd044bd53418358719e211612e0d76992e05fe267cf31237cdbb415185377f0f34331ca52a7d54a629ba99b9dcb947bf634711fab8fec2802293ed804ed442ed22889fed41922c90a737c2533d57048f99ea43ad10189a99803d5e1b003671fcc5e069a1621b9768b3a41b1b3f8e4c5dad7e897ef046f52653e49c49cb66f446c44fffdca9f9db7acd9b421fc77d20fb2767169538524f4a3fb4212e5ced95d27a6721b72c5a59ce53df00d3606b878f236cef647e259d11213a128e212a63f633e9e257ea4c1abfe77f1dc018269141fd9cd1e07ad28e117eaf0bf00bc285268176f446afeb8e56cab2125065a6eb5cd36db00bab6612c859ab067d39af4aba7b4c709b086cf705117c5787502b99b410914d8f4ba535c09bf161dd617465245c09a146d7207742e5bd18d577620e769d39f4ee2266f7d42b8490f86684f4c2130821a81523ad1add5fa55b79a95ce6a869659a84dd38b53edafba61bf39ddc6b685eb615ead8ac1ea34806e94c9ef5a4a5c150f89ba280b1656e841d577bbac389e4c92dae4e44bb258e26818456a46c58330b263da9aaf63de05de793d17d84858972016e695ada3148e6c88a68ee74da0a298c5ee16d2b1983bccf67a218c57d3ab173419be141fe29103d5ed6d42c68a32a9af34859bfb0d4fa764df373f5a6511f5ac8772ff01a39bd2fcba42d8d5c63fd603290b4c8d542c8855f6cb9367b693371e5f6d920c5ddfff7c1108fb2fe61e77cc4ef7d46499f086f0bebeedbe03840afa171aa580de1cb94c6f50d16e175bca31529dcbee8e6062afe4e8bb8625ef7df934ad0490d1797b632462e655c7720e17389634753edd18a079d29faf44ea9a2ca644297404c29a3829ccbe2699edbb9282296675ff4dd4e584bd328b15afbde5d31dc4b4b2f3b3d5506eef1e5749dc7f03e60d898a5ccfac461893cfc3574ad42de50d2b8812db4ec136b57d832a98a9bf7f998384c491d4a773edede8b7c4523b7a5014634c34b1bc55f974efc2af87867ffd5de37e47731a5ab242c354d24666e05e501c0ac7797392aeb0c4b89719a02b6d4213896aab59e1e84bf139047ca00f493d9a8b3341cde902625dfe7691ef7280343440f2a6bc7547995564c239774c6fc5409b73f004dd97bbdc0a3233db2e05963fdfd9e29fd86841b282598317be49ed1394bbd165b21e9686e0a5df26b948b5f7a5136f0ecb16ae5e77f9de8789adfaedb3dfd13bbbdbb38738a4ee88af034091dadae18a6f8c583a0660c206b185370357c3f5cdee90d2daf8d52c6216d60ec4395b0322719e7238d89c1751b0bb07df42f7647bb19e2a286ca51d5f81d2bde6e9d1142c88ed3b68e48846348069cd04f3595bc301be4a03f7407f7a4790a6fca421ac6c698d97c1819d946bd231563f4c978ddd601f357276b8ade115443d55fb8305914cda0647e4ce7daf4ece81d18011113a402f89ee8afef29272c0e2796782ad625a40d50e75338f50049262c53815df14fe3bd2cbfe13f7be13487c15e7ff52274438fdccd1b7baa5db30a83112db932478ad2e808986838f634c9e199beab29df819d52abdff054cb9c6a594f722257809fbfdccd64447d65bed47ea74a49d8f2979df389233bb082e30e25c4b2749325cdda4b30537b260d29f14986606a8dd8874b6c157f20ada66a7a7873f9c7f6509c666e447efd4ad8526f9e4f7e270371b60e214c3984b6289f5d7808122fbe0eaae862824770a709af6691ad8d9de18f68dd4fac1dd149c3ffb4399b07a721a5c87e5e09e01a07a795bbbb20ff9dea57130e38dbc4ae592ef41cc4f3049453c46c95e30e08d8efd48d253466354b985282e1741b3dc3a6ce386232fad183e035bce3097befcb90f4d6276e10dab2f3ac641ff279e457ad71d636486dc6172e4d5f4fcb663eb58e5121e44319cbd35750dc39e6785062693d8a0e6294ddcb89b9f5b77d3a04fef78ccedfbe5879ede9ac0a351618f10bc9445212ee25e64a97b27e455ea6bc50eea0dc470c2352dc6229a9e90270d884e71a9bfb2a953376b5bfc1ffa97673619c3221b9f4d9bafab4b7cb725dedd26775e5b8013adc3c91e2b12cfe81bb9b121fb65c987b15a62ad6a6d42e88d88e77dbcf5d2f9c0decea6cca9c867ccd0ee3f2a724dbf7cf5b39de3b9cec0bd7db5525136813afea973748f449b594f32daaa6765ac27b6214576ce29813242b926c20e6616d6479fbe18ba4373310f81325681fd8983c8515985a890f38fb23552688c40a3a2c2789a899059fcb476df4b268f1c5bb85f0ae1f2bfbfdc3ce085e19ba6b494efc443aef875a597b2286678989853bb194eabfb3f12dc7469ec06309ff30a2fb333fb67b2ddd6926f4f7586cfcfdcc23615e1b08cedb325b027a1256bea1ab6f6829dc9523fcfc81e19ad9018b2bd47d94e9305d56475d14ab8966c82d289c7b0966fc028b5477984fc2224fcd34ca36b8852615947a4f2077a4e75b94f2b4826d3d9a4950a4812f6edc43b47505b0a6a5fc687ab2f41608abfbedac8a6d21ad5ff187519a7aa1fb208ad5263d877306632e01aaa8ff027b01ce77d3c345d3c2da8d91d26607cafaa56b9c4965c05d030ae207dd60f48176df2ec96cf967c41233443c373e13075d42eb3d5cce1e7fc56b1bb5640fac13c8970c0c5dd15d1e8aae8a9501d38881d0d1c6e13dee47808da5219fc3320a3bcd86504a1e57c1f77eac667eafe9be00c0c27e8c03fed558010c0de2ba1781ed6b90d94ef5eec3340481277549461e2afdb1413f90b7e085ee89340d23f5f026e30a320d323f152a470262b4ba074bfeca5ea0785e44fc085ad37344d5be85898db130ddeb842f47a86c9edfbdc802bfadc72405d5fc7149b0a5c01a0c62fa8d83a037613adf10f0db3bd9732e2a84f3bf7f1f5d89debc2716770aec3c1965ecffe902f25b0bf588bdd2afbff45bd5ed94369ce0979a2fde4ed870b868793a3653c323d37808c2ffe900f7cc74980d7b0e43de02cc041e33cbd19e7e1a62db0f13351e30627036222fa00242fe685951a8cbc4b6b2c42c2f89fcc2e1f1e47baba60c643302245fa4e4f791032b77693d5cc5a985b22e205a3403b20ed938e8e70be4179504c7f91f742885b67bbfa75d24c9958bb7f7a47eba053f46914543e1f8f60f5aea0bf12f7232b413848e4f6b596971bb86c77ac6cf31c216a5e7ce929d8ab1ba679ef7e73b8a89fe62a317ac7e75099dcae94042a8f687979e990a5dc217d98ac47797d0b1ea82653df95f7c7f2e7938ec66a38e85b46c36c96577999f38d5e78aa27b27307d631d6780810e3cc20b42bf8fc62c313308b5447eaaf665492de8858a4ea24b8c72ca091cfa69953016e8587db96995e579628f78be0626fa217a9d2935bb93cd68f0188504c63fae1a447de9e33c854db1acfbfd6ad46377439889f897eefa078e9547f9bf66411198bd98c27152bfd70f7e741ff8e01c7b8f067f29f2429d784fe94cec304629e71174632347ce8a9fdde9b627c37fe430c5f36d05063f2d449a312a29c714b3bfd74d39218c8ec493d277559eca1cf1b9b3800348cef96325a071f063e89f651c16c5b93ce6f8e3397d3405f490734d57c40f7c8e1d54d3d07bc0edbcc3f81f03577a32a4fd8659e5e7b65b3e204286b12bbb77f180fa90e869263e156441f84fb1243c76bac5fab3c248dbfd1a1ebf6d9ff6d6eec76e88c012c68d572e48cd995ef3e4f6d40f580b968f2cf39a8e09cca151b7797e84957f58a79d047c6d754657ab5949504c329ea9a5098e7204bf329065406362a11f350da608d1eb0f0af057db32a9c6e6c77acff71e7230133974f510b66bc26a63a7938416719b0723ea8e4b1a9d5dce143bf66a5c17fb538b482773e4a955776e8cd2dc521f897c3ba8e778b78934902bf0268c2595d57d1117f2d96188c6717665a70deebedc26d29b3f75ae33a3030d253479aae94af4738cb12b9db25c6b1178eff8f3ad41b54cd2e38bf7110cd75a03170d06219ebcfe2e5e317633c46fc90e096c449aa979bbf86cb282f2c8402c62ff1f0e0cb7f1ccaa0a18c3246de65084a234ebe3999893c8fb5ae0272160650067b15f87b4f0609714136b8cd785f9da60c4788c7019ac83059db86af7f44901a6220d04ae0ba64b2de25dd47080c9a5bc11359a8caec6ba855fe5168fa3e417ea4214a3d8504828e8ed65815c12634a34c90418ebc543505d5d9e7fd5584fed0a230cc477c20155651b744048e18b8d2c0eef60ee2af1a58c956dd7d5eac51039ded9bce3ece37f4171715f783ea7ba956e85d50c169eb9c59babe2db764885d41b1de79ee8a261a1be9fa076407b5d0e7165eb3f74db9501245ed570d70aff62a610b72d35f612c640910d403a2be4344136dd46527cd56b876302b29903ab855f0b0ea79b336f88700b51ec2b75dcd4ff72f69c1d1de37fb355ba2d512fcdb8a8398c66e6e067d877e8fd7bf540d0d1457e237fc3f3b80156b85913317bd190cbf2a8cf06cac83e8d9f495598eca237e4377146a65b577f6a6918aa7b448bee880e5fa94c1c66b16c3ebc851873f6de67a942fc95e9971cdde43990b42df9c961ccaea6f591f4a214c70cf47ad7988497377921ed085900be64d48c8b803532258d61759d6d920adcf8d078e51fc2c642b0b4cbeeed4b4a742b48463fb967a1b3e0b5e8359b83ca8bf76e4d4f2dec09fa9cb8eec2c320bcbc4bfd6e9a7c61b76a89613ecaccf318f5cda44cdf53ddcbb4b59a2358eeed9b8dd9c59d7c3a527059d71c5a676a6faedd103974290ebaa9641dd7258a3662e526b3be54f940ba567fe8cdeb1fa9cf0f0d65b2153eca1fb6ac557b31a3c9d3e3cf88f5d4c5f857ede7770cd07de251f9878a8cc8dc4f854dd5569c227aff377ac1705799820bebc145e0ef7313505570329ec70efaffe6b0da7ba7e83d0507b19183601cfa28dba83dff5e335d3d0daa885abbcf8a9e8ece41fe3cb84378a7826a7fcef14d8c7dca91abe574d838364b5e92d56546214c4667c01a104c57f2e1fff388745d0cfa14d", 0x1000, 0x1}, {&(0x7f0000003480)="8b005775ab989fe30b5dcdc8b3b85f8e168fbdcc68d2c281f06bf047ae018384c20fc94eeea279870a6cb679c3060599876cd938f01ff9dbc9571a98716d8205f0ced42043526cfc1063ed332e9213ffb5abffbbfccbee2d5c75bbcbfc7ebd81174d", 0x62, 0x3}, {&(0x7f0000003500)="c5b1832c6a4aae35dd2e689202e2cc5c76382b127c6801474dcd92ff0ba3c9924b4bd5f5d435de96c8a3d25dc77c4d448e40e3755ea87b786136c830f6ed0db344c8d0c80f6c018d5fcbc282ec8a89efa56e29ed894dd8faa9eff556ddafa1126517f2237153e5462e17ded4b5c2f4ab0eacd43831bb73511a3d557edffc451f202f28bd03fb790a4773d40a9d20fc454b769562ca3095f20ac8890e853db61be2de32f0eab34a40ce9962b78a3435ffd5473c22d20380da865f047a", 0xbc, 0x3}], 0x40, &(0x7f00000038c0)={[{@max_inline={'max_inline', 0x3d, [0x34]}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@flushoncommit='flushoncommit'}, {@fragment_data='fragment=data'}, {@fragment_data='fragment=data'}], [{@uid_gt={'uid>', r2}}, {@fowner_lt={'fowner<', r3}}, {@fsname={'fsname', 0x3d, '/dev/fuse\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x63, 0x62, 0x7e, 0x75, 0x36, 0x33], 0x2d, [0x63, 0x3f, 0x76, 0x7f], 0x2d, [0x63, 0x31, 0x7f, 0x77], 0x2d, [0x33, 0x7f, 0x61, 0x35], 0x2d, [0x61, 0x37, 0x30, 0x37, 0x77, 0x33, 0x0, 0x34]}}}]}) fchdir(r1) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x5, @pix_mp={0x5, 0x7, 0x73363359, 0x9, 0xa, [{0x3, 0x5}, {0x5, 0x200}, {0x80, 0x7}, {0x9, 0x1}, {0x1000, 0x81}, {0x401, 0xfffffffffffffffd}, {0x9, 0x8001}, {0x13930b9f, 0x1}], 0xfffffffffffffff8, 0x7fffffff, 0xa, 0x0, 0x2}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x901, 0x0) sendmsg$sock(r1, &(0x7f0000003b80)={&(0x7f00000039c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x7ff, @rand_addr="a09dba385a8e990c6f66f41a03a7ad2a", 0x100000000}}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003a40)="2aeb75e54b7cf9f8a6705c7df9c76fb2a87bb44d980f2512fec13b2a4952cc9ca335952346e449121b57aba8f5324e8adb3c0645efb304eaf7c2a0430c55363f84609c85ceaf545bb15276ce884aecfe18445ea4485952328ac32e581bbdc34fe31513363a0651132191f1446b87726b05ce8b0fd8", 0x75}], 0x1, &(0x7f0000003b00)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}, 0x4) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x3, 0x80000000000000}) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000002c0), 0x4) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000100)={0x3, 0x3, @stop_pts=0x8001}) io_uring_setup(0x68, &(0x7f0000000080)={0x0, 0x0, 0x2}) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000003bc0)={0x31, 0x3, 0x0, {0x0, 0x10, 0x0, 'selfsecurityuser'}}, 0x31) 00:17:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x3f00, r0, 0x0}]) 00:17:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021004000d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:42 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) [ 517.799673][T24954] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 517.807878][T24954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000200d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x11000000}]) 00:17:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a802e8c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:42 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x3, 0x0, {0x1, 0x3, 0x0, 0x3, 0x10001}}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000300d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x4000, r0, 0x0}]) [ 518.254394][T24989] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 518.262721][T24989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x40000000}]) 00:17:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000400d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:42 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xd0001, 0x140) times(&(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80308c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000003680)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000036c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000037c0)=0xe8) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x2, 0x6, &(0x7f00000035c0)=[{&(0x7f00000003c0)="8456827da34728de8965300995b5b2284a212623a0e9ed24110758b9d4697b755ae24201644a4bfc5b8c969eb2cdd34e8c721389a4ced45e3fbf2ed08d1e5985b9f9f5efeecf525464fdf12f41188289b091dde699f3ef9e2f3b6bee9f2cf49dfd022eefe3739850471c9a2a3f729f146219cd1c69916bf6ce7b4448a1378896a811597e9f6dc2cfdbc8651c", 0x8c, 0x6}, {&(0x7f0000000480)="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", 0x1000, 0x40}, {&(0x7f0000001480)="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", 0x1000, 0x7fffffff}, {&(0x7f0000002480)="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", 0x1000, 0x1}, {&(0x7f0000003480)="8b005775ab989fe30b5dcdc8b3b85f8e168fbdcc68d2c281f06bf047ae018384c20fc94eeea279870a6cb679c3060599876cd938f01ff9dbc9571a98716d8205f0ced42043526cfc1063ed332e9213ffb5abffbbfccbee2d5c75bbcbfc7ebd81174d", 0x62, 0x3}, {&(0x7f0000003500)="c5b1832c6a4aae35dd2e689202e2cc5c76382b127c6801474dcd92ff0ba3c9924b4bd5f5d435de96c8a3d25dc77c4d448e40e3755ea87b786136c830f6ed0db344c8d0c80f6c018d5fcbc282ec8a89efa56e29ed894dd8faa9eff556ddafa1126517f2237153e5462e17ded4b5c2f4ab0eacd43831bb73511a3d557edffc451f202f28bd03fb790a4773d40a9d20fc454b769562ca3095f20ac8890e853db61be2de32f0eab34a40ce9962b78a3435ffd5473c22d20380da865f047a", 0xbc, 0x3}], 0x40, &(0x7f00000038c0)={[{@max_inline={'max_inline', 0x3d, [0x34]}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@flushoncommit='flushoncommit'}, {@fragment_data='fragment=data'}, {@fragment_data='fragment=data'}], [{@uid_gt={'uid>', r2}}, {@fowner_lt={'fowner<', r3}}, {@fsname={'fsname', 0x3d, '/dev/fuse\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x63, 0x62, 0x7e, 0x75, 0x36, 0x33], 0x2d, [0x63, 0x3f, 0x76, 0x7f], 0x2d, [0x63, 0x31, 0x7f, 0x77], 0x2d, [0x33, 0x7f, 0x61, 0x35], 0x2d, [0x61, 0x37, 0x30, 0x37, 0x77, 0x33, 0x0, 0x34]}}}]}) fchdir(r1) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x5, @pix_mp={0x5, 0x7, 0x73363359, 0x9, 0xa, [{0x3, 0x5}, {0x5, 0x200}, {0x80, 0x7}, {0x9, 0x1}, {0x1000, 0x81}, {0x401, 0xfffffffffffffffd}, {0x9, 0x8001}, {0x13930b9f, 0x1}], 0xfffffffffffffff8, 0x7fffffff, 0xa, 0x0, 0x2}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x901, 0x0) sendmsg$sock(r1, &(0x7f0000003b80)={&(0x7f00000039c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x7ff, @rand_addr="a09dba385a8e990c6f66f41a03a7ad2a", 0x100000000}}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003a40)="2aeb75e54b7cf9f8a6705c7df9c76fb2a87bb44d980f2512fec13b2a4952cc9ca335952346e449121b57aba8f5324e8adb3c0645efb304eaf7c2a0430c55363f84609c85ceaf545bb15276ce884aecfe18445ea4485952328ac32e581bbdc34fe31513363a0651132191f1446b87726b05ce8b0fd8", 0x75}], 0x1, &(0x7f0000003b00)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}, 0x4) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x3, 0x80000000000000}) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000002c0), 0x4) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000100)={0x3, 0x3, @stop_pts=0x8001}) io_uring_setup(0x68, &(0x7f0000000080)={0x0, 0x0, 0x2}) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000003bc0)={0x31, 0x3, 0x0, {0x0, 0x10, 0x0, 'selfsecurityuser'}}, 0x31) [ 518.566869][T25011] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 518.575327][T25011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 518.579294][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 518.590534][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:17:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xff00, r0, 0x0}]) 00:17:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000a00d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:43 executing program 2: times(&(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xfeffffff}]) 00:17:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80588c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000003680)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000036c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000037c0)=0xe8) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x2, 0x6, &(0x7f00000035c0)=[{&(0x7f00000003c0)="8456827da34728de8965300995b5b2284a212623a0e9ed24110758b9d4697b755ae24201644a4bfc5b8c969eb2cdd34e8c721389a4ced45e3fbf2ed08d1e5985b9f9f5efeecf525464fdf12f41188289b091dde699f3ef9e2f3b6bee9f2cf49dfd022eefe3739850471c9a2a3f729f146219cd1c69916bf6ce7b4448a1378896a811597e9f6dc2cfdbc8651c", 0x8c, 0x6}, {&(0x7f0000000480)="f74afff04ac16c940ad5bda997b388aacfd725a54ee70b5fe423786fab135f18a1de2a92b4bb5ee0fdfc1ba59ec9677d00224dfd6c32a4ca4753090d323a848dbda340bb25712ba782c114ba88ecce5053bb8cce7fa4360e82e8ce93f7e753bc8e742b8f934c4cc4a1c7ee617bf8e91103f6ee09e78a6f805a6bc3a0948355f88ab6d890bfa1aaea077356087d445db46cb800e2ea275cd392acb2d4bdc0600282cc83c99379393e609c4447a05f0c59969e8f2355b5b28f96ebb113c572b987f0baa20d1b0f0bce24d299da9f156804eb98d1d9d7905648d8a5df55102fdafe4e25512197ba8c2c3367ead3fbd4d7cc5a6d5079101c68d60e5dbc7f7410ee86012b7abe3b9e683591b56fb78b028bcced23d84759e168eb9aec8b5bc8517d7ae8c42e16ea68b9aa1c018eecba7d8c48fb66aa16043cd05abb45e4b2863f966ab7d33313c7f955662c569d9c298dd70ee3e42f7c4823b69f7f101026fc614f51dbe8c7a3cbee5b6d1f44696aafe45b5b6eb191fc25c43a5b202787d3194144e64e15e94feb04dddf4408ccbcdd6d36b7264f267a3eb9237b97f3e6d73a34405c7c78f7a849aa727d0aeec023bb99239d30f0e8516fdb18fc75c98bfdfe85941eaa4d575eb645950d7c03f43d971bf5362b37e3809681401564d985c125c13b8ba5d486f6ebdfe80f1c412054aff271dc6399714d7d23502adf013b39606ee861702842aeb9d04a38632cb741396d06de74d07ecf2238909876aa38f9671de07165e1127677944c578bc7e12859ca7f6c5e5c5d7e5d0603e4ea8fa1a24fd44ba9b18dd1a1e47f8018fcf2ce7a5a9898140a259502ee905f72c66f72b5c8f466cf59e2d57a3eb5b7c1743cbaa8d9850c1e28018d158bd64d3f9098b4147d0efdfc3a994445b784a537583bcc269d81bf45099c13558290cf25324e16fff762fbf35b670b4ceb6a60a63cacad6ec4088494170947774d7fb8f565d882b80a0e56b1115c7f7c9ebba0bac4632b06f6e897971599573ee925c5ef7840a388c1ec1380ec03c7a322416b4888bae202068275a743a6b6711d47b37bbbce16dd1510f5f3a8e76204c7b662b1c62448db986cc77eff004c97646c60e12315407cb3f2f5f79917de9ade2e07b46b1084d80ed022cb0a37bae907cddc24fc6a1cf15734c9cd91af7ef539e933374bd4629c7726a0a5160206e1be4c568f76b872428b491e994085e3d1a157c5f1273626feb853c053f2312a2e5ba6a152ad009882f95700f4e35717777e44816a411f856e920a57f962e5af488288df607d3cee536533eb77183dafdb4fd7f6fb7bd0ea3f8cce70ded88ae3546fa20ae0b74dd2aad013595f7cdeac1266a8edd83ace43319d666ac563a358a540d817c1e14c3745483bcfe5adfee94243c70509f745fc81f5f7a33ad0137e065c46bc033b6e911c3646def1203b4f001b90c4bd6a7cf1d17738ae25e49038d1e0dfb3d77a522147602d8b72cc565e02dcf979dce41753d797a829202e7c97741b1f436b8ef0d2aa994a5bc8a0912da5c9f0dcf9661cbecce4c9102c6703fcfb1989141338860ec20a608811cd59b1c0b10884b9bc2df9abb09227936abe54060931f03c9b602f8e1b99c5253404a8a2c3a8fd2c198e28f14d78c35e5140d6757e81286bf9e2c2d442ddb40886338794c803a1db534bb749ebfe48f69cae3f9e6bae4abd6bee85b333f39ec9c1ad05220926637e1c71f5ac2fdc32826109f438e9b3e87d71eee3c1409a62a55fa7e8102ae5106ffdae72d5c60780d982c1546bd213ec38580e44f4e3f1ebffa2db5f6970bdedf8b0e9dc5625badbf6fb67b39d80d4852a96ec34fce0cee9bf81640cd78d8099783ba659172ff7c5a00b23954828a2e9f21d88a014c4ab281524f520bab68767cb2670f2d92c0ef29f6f57024aed7c6b98c77cf9d3dcd9bdb913c907c4b17b3bda378161a62fd2df871119f0152d11eaa8cefca9ac9da589c0aa4858333411e65b4c20383e5e3d64d05cefeeaf6f9fccfa97358080261646550dcf350f5fb2b874405b7e3afbe382ca0a8d1545e01e921794c58d43920a98887b807fe0f630a072f391ec3e06f34690fbecdb60c8aa78117eb4f4ee032fd115d97981727c6b1e299df65d75cc9794c58a0fef6b9809468daceb02d808b27e9816329ca343c90e6808424dd1c354d0c3898630ce0c7b9da4468293ad697f1a57d5a77a19456dacc0f9d91ed2624b934c62da0a4db0a5427bc472eba152fedd729ff566d80f2dace1371a09960c68e6f829a2fc7c01728ba339b88d291f0a0013dbbf571edab23ad615b94e700b8bffa1494c9be7a36552b52d59c8c2d4bb44abde701ccd0fa6eecec021d34155c6c6b83d41bd7453787d744b1fcad188ba0604618995b89f4c9933165602654a3643ad580aca4e9873c5f1fa4f1e899a83f45024bb4dc74e65d84f458d703dd5ba9d0346cf878912e66d3bd2232007d7cc187a95a38e9e08c6d791a0a7a64166c78e2256afeefff4a5d7170b5fcba05380a01af911a3b86e39e59ad96334edd650a81b4655d107528d867a568ef581c4611e91708ea839f570f9ba163b2fc38a9c017b61c9e064cd2eeb1dafdc9a5f6dc5f0f3f34bea3433c1143f2a3747b1a9d3d76033f36039ebfc6604ef7c0eed87f76788d4880c6d39ee6b3b8d160eb2e4fb01fb7b8e5cd7f260ddd0c249b52f3ff54a8106562429683ddd8d5b8671f7ba995c50cf73b8456ff8990b56603698ed7edcebad5dfc73fcba43a3e53ef8f6e07b5a755c64d482340be560b0102adf3e07ef567760ce7cc9d34efd725cf54e5c790b056914d17bd9380da74bee3a0ee35f7b474b9f02bb9af942b95c0b627e453c9c756a8353fe3ed5c16ec72028cc58ad1d9bf28bbe4eb1ac1917738a99c683d54baba70e5783d70151795f66a6c7f76fd9239cc636c738f2ff7a0b42ccfc740bf2197d4cef71e46d81786f0a2a33f35bb1daf4e23b5ccfeb5788140c5266f7018b7b03e3b7823e794ec02b2c0f5063286ced92cf97a302fa646e473c4ed24157baf00f045719e8d792b1be21c37831fe52d6a3f5a7a1459f20d6a9e11c187ad342ad5b10a4d4ceaab8a1004728c4f6980cfb45364cc8721bd9d12560f64200d477068daadafde5875e7d5c72681801e18e3534b382af356fe1fa19fe81366a3ea939a3134772e11c897b563a1fca09a025e97586e1e122c806cdc91f3090d5a917b88909135533176e8dd826ddeb394b40fefeff3bf24ad708d8c5ca8672039c5a76a6bdda57c1779d14669114344a78266f67f5d6a5e8af509607d0a47c8195721ff3234f49ada52ed29e2b4aa3c88d8687bd0ceaf738bcff2120154c90fb817e078ae3e23001a60263e8dfada5e6971b848ca69c25bc241327246019e6a10b44b34363d7e9318974bafc3dbe123360e82a7fb73e4c89e291a8edede44e14327ab49f835974d030bdd0b3444089dd6bc636f94645d795e3eae2d847f8d197cef83fefa66f37c4d91fc84d344d7d3a675d4b8e9a1714eb51c2eb936a244c1302dc09c3908b750f123fa444ce2dc02bb5bfb090c73cb0afbfa9e502c732d96365f1f55c2ecb51dabbd35d2effb71d0eb294c516857c101077ba53ccd11dbd6693c19d63d28270fe3038b8e8efa9c47af3f2d2d67539a42b107410715ce070ae567d8f833970afddf6569c8442de87dbfcdcbebff6dfe942ef5f8add00aa8fdf6502f00b100a29cdf92bc74249e2a53e191d7093483193dc1bbe75ee82a6317b3143c393e42a73260d9e738eca2711567a2ee0797a2a0fdc310480fdc839321e267a66766f2823ba0a5b00b31721d8a9c60d6e97dbe0296027b9d1dc06aa378a68e6c919b0c98451e4a4150ee8985bfa03bc8b0f864a7232284766059b068fd4f4586c50e6b3ffeb7e02800d57e3564b66d980fe6b32d01430e9e98560e7a8936d631bc0349b0b5a6760a92c2a8c28716f61372ba8f63e6cb38cf9bd2442b7f185b8226ff18362976ff417c634e91f9ef4c9f650e681b8dfdf2a51b76a251303242d96e51ee71bc0b48ccb4a9027e911d43ff315651a9277e4c41fbcb5d2b430f2b566c7d34c1200b17d38b0baebe4db206401f047035501d5d1f091c9bce541988fc42d6ea0f30b7a2f250703b6f0a9a2a0abb86989132376a4a6433246a9a6c8992104c8c4d8b50a03a3ac476c02c0a4ae3772616661dfb92c7b16ffa81c5a28ce9752790be1cf628ba1b08aab91cfa5ed7370b6d686a8650cc87528cf39663eb6ffefe7707bfba6e343a4c3ae3aefbd1fd8238f333de17d27ef6ef1a5f888c51a780458e00201d1009c2dc5e9c4135aa35c62060c31ef444a39f124fc23f66aaf50dd9be0ba178c7cda2e0aa27c1f4ed147bc86056eb45a5b8882eb81fc227bfe8c86dc5b91ca1f846f20e52a51c9c3d4bd5d22ce96da6a9a8e937c698a4f03c99c21e1b6f54e4b41f21f74d2e066c4b8ccec44e35d89bb054a09ce7752789dbdc7d472b80185398ebae03a8d36d8346a66396712cb037f8ba082e7746546263124e42918670a791329e822b922a683865918e3b107c81495e0a456d74c68c394b9487d8b335a0b806fc5f8a5e636789962e0830de8fd8ed87a2356bb27c3136981579b29fc9447d89b939d3a25b3951f307a1af64dad0027e00cddf6cd60692496474cb3ed473c7dda078fca4fbf9634b154e481402abaa2dda2d8fd742df924bd0d2b8a5d16935a58228a80f727b2f6bfd7280d12e25ef382753499777077ba222d7085f1edb6db68df6541cd62fbfbfdf8b9ad6fc2b40809cf078dbebf2cdf95f2f92d29fd3b14c7b91fa5dbfab13af545171f23a9da44fe17612cc4661fe727be6fa67acc7ed2cb7ff2ed164741930ead562a98e1b08a4624064e915b06ca4f852082d3808f4ad530a9d18539861a4789ffbc8f4bce99cfdebbd7ea155cea4e2c64f5b2b8454c459b903bb36cccc484014cd28c092cfb113881dde67ec53cc7d0807618632db3df7dda4764c963be21eae0af4c7338ed1ccdda46e1ee4db723f83ff3ac57b0a3d32878e0b7710ea197f7adae92a774b893daafac24788d2d872b60c651a2b65b52674e69cd191b6d9574e3b233c3225cd081f1c3e636deb2e6a647a409b9c6a19746246e8935904fdeb160ad676e14a6495a855eca927d74ff55d8bcae40c35136cfb9cca1186389419bff2a1c6e477406ecb6429c46aa01189126d136b025b47309b9dd4b133766a3aec3de5ad4270654b700ef0f9245ce1aeb08e7f5b7651fab2b4f5717542fc4277254b65d3e1a1edd529a34208903223b2840f40ada8cc0b843b19b3eafcd28d6920fc17f6dbe8f551413e2b3502a9498f7ba4e58c598e6db4cc6b7b61ae92c752ee34b7a98eecd36c6f13f8d8bfb88a24b0347b9c68661d63f87fcec6475a6cf06aa47bbc0ec91472a00c4487a06c8ea1483e1089d27e47d8b7f95e29c11f00e0a3948c3df7a307fa922762ce0829cc4309de0467b9cbeef6dbb17777c550e2d019d945109e1a6ae753df1cff25926962b654ef5a4ebefadd924d51d60c72fc8e4d718e768e3a0f30ecc2dfa9b3d21966d265d40b0c8a096906cad6a4e3c69d9419f39b494a4a82aa7a2314ec2ce5a941434b4cb11b08fe6baf8cd520a8e42c6d39878aaaac06fefb3b90d174333c5b6209f7db49852e2d7fdf8752ed1c3f9685347649de51f8bd81a6f75025d96f4e64539898dfe40890f48012929f4e43941ee2252300850de0be19a5813bde539b296b1b7cb0ae2c4fee097767814a54312", 0x1000, 0x40}, {&(0x7f0000001480)="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", 0x1000, 0x7fffffff}, {&(0x7f0000002480)="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", 0x1000, 0x1}, {&(0x7f0000003480)="8b005775ab989fe30b5dcdc8b3b85f8e168fbdcc68d2c281f06bf047ae018384c20fc94eeea279870a6cb679c3060599876cd938f01ff9dbc9571a98716d8205f0ced42043526cfc1063ed332e9213ffb5abffbbfccbee2d5c75bbcbfc7ebd81174d", 0x62, 0x3}, {&(0x7f0000003500)="c5b1832c6a4aae35dd2e689202e2cc5c76382b127c6801474dcd92ff0ba3c9924b4bd5f5d435de96c8a3d25dc77c4d448e40e3755ea87b786136c830f6ed0db344c8d0c80f6c018d5fcbc282ec8a89efa56e29ed894dd8faa9eff556ddafa1126517f2237153e5462e17ded4b5c2f4ab0eacd43831bb73511a3d557edffc451f202f28bd03fb790a4773d40a9d20fc454b769562ca3095f20ac8890e853db61be2de32f0eab34a40ce9962b78a3435ffd5473c22d20380da865f047a", 0xbc, 0x3}], 0x40, &(0x7f00000038c0)={[{@max_inline={'max_inline', 0x3d, [0x34]}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@flushoncommit='flushoncommit'}, {@fragment_data='fragment=data'}, {@fragment_data='fragment=data'}], [{@uid_gt={'uid>', r2}}, {@fowner_lt={'fowner<', r3}}, {@fsname={'fsname', 0x3d, '/dev/fuse\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x63, 0x62, 0x7e, 0x75, 0x36, 0x33], 0x2d, [0x63, 0x3f, 0x76, 0x7f], 0x2d, [0x63, 0x31, 0x7f, 0x77], 0x2d, [0x33, 0x7f, 0x61, 0x35], 0x2d, [0x61, 0x37, 0x30, 0x37, 0x77, 0x33, 0x0, 0x34]}}}]}) fchdir(r1) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x5, @pix_mp={0x5, 0x7, 0x73363359, 0x9, 0xa, [{0x3, 0x5}, {0x5, 0x200}, {0x80, 0x7}, {0x9, 0x1}, {0x1000, 0x81}, {0x401, 0xfffffffffffffffd}, {0x9, 0x8001}, {0x13930b9f, 0x1}], 0xfffffffffffffff8, 0x7fffffff, 0xa, 0x0, 0x2}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x901, 0x0) sendmsg$sock(r1, &(0x7f0000003b80)={&(0x7f00000039c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x7ff, @rand_addr="a09dba385a8e990c6f66f41a03a7ad2a", 0x100000000}}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003a40)="2aeb75e54b7cf9f8a6705c7df9c76fb2a87bb44d980f2512fec13b2a4952cc9ca335952346e449121b57aba8f5324e8adb3c0645efb304eaf7c2a0430c55363f84609c85ceaf545bb15276ce884aecfe18445ea4485952328ac32e581bbdc34fe31513363a0651132191f1446b87726b05ce8b0fd8", 0x75}], 0x1, &(0x7f0000003b00)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}, 0x4) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x3, 0x80000000000000}) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000002c0), 0x4) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000100)={0x3, 0x3, @stop_pts=0x8001}) io_uring_setup(0x68, &(0x7f0000000080)={0x0, 0x0, 0x2}) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000003bc0)={0x31, 0x3, 0x0, {0x0, 0x10, 0x0, 'selfsecurityuser'}}, 0x31) [ 518.940559][T25032] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 518.948743][T25032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0xff0f, r0, 0x0}]) 00:17:43 executing program 2: times(0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000502d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) [ 519.129301][ C0] protocol 88fb is buggy, dev hsr_slave_0 00:17:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xff000000}]) 00:17:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80638c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:43 executing program 2: times(0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000503d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x1000000, r0, 0x0}]) [ 519.386015][T25059] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 519.394357][T25059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000003680)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000036c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000037c0)=0xe8) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x2, 0x6, &(0x7f00000035c0)=[{&(0x7f00000003c0)="8456827da34728de8965300995b5b2284a212623a0e9ed24110758b9d4697b755ae24201644a4bfc5b8c969eb2cdd34e8c721389a4ced45e3fbf2ed08d1e5985b9f9f5efeecf525464fdf12f41188289b091dde699f3ef9e2f3b6bee9f2cf49dfd022eefe3739850471c9a2a3f729f146219cd1c69916bf6ce7b4448a1378896a811597e9f6dc2cfdbc8651c", 0x8c, 0x6}, {&(0x7f0000000480)="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", 0x1000, 0x40}, {&(0x7f0000001480)="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", 0x1000, 0x7fffffff}, {&(0x7f0000002480)="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", 0x1000, 0x1}, {&(0x7f0000003480)="8b005775ab989fe30b5dcdc8b3b85f8e168fbdcc68d2c281f06bf047ae018384c20fc94eeea279870a6cb679c3060599876cd938f01ff9dbc9571a98716d8205f0ced42043526cfc1063ed332e9213ffb5abffbbfccbee2d5c75bbcbfc7ebd81174d", 0x62, 0x3}, {&(0x7f0000003500)="c5b1832c6a4aae35dd2e689202e2cc5c76382b127c6801474dcd92ff0ba3c9924b4bd5f5d435de96c8a3d25dc77c4d448e40e3755ea87b786136c830f6ed0db344c8d0c80f6c018d5fcbc282ec8a89efa56e29ed894dd8faa9eff556ddafa1126517f2237153e5462e17ded4b5c2f4ab0eacd43831bb73511a3d557edffc451f202f28bd03fb790a4773d40a9d20fc454b769562ca3095f20ac8890e853db61be2de32f0eab34a40ce9962b78a3435ffd5473c22d20380da865f047a", 0xbc, 0x3}], 0x40, &(0x7f00000038c0)={[{@max_inline={'max_inline', 0x3d, [0x34]}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@flushoncommit='flushoncommit'}, {@fragment_data='fragment=data'}, {@fragment_data='fragment=data'}], [{@uid_gt={'uid>', r2}}, {@fowner_lt={'fowner<', r3}}, {@fsname={'fsname', 0x3d, '/dev/fuse\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x63, 0x62, 0x7e, 0x75, 0x36, 0x33], 0x2d, [0x63, 0x3f, 0x76, 0x7f], 0x2d, [0x63, 0x31, 0x7f, 0x77], 0x2d, [0x33, 0x7f, 0x61, 0x35], 0x2d, [0x61, 0x37, 0x30, 0x37, 0x77, 0x33, 0x0, 0x34]}}}]}) fchdir(r1) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x5, @pix_mp={0x5, 0x7, 0x73363359, 0x9, 0xa, [{0x3, 0x5}, {0x5, 0x200}, {0x80, 0x7}, {0x9, 0x1}, {0x1000, 0x81}, {0x401, 0xfffffffffffffffd}, {0x9, 0x8001}, {0x13930b9f, 0x1}], 0xfffffffffffffff8, 0x7fffffff, 0xa, 0x0, 0x2}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x901, 0x0) sendmsg$sock(r1, &(0x7f0000003b80)={&(0x7f00000039c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x7ff, @rand_addr="a09dba385a8e990c6f66f41a03a7ad2a", 0x100000000}}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003a40)="2aeb75e54b7cf9f8a6705c7df9c76fb2a87bb44d980f2512fec13b2a4952cc9ca335952346e449121b57aba8f5324e8adb3c0645efb304eaf7c2a0430c55363f84609c85ceaf545bb15276ce884aecfe18445ea4485952328ac32e581bbdc34fe31513363a0651132191f1446b87726b05ce8b0fd8", 0x75}], 0x1, &(0x7f0000003b00)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}, 0x4) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x3, 0x80000000000000}) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000002c0), 0x4) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000100)={0x3, 0x3, @stop_pts=0x8001}) io_uring_setup(0x68, &(0x7f0000000080)={0x0, 0x0, 0x2}) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000003bc0)={0x31, 0x3, 0x0, {0x0, 0x10, 0x0, 'selfsecurityuser'}}, 0x31) 00:17:43 executing program 2: times(0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xff0f0000}]) 00:17:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80688c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000504d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x2000000, r0, 0x0}]) 00:17:44 executing program 2: times(0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) [ 519.763159][T25085] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 519.771546][T25085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80698c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0x2, 0x5, 0x7fffffff, 0x6, 0x1, 0x3ff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x2, @rand_addr="4cd3ff66b5b27e980bd5d0fd674de942", 0x6}, @in={0x2, 0x4e22, @loopback}], 0x4c) 00:17:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000505d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xfffffffe}]) [ 520.016415][T25099] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 520.024745][T25099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:44 executing program 2: times(0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) [ 520.072304][T25105] QAT: Invalid ioctl 00:17:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x3000000, r0, 0x0}]) [ 520.114155][T25105] QAT: Invalid ioctl 00:17:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a806c8c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002100050ad25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:44 executing program 2: times(0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:44 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000027e87beb0100001f59256500", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0bf7a301ffe8dac0726906da58a5d1ab0", @ANYRESHEX, @ANYPTR64, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad4c079521dfdaf3d0fef515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5ae", @ANYRESHEX], 0x0, 0x10a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:17:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x100000000000000}]) 00:17:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002100050ed25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a806f8c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:44 executing program 2: times(0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x4000000, r0, 0x0}]) 00:17:44 executing program 5: bpf$MAP_LOOKUP_ELEM(0x14, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/p\x05\x00\x00\x00\x00\x00\x00\x00/attr/exec\x00', 0x2, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x10000, 0x0) 00:17:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x200000000000000}]) 00:17:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80708c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000002540), &(0x7f0000002580)=0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x4, "8fb79b454ff0795342bcfc7289dd97985011e55d1256477f37a6ba42fea617a3", 0xffffffff, 0x75ae, 0x2, 0x6, 0x1, 0x5, 0x6, 0x20000000, [0x5, 0x8, 0x8000, 0x9]}) close(0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xe040, 0x0) 00:17:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002100050fd25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:45 executing program 2: times(0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80738c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x5000000, r0, 0x0}]) 00:17:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000560d25a80648c63940d0500fc00", 0x14}], 0x1}, 0x0) 00:17:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x300000000000000}]) 00:17:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffff3ed, 0x9e20fa92ee9e27f8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$smack_current(r2, &(0x7f0000000100)='\x00', 0x1) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x8) 00:17:45 executing program 2: times(0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80758c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x11000000, r0, 0x0}]) 00:17:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0200fc00", 0x14}], 0x1}, 0x0) 00:17:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x400000000000000}]) 00:17:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80788c63940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 00:17:45 executing program 2: times(0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0300fc00", 0x14}], 0x1}, 0x0) 00:17:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x90701, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x3f000000, r0, 0x0}]) 00:17:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80647863940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 521.737389][T25227] validate_nla: 6 callbacks suppressed [ 521.737402][T25227] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 521.751463][T25227] __nla_validate_parse: 6 callbacks suppressed [ 521.751474][T25227] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:46 executing program 2: times(0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x2, 0x2) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80ffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x1, 0xffffffffffffffff, 0x1800}], 0x2) 00:17:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000021000500d25a80648c63940d0400fc00", 0x14}], 0x1}, 0x0) 00:17:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000021000500d25a80648c0a940d0500fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 522.077240][T25238] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 522.085533][T25238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 522.729340][ C1] net_ratelimit: 14 callbacks suppressed [ 522.729349][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 522.740904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 523.769373][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 523.775210][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 524.809331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 524.815344][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 525.849332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 525.855208][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 526.889338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 526.895166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 527.929331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 527.935152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 528.969331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.975155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 530.009333][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 530.015186][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 531.049333][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 531.055161][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 532.089348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 532.095180][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 533.129336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 533.135167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 534.169330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 534.175148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 535.209346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 535.215278][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 536.249334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 536.255153][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 537.289341][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 537.295161][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 538.329335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 538.335260][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 539.369337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 539.375158][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 540.409323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 540.415142][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 541.449360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 541.455279][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 542.489391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 542.495239][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 543.529403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 543.535675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 544.569338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 544.575177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 545.609369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 545.615426][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 546.649343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 546.655169][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 547.689383][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 547.695207][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 548.729327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 548.735138][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 549.769549][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 549.775396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 550.809337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 550.815157][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 551.849360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 551.855178][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 552.889347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 552.895457][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 553.929336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 553.935192][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 554.969630][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 554.975699][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 556.009360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 556.015222][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 557.049336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.055142][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 558.089342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 558.095167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 559.129344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 559.135158][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 560.169360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 560.175379][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 561.209330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 561.215156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 562.249338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 562.255174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 563.289336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 563.295167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 564.329357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 564.335298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 565.369335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 565.375176][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 566.409343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 566.415322][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 567.449359][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 567.455209][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 568.489377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 568.495206][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 569.529363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 569.535188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 570.569326][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 570.575155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 571.609323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 571.615159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 572.649335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 572.655163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 573.689358][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 573.695183][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 574.729347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 574.735718][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 575.769348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 575.775176][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 576.809347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 576.815257][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 577.849335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 577.855461][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 578.889344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 578.895215][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 579.929328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 579.935152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 580.969339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 580.975167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 582.009333][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 582.015189][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 583.049345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 583.055188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 584.089334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 584.095262][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 585.129336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 585.135155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 586.169346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 586.175695][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 587.209338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 587.215187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 588.249348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 588.255183][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 589.289347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 589.295168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 590.329329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 590.335156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 591.369352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 591.375214][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 592.409322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 592.415145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 593.449353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 593.455203][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 594.489367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 594.495197][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 595.529379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 595.535340][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 596.569339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 596.575182][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 597.609356][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 597.617899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 598.649334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 598.655201][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 599.689346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 599.695183][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 600.729345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 600.735185][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 601.769332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 601.775146][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 602.809327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 602.815147][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 603.849326][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 603.855173][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 604.889340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 604.895189][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 605.929393][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 605.935421][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 606.969336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 606.975163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 608.009364][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 608.015227][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 609.049339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 609.055184][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 610.089350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 610.095181][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 611.129337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 611.135182][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 612.169331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 612.175159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 613.209323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 613.215142][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 614.249343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 614.255174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 615.289338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 615.295350][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 616.329408][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 616.341945][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 617.379357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 617.385193][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 618.409350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 618.415190][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 619.449347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 619.455178][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 620.489371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 620.495216][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 621.529374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 621.535230][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 622.569344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 622.575175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 623.609318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 623.615121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 624.649350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 624.655184][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 625.689348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 625.695192][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 626.619198][ C0] rcu: INFO: rcu_sched self-detected stall on CPU [ 626.625792][ C0] rcu: 0-....: (1 GPs behind) idle=4fe/1/0x4000000000000002 softirq=42753/42754 fqs=5228 [ 626.636140][ C0] (t=10500 jiffies g=71129 q=1046) [ 626.641349][ C0] NMI backtrace for cpu 0 [ 626.645685][ C0] CPU: 0 PID: 25210 Comm: syz-executor.5 Not tainted 5.2.0+ #71 [ 626.653314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.663374][ C0] Call Trace: [ 626.666659][ C0] [ 626.669551][ C0] dump_stack+0x16f/0x1f0 [ 626.673891][ C0] ? lapic_can_unplug_cpu.cold+0x36/0x45 [ 626.679524][ C0] nmi_cpu_backtrace.cold+0x70/0xb2 [ 626.684728][ C0] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 626.690370][ C0] nmi_trigger_cpumask_backtrace+0x22d/0x25c [ 626.696358][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 626.702262][ C0] rcu_dump_cpu_stacks+0x183/0x1cf [ 626.707388][ C0] ? find_next_bit+0x107/0x130 [ 626.712161][ C0] rcu_sched_clock_irq.cold+0x491/0x8c0 [ 626.717716][ C0] ? raise_softirq+0x163/0x370 [ 626.722496][ C0] update_process_times+0x32/0x80 [ 626.727533][ C0] tick_sched_handle+0xa2/0x190 [ 626.732400][ C0] tick_sched_timer+0x47/0x130 [ 626.737179][ C0] __hrtimer_run_queues+0x364/0xd90 [ 626.742392][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 626.747682][ C0] ? hrtimer_start_range_ns+0xbc0/0xbc0 [ 626.753229][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 626.758949][ C0] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 626.765025][ C0] hrtimer_interrupt+0x2ea/0x730 [ 626.769988][ C0] smp_apic_timer_interrupt+0x10b/0x550 [ 626.775536][ C0] apic_timer_interrupt+0xf/0x20 [ 626.780464][ C0] [ 626.783407][ C0] RIP: 0010:__might_sleep+0x15/0x190 [ 626.788689][ C0] Code: 41 d4 5c 00 e9 fd fe ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 56 41 89 d6 41 55 <41> 89 f5 41 54 49 89 fc 53 65 48 8b 1c 25 c0 fd 01 00 48 8d 7b 10 [ 626.808389][ C0] RSP: 0018:ffff88809aa3faf0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 626.816902][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90013112000 [ 626.825003][ C0] RDX: 0000000000000000 RSI: 000000000000057a RDI: ffffffff87886360 [ 626.833000][ C0] RBP: ffff88809aa3fb00 R08: ffff88808cb401c0 R09: fffffbfff14a6d51 [ 626.840990][ C0] R10: ffff88808cb40a60 R11: ffff88808cb401c0 R12: 0000000020013080 [ 626.848982][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88809aa3fc50 [ 626.857005][ C0] __do_page_fault+0x369/0xdd0 [ 626.861786][ C0] ? page_fault+0x16/0x40 [ 626.866145][ C0] do_page_fault+0x38/0x536 [ 626.870756][ C0] page_fault+0x39/0x40 [ 626.875018][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 626.881646][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 626.901261][ C0] RSP: 0018:ffff88809aa3fc70 EFLAGS: 00010206 [ 626.907342][ C0] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 626.915329][ C0] RDX: 0000000000001000 RSI: 0000000020013080 RDI: ffff88808dc81000 [ 626.923317][ C0] RBP: ffff88809aa3fca8 R08: ffffed1011b90400 R09: 0000000000000000 [ 626.931399][ C0] R10: ffffed1011b903ff R11: ffff88808dc81fff R12: 0000000020013080 [ 626.939384][ C0] R13: 0000000020014080 R14: ffff88808dc81000 R15: 00007ffffffff000 [ 626.947833][ C0] ? _copy_from_user+0x15a/0x1a0 [ 626.952787][ C0] mem_rw.isra.0+0x253/0x4f0 [ 626.957387][ C0] ? environ_read+0x5b0/0x5b0 [ 626.962096][ C0] mem_write+0x55/0x70 [ 626.966168][ C0] __vfs_write+0x8a/0x110 [ 626.970525][ C0] ? mem_rw.isra.0+0x4f0/0x4f0 [ 626.975279][ C0] vfs_write+0x268/0x5d0 [ 626.979680][ C0] ksys_write+0x14f/0x290 [ 626.983992][ C0] ? __ia32_sys_read+0xb0/0xb0 [ 626.988759][ C0] __x64_sys_write+0x73/0xb0 [ 626.993527][ C0] do_syscall_64+0xfd/0x6a0 [ 626.998037][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 627.003921][ C0] RIP: 0033:0x459819 [ 627.007805][ C0] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 627.027405][ C0] RSP: 002b:00007f7133fcbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 627.035810][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 627.043783][ C0] RDX: 000000002000008f RSI: 0000000020000080 RDI: 0000000000000005 [ 627.051749][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 627.059712][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7133fcc6d4 [ 627.067675][ C0] R13: 00000000004c9492 R14: 00000000004e0660 R15: 00000000ffffffff [ 627.179436][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 627.185290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 627.769296][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 627.775121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 629.209300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 629.215124][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 629.849304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 629.855135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 631.289315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 631.295148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 633.379313][ C1] net_ratelimit: 2 callbacks suppressed [ 633.379322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 633.390728][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 634.009299][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 634.015117][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 635.449323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 635.455156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 636.089327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 636.095166][ C1] protocol 88fb is buggy, dev hsr_slave_1