Warning: Permanently added '10.128.0.186' (ECDSA) to the list of known hosts. 2020/07/20 23:33:21 fuzzer started 2020/07/20 23:33:22 dialing manager at 10.128.0.26:39183 2020/07/20 23:33:22 syscalls: 3113 2020/07/20 23:33:22 code coverage: enabled 2020/07/20 23:33:22 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/20 23:33:22 extra coverage: enabled 2020/07/20 23:33:22 setuid sandbox: enabled 2020/07/20 23:33:22 namespace sandbox: enabled 2020/07/20 23:33:22 Android sandbox: enabled 2020/07/20 23:33:22 fault injection: enabled 2020/07/20 23:33:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/20 23:33:22 net packet injection: enabled 2020/07/20 23:33:22 net device setup: enabled 2020/07/20 23:33:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/20 23:33:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/20 23:33:22 USB emulation: /dev/raw-gadget does not exist 23:35:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 230.297278][ T32] audit: type=1400 audit(1595288134.371:8): avc: denied { execmem } for pid=8496 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 230.632694][ T8497] IPVS: ftp: loaded support on port[0] = 21 [ 230.904741][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 231.151414][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.159445][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.169108][ T8497] device bridge_slave_0 entered promiscuous mode [ 231.189657][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.196891][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.206663][ T8497] device bridge_slave_1 entered promiscuous mode [ 231.255656][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.270561][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.321683][ T8497] team0: Port device team_slave_0 added [ 231.333424][ T8497] team0: Port device team_slave_1 added [ 231.383288][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.390505][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.418392][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.432817][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.440223][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.467177][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.675622][ T8497] device hsr_slave_0 entered promiscuous mode [ 231.830473][ T8497] device hsr_slave_1 entered promiscuous mode [ 232.292461][ T8497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.335847][ T8497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.526607][ T8497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.666621][ T8497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.940255][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.971364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.981496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.004079][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.027086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.037317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.046928][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.055783][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.078747][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.087903][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.097863][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.107365][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.114685][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.125323][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.149668][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.160232][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.169952][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.207584][ T8497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.218677][ T8497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.241762][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.251806][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.262082][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.272327][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.281904][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.292068][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.301397][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.316936][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.353196][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.361089][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.384189][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.427708][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.438483][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.484998][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.494665][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.514752][ T8497] device veth0_vlan entered promiscuous mode [ 233.530264][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.539430][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.560206][ T8497] device veth1_vlan entered promiscuous mode [ 233.612654][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 233.622217][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 233.631735][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.641677][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.662117][ T8497] device veth0_macvtap entered promiscuous mode [ 233.705067][ T8497] device veth1_macvtap entered promiscuous mode [ 233.766144][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.775451][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.785055][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.794405][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.804332][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.834753][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.842722][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.853046][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:35:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="51cfbb1927b0629b210af9f1fd2c38345c7c6b64f665eef7f9bdc024c3034e2d0803dc92db60a10f2f8e2c9263f193a968a615e4c491cd434ba710820d059453821b60211cb8527c33eb3effd01dd0f9b1562c0432ae7cc890bf1c3a2a32ccc6e8ba13f772cf2ef094", 0x69}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1870, 0x10, 0x0, 0x27) 23:35:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 23:35:39 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 236.227698][ T8736] IPVS: ftp: loaded support on port[0] = 21 23:35:40 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) [ 236.574417][ T8736] chnl_net:caif_netlink_parms(): no params data found 23:35:40 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000009, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 236.751014][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.758632][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.767862][ T8736] device bridge_slave_0 entered promiscuous mode [ 236.809579][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.816831][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.826691][ T8736] device bridge_slave_1 entered promiscuous mode [ 236.921720][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.940285][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.014162][ T8736] team0: Port device team_slave_0 added [ 237.035104][ T8736] team0: Port device team_slave_1 added [ 237.127553][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.135708][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.162162][ T8736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.177973][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.186497][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.214594][ T8736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.337229][ T8736] device hsr_slave_0 entered promiscuous mode [ 237.390399][ T8736] device hsr_slave_1 entered promiscuous mode [ 237.449027][ T8736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.456668][ T8736] Cannot create hsr debugfs directory 23:35:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7dc79a30ae94c2d8, 0x3) dup3(r1, r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat$ppp(0xffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) write$ppp(r3, &(0x7f00000001c0)="ed98194a484fc2e2a76ac88e0ae141d6e2f178136a218e480fcaf1f5d19799f952fbe27a291dc244b838ab278988067ea62ea08e2b4816a23d96bf5a0d7023710a234914d9ea4bd5565fd4b612682962b27f960cd6a13c8e5d34cf234684bbc373022c882d604dabf139703fa90d1a40726a902679e01a4a5864dffc8400b2aacaf06222b90298f1a28e0206a2f3cbd6e14f980036b69e79c9ce80f153dcc9dc32cd8dee02f47682782e330d652796dab6c99df1a14bcf8e95e191eca83cafe574b3c2804d1d920a3c9c04bd64b8c6bf0f", 0xd1) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000040)={0xf9fb04e, 0xa, 0x32, "fe49dbe271027e4c0f18335b891a6c83f3407d81f09a055d4d9456d78bcb209f53bf16bfc1a292a1b762c96fd0e86daf216932092adb018b634d2380", 0x1a, "fd63b4c72040e0989c84037814942c2dee5fe5dcb42655688d598e9ee395acf0d0914c9fdc329a51f3b720b26d8ac1d61b3e8ef6a312e71272352288", 0xc0}) [ 237.860217][ T8736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.909138][ T8736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.964576][ T8736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.023825][ T8736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.255567][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.283969][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.292474][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.319611][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.340518][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.350475][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.359990][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.367181][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.447889][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.457758][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.467627][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.477067][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.484342][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.493358][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.504181][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.515058][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.525370][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.535599][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.546221][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.556617][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.566351][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.575800][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.585396][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.600463][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.609878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.667770][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.676237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.700202][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 23:35:42 executing program 0: socketpair(0x25, 0x4, 0x2, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', r4}) [ 238.752979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.763553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.844594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.854593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.879148][ T8736] device veth0_vlan entered promiscuous mode [ 238.899826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.909039][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.918583][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.932342][ T8736] device veth1_vlan entered promiscuous mode [ 238.971133][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.023484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.033968][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.043433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.053421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 23:35:43 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000706ed640000e2a6ed9f00bdda4da2260c00010006"], 0x1}}, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x10b000, 0x81}, 0x18) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0xc7fde, 0x0) [ 239.075900][ T8736] device veth0_macvtap entered promiscuous mode [ 239.096088][ T8736] device veth1_macvtap entered promiscuous mode [ 239.143937][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 239.157714][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.171272][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.189685][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.199269][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.208630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.219046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.267932][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 239.280706][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.294033][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.304424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.314477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.410564][ T8968] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 239.421146][ T8968] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.430717][ T8968] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 239.977878][ T8987] new mount options do not match the existing superblock, will be ignored [ 240.041251][ T8987] new mount options do not match the existing superblock, will be ignored 23:35:44 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x2, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000680)=@v1={0x0, @aes256, 0x1, "809b3d487938aafd"}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$zero(0xffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x400, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=@upd={0x108, 0x12, 0x10, 0x70bd26, 0x25dfdbfc, {{'sha3-384\x00'}, [], [], 0x400, 0x400}, [{0x8, 0x1, 0x85a8}, {0x8, 0x1, 0xffff}, {0x8, 0x1, 0x8001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x89}]}, 0x108}, 0x1, 0x0, 0x0, 0x4040011}, 0xc000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010a1b7ac302b32fb8e34acd2e174f6ac9d1e50510d337c903506ce99370dfa49224df1662f4293c6dbd2673c84100ada768ce4052c126a114931b288b8947562101b36966d936d142af14090735feea6b3ef63d2e2f6709c18ecec5c0c585a5537c7c838aa04c5c2a2895a3aeebcbf8d674af9ac59561d1789c652d473c7fcc6d8e8899d2f4693f90ae07cdbdf", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) accept4$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @private}, &(0x7f0000000700)=0x10, 0x800) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'erspan0\x00', r5, 0x28, 0x20, 0x40, 0x9, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @local, {[@lsrr={0x83, 0x13, 0x22, [@multicast1, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}]}, @end, @lsrr={0x83, 0xb, 0x16, [@multicast2, @multicast1]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 23:35:44 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x12, r1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f00000000c0)={0x9b0000, 0x7fff, 0x1f, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909d2, 0x101, [], @value64=0x9}}) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000100)) ioctl(r0, 0x40044103, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000140)={0x4, 0xffff9a9c, 0x8e}) [ 240.361474][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.427781][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:35:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x8000, 0x4) shutdown(r0, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0xbc8, 0x7}) 23:35:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x78, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfec94f44}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe368, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x78}}, 0x0) [ 240.773617][ C0] hrtimer: interrupt took 56416 ns [ 240.827325][ T9009] device vlan2 entered promiscuous mode [ 240.850602][ T9009] device bond0 entered promiscuous mode [ 240.856460][ T9009] device bond_slave_0 entered promiscuous mode [ 240.865601][ T9009] device bond_slave_1 entered promiscuous mode [ 240.953095][ T9009] device bond0 left promiscuous mode [ 240.959070][ T9009] device bond_slave_0 left promiscuous mode [ 240.968418][ T9009] device bond_slave_1 left promiscuous mode 23:35:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x74, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x25}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) [ 241.583269][ T9016] device vlan2 entered promiscuous mode [ 241.591800][ T9016] device bond0 entered promiscuous mode [ 241.597426][ T9016] device bond_slave_0 entered promiscuous mode [ 241.604346][ T9016] device bond_slave_1 entered promiscuous mode [ 241.652179][ T9016] device bond0 left promiscuous mode [ 241.657632][ T9016] device bond_slave_0 left promiscuous mode [ 241.664449][ T9016] device bond_slave_1 left promiscuous mode [ 241.816904][ T9024] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 23:35:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="a6dd0000000000007400128009000100766c616e000000006400028006000100000000000c0002000a0000000a0000004c0003800c000100ffffffff090000000c0001007f000000020000000c00010002000000070000000c00010000000000060000200c00010009000000fc0200000c0063000400001401ffffff08000500", @ANYRES32=r4, @ANYBLOB="08040a00", @ANYRES32=r4], 0xa4}}, 0x0) 23:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x74, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x25}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) [ 242.682666][ T9047] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 23:35:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600ff7f000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x74, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x25}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 23:35:47 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$vcs(0xffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x40200, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400a00, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000240)={0x9e0000, 0x4, 0x5, r6, 0x0, &(0x7f0000000200)={0x990af5, 0x80000001, [], @p_u32=&(0x7f00000001c0)=0x4}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r5, 0x0, r7, 0x654, 0x80000}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x7c, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001300)={r4}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r4, 0x5}, &(0x7f00000000c0)=0x8) r8 = socket$inet6(0xa, 0x7, 0x0) sendmmsg$inet6(r8, &(0x7f0000003d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c, 0x0}}, {{&(0x7f00000008c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000290400000000000000000000000000000000ff0d00009a128f"], 0x20}}], 0x2, 0x0) [ 243.642587][ T9065] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 23:35:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000240)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000100)='./bus\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) writev(r0, &(0x7f0000000180), 0x0) sync() sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) 23:35:48 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x18}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) rt_sigtimedwait(&(0x7f00000000c0)={[0x80, 0x7]}, &(0x7f0000000100), &(0x7f0000000180)={0x77359400}, 0x8) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x2bc, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x23, 0x5, "dab8cdedc2e28c7efc85142b1afcc2729a308022143f0bf2728767b605b151"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'smackfsdef'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'audit'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xa8, 0x4, "439242d97c82d1d375753947ee127a807f1a055f07b85dfcc88749cdbcfecb61d25f4bf90dd6d0712d6e394f84093944ff4708135a18a69abd1e2f29284459e2443401b878fbeff398f92c2838824508a4ae920786eb0b448c06766a0a7de1026e398348e60d23eaef5ea11fb4a4619caa6ceda89fa8a2ce07a46ae4e4cf5834fd1a05ec72246d40997f4372df7adbd143273d6e091d5db293efb449ba5e9a3bfd06a465"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'smackfsdef'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '][\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dfltuid'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{)\xb0+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'fsuuid'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x8f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'cache=mmap'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'euid'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x62a}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'syz\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'cl\t%'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'access=user'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x403}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!&)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'euid'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'Uagle=Nmar'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^#\'a&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2bc}}, 0x8044) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) mount$9p_xen(&(0x7f00000001c0)='syz\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x800, &(0x7f0000000480)={'trans=xen,', {[{@access_user='access=user'}, {@cache_loose='cache=loose'}, {@cache_loose='cache=loose'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@cache_loose='cache=loose'}, {@cache_mmap='cache=mmap'}, {@mmap='mmap'}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x36, 0x36, 0x30, 0x38, 0x32, 0xaa, 0x5a], 0x2d, [0x35, 0x0, 0x30, 0x39], 0x2d, [0x33, 0x31, 0x0, 0x61], 0x2d, [0x30, 0x38, 0x36, 0x63], 0x2d, [0x33, 0x38, 0x3e, 0x36, 0x30, 0x32, 0x37, 0x38]}}}, {@audit='audit'}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsdef={'smackfsdef'}}, {@fowner_lt={'fowner<', r5}}, {@euid_eq={'euid', 0x3d, r7}}, {@dont_hash='dont_hash'}, {@audit='audit'}]}}) 23:35:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x0) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x64480, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) 23:35:49 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x9, 0x7f, 0x6, 0x7}, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000140)="fbb9e9bf9e13ce239b335d87789727dd7ba8f0fce4240754e87e33cfc1fbc83e58bba55aae2f4b") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'wg0\x00', {0x3}, 0xfffb}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000001c0)={0x1, 0x200}) dup(r0) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x8040, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000240)={0x18, 0x3, 0x9, 0xfffffffffffffffb}) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000280)={0x78bd, 0x8, 0x8000, 0x0, 0x2, 0xe, 0x11, "151b5436a1fa36a0588a70a5efe3ae4e86553819", "3a11a0427f0029bbed01057c0edf61f2bad60157"}) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000002c0)={@any, 0x59f8}) r3 = openat$autofs(0xffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x20240, 0x0) bind$isdn_base(r3, &(0x7f0000000340)={0x22, 0x6, 0x1, 0x9, 0xfd}, 0x6) r4 = openat$vsock(0xffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x381203, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f00000003c0)) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000480)={0xd0, 0x0, 0x2}) getcwd(&(0x7f00000004c0)=""/85, 0x55) socketpair(0x21, 0x1, 0x400, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000580)=0x3, 0x4) 23:35:49 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[], 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) [ 245.331601][ T32] audit: type=1804 audit(1595288149.411:9): pid=9106 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir294071732/syzkaller.M5TEm9/7/bus" dev="sda1" ino=15743 res=1 [ 245.432842][ T32] audit: type=1804 audit(1595288149.511:10): pid=9106 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir294071732/syzkaller.M5TEm9/7/bus" dev="sda1" ino=15743 res=1 23:35:49 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x18}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) rt_sigtimedwait(&(0x7f00000000c0)={[0x80, 0x7]}, &(0x7f0000000100), &(0x7f0000000180)={0x77359400}, 0x8) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x2bc, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x23, 0x5, "dab8cdedc2e28c7efc85142b1afcc2729a308022143f0bf2728767b605b151"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'smackfsdef'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'audit'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xa8, 0x4, "439242d97c82d1d375753947ee127a807f1a055f07b85dfcc88749cdbcfecb61d25f4bf90dd6d0712d6e394f84093944ff4708135a18a69abd1e2f29284459e2443401b878fbeff398f92c2838824508a4ae920786eb0b448c06766a0a7de1026e398348e60d23eaef5ea11fb4a4619caa6ceda89fa8a2ce07a46ae4e4cf5834fd1a05ec72246d40997f4372df7adbd143273d6e091d5db293efb449ba5e9a3bfd06a465"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'smackfsdef'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '][\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dfltuid'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{)\xb0+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'fsuuid'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x8f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'cache=mmap'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'euid'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x62a}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'syz\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'cl\t%'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'access=user'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x403}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!&)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'euid'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'Uagle=Nmar'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^#\'a&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2bc}}, 0x8044) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) mount$9p_xen(&(0x7f00000001c0)='syz\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x800, &(0x7f0000000480)={'trans=xen,', {[{@access_user='access=user'}, {@cache_loose='cache=loose'}, {@cache_loose='cache=loose'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@cache_loose='cache=loose'}, {@cache_mmap='cache=mmap'}, {@mmap='mmap'}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x36, 0x36, 0x30, 0x38, 0x32, 0xaa, 0x5a], 0x2d, [0x35, 0x0, 0x30, 0x39], 0x2d, [0x33, 0x31, 0x0, 0x61], 0x2d, [0x30, 0x38, 0x36, 0x63], 0x2d, [0x33, 0x38, 0x3e, 0x36, 0x30, 0x32, 0x37, 0x38]}}}, {@audit='audit'}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsdef={'smackfsdef'}}, {@fowner_lt={'fowner<', r5}}, {@euid_eq={'euid', 0x3d, r7}}, {@dont_hash='dont_hash'}, {@audit='audit'}]}}) [ 245.522224][ T32] audit: type=1804 audit(1595288149.551:11): pid=9107 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir294071732/syzkaller.M5TEm9/7/bus" dev="sda1" ino=15743 res=1 [ 245.547397][ T32] audit: type=1804 audit(1595288149.601:12): pid=9106 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir294071732/syzkaller.M5TEm9/7/bus" dev="sda1" ino=15743 res=1 [ 245.683221][ T9110] IPVS: ftp: loaded support on port[0] = 21 23:35:49 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0xa00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002600)={'vxcan1\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001380)=0xfc88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, [], r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r6 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r6, &(0x7f00000002c0)="0181a97a6bba16713ed60f1c4907c25b25f52d084fe363df76a9ce1cc25f39c36c19174f696b27463102882a53a351218fa3b1853bbe48f8ed64b86ae1096720efcda4a0e82e19211d1dd6122933344d5fc640f56de6a5a4a7f7d1e1265ce497344a9689197c64128e2ebdf773916c977a573fb2d202257932e0c633d1a6941b9fab85359c73a8", &(0x7f0000000380)=""/4096}, 0x1c) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) [ 245.919884][ T9139] IPVS: ftp: loaded support on port[0] = 21 [ 246.353228][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 246.647968][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.655879][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.665511][ T9110] device bridge_slave_0 entered promiscuous mode [ 246.687961][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state 23:35:50 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x800, 0x7e) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000064001280080001007369740058000280050005002800000014000b00ff01000000000000000000000000000108001400ff00000008001400090000000600100001000000080003006401010005000500090000000500090029000000060012004e21000008000300", @ANYRES32=r2, @ANYBLOB="d5c11bc95dabf99c5d48e2526240fa5af5ad19bdebca76c71ce5dc4184d6be3ffd05e53fe662cbc6e3663d42af254477809814948209b632ff01000100ff0000c9340994ee791b0743f9d0a4101ca0f6534c75c4f72831f86fc13c2aa0a352f6f8574fe59be5707a0aacc9ecdc70916ad9d22e2f30bd6ea17bdcb100485d56ba57a8c562ae0defd269e4f4c9ca267710641e8a76ca08570e1ee2f1e3116efb9f0b63b7ce6f4760d76109934dbd3a2e7ea686cd9056188e0f10b91cdb0cf12be52e"], 0x8c}}, 0x0) [ 246.695593][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.705917][ T9110] device bridge_slave_1 entered promiscuous mode [ 246.805426][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.845543][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 23:35:51 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x7c, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x100009}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x100000000000000c, 0x80004, 0x8000000000004, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x100000000000000c, 0x4, 0x8000000000004, 0x1, 0x0, r1, 0x5}, 0x40) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000880)=0x4) r4 = syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000680)={0xe, 0x0, "83f0474fd0a86e9025d66921b94fe48c4578eea3721ebb3c"}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000980)={0x7, 0x7}) socket$netlink(0x10, 0x3, 0x15) connect$nfc_llcp(r2, &(0x7f0000000780)={0x27, 0x0, 0x2, 0x0, 0x1, 0x1, "492f32a329f5be5e9f2cf6add75ef9a535fe9b128b96fb145722c01b3dcf014a434315b16a37da37df7746e36af26b91a270dc021d97081c45d93fa7317d35", 0x35}, 0x60) r5 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x18, 0x3, 0xf56, 0x0, 0x6, r6, 0xd9, [], 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r8, 0x28, &(0x7f00000000c0)}, 0x10) socketpair(0x1f, 0x80803, 0x3ff, &(0x7f0000000e40)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000280)={0x0, 0x1cd4000a, &(0x7f0000000240)={&(0x7f0000001380)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f7870600000000000009000100018000000000000084000000000b8381933a000000000000034000002900010073797a30000000000c00024000000000000000050e0003800c00014000000000000000032e000240ffffff0a32b915ffa6ffef7886f18f89cd8c0602447983c34d0b9628f501ba25e34c81fffffd0c0402400000000000002c30000480080001400000000008000148000000010800014000001f00000003007465616d5f736c6176885f30000000001400100081000000006f0000000000c4adc99466d5a6df5a96ba1ba766a031b7adb3515ee4dc599c78fe3a6002abc0bb0cc49aadbd503cda08a8fd9c7ae882fe1a0d72351aa6b4d18322f9e4b35a70336b8fa17615896e0abe4266450c849aba8e663c6164d12fcf6c5ccbdaa94760431e306321a33fc925651e1dd05287f1e6350d16124377ef6456c278af7015cc1f0d456be65bcd26d5aa17cfb8d4834ad44209ed6d64a7e2a799b66a209b79afa906e8e6184891f6823a5a59d29a5b129ccd223c52addeea66a94253312634860c41a95606ae7bb56d8303049fd1c88ba6999063878016e63e897c8f23abe879e7ee435f76197439976c804bc8e1c6c3ba96c9042c54ed10509ff5a76b2ce8da97248c8ff825ac8391feb380e9960b096f5571903afa74ce453ecb8888e38a754d2aba6ac1dfb13cf3501c0fe23abb747c83af5864f85aa958ff2f45e1dadf4961c6c90fc6606373d5efb7cb7f91ff3fdac84a1d8cb1271cf53e5e7c3d2e8d9821c37433b58a4d7739e457da6100d921dd6b527694220f33fe859248000080000000000000000076b935b55cb7edd99577c34089f693969c147a0a1a57af5144705cff1a9cf03f8b30c7e3a879e7f23046c96468c0d0f459468b048bdfe6a0c165ff5367a6732b7bd5210b2798b6947b5f728544f85c0a30748024e5980a76aaa3ab1546a6993e8110143c255ee558a51444824e954b4c32324d0c8d055a8a7d67d3905ca926d187f0be75af4bbb16d282ff5526795a68269a029d1fb87b27e693ca8b4722acb0a4a7b2b4022f9764ab884f1b26949e2a277e1e3187c3c1b089cae58c9c6d0188ba42d73a076f6e84b7a3f2d175877519e922ef766acc900d4b9d5e9e27bd2ca4faa829a444c1b877be6de1a513882ea1b7c0ce9c5e044eab75296d85e9460b0c250ecbcd5e2bc6cc93e3a1364579eb886792b7d68711e72447dce29904f974d27bae259249cbee78368261491524231ee554f1000000000000000000"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2000a4e2c2afe93e90eb01811fba1900000103010002cdee0a9600000000cac2988d0f9bee78c893d9634af66386deaf274607c0f363d272f377bc79acdd329b2ca15f7d0df18454c0de8ba0234690af8b5eb9bf8f20ca0708114132df798a50a96743002d3421286adf49ee001f8c0ae8c874f37723869ed58ab2d07a45e284d00fa361c903585c687e0de9d8bd2043dc01bbaa8e9aca3d677edb8f4f22562a22f1761b9b52b9dc2173cc94f6002a06e5313fbff29520147983f404362be8e9bcd904566b97eb231c50ab6ac2bff557beba8564c2b002e32ee32ab7276bc64e71b0c0e1c80229707d8abe6c19a159e182bbc9e2a9cd7bda72b8f673d7f6c0b9411d9c5fd01de27787fe05f05a9eff"], 0x20}}, 0x0) splice(r9, 0x0, r11, 0x0, 0x1f, 0xa) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f00000008c0)=0x7, 0x4) accept4$rose(0xffffffffffffffff, &(0x7f00000005c0)=@full={0xb, @remote, @bcast, 0x0, [@null, @default, @rose, @bcast, @remote, @default]}, &(0x7f0000000ec0)=0x40, 0x80800) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2032b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) [ 246.936423][ T9110] team0: Port device team_slave_0 added [ 246.967700][ T9110] team0: Port device team_slave_1 added [ 247.084593][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.091903][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.118477][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.183971][ T9295] device geneve2 entered promiscuous mode [ 247.459895][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.467067][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.493504][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.586100][ T287] tipc: TX() has been purged, node left! 23:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0) [ 247.685596][ T9110] device hsr_slave_0 entered promiscuous mode [ 247.719202][ T9110] device hsr_slave_1 entered promiscuous mode [ 247.761121][ T9110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.768952][ T9110] Cannot create hsr debugfs directory 23:35:52 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) clone(0x92070c0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB='.'], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x0, 0x0) [ 247.862987][ T9316] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 248.046674][ T9337] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 248.118898][ T9342] gfs2: gfs2 mount does not exist [ 248.160471][ T9342] gfs2: gfs2 mount does not exist 23:35:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="bd63507fbee3c59cf743888ffa87332d266896db295fd50c2b61e68afefeb349bb5296d825b2f277852c33494ba86be96233d8c82c8b79df52f179f096e1c9d92e07e922e7ad18c3930abbf8db83595a01d6f14a865981eedd2593f430601a3857cd993c0c5c81e69c404a891c2b93f203625e004ef953ca8a6aaacd5ba429f233f5263542e46c5ddc20234eed81f8134c03c77334c5296bd2cc94034892063bd452cc2f013172a203faf6060ca271f947c039f2ee78cd721e3c09", 0xbb) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010001f0774000000dfdbdf250001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002811200001c0012000b0001006d616373656300e10b00020005000a00010005000a0005403d"], 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x40080) openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) [ 248.374994][ T9361] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 248.383280][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.400885][ T9361] device macsec0 entered promiscuous mode [ 248.433368][ T9367] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 248.442472][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 23:35:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)) write$binfmt_misc(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="feda2c774f27068bddb922ceacae5cac1b83661beda5d032b8a6af01ee4cfdefac702e299be7125afc395c0af55de4d36df3b95849cca1496d9748137006f76c0d383481f6e43194d9a2c56066ebd2df1f982df2abeb4aba8a1222a9f9e1b2fdd22c09da203e17d692108350e5bd4aeb83b4e71f904ef21b1586ea5f9426044de607d8315f98c10011ad20b4d4f138b4b0a784e82f09ac7cdf60238ae659fc8892106af8439cb33c93460c46282066ff485e1a0c85d59df96cdc405944659af37374160752fb8c0b5362276331ec5de9e3697c16b007cb0ad774ba9475b594171c82f83db806aec742c7", @ANYRESOCT, @ANYRES32=r3, @ANYRES64], 0x5ea8a3d7) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000080) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000100)=0xffffffffffffff63) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@ipv6_getroute={0x3e4, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_OIF={0x8}, @RTA_ENCAP={0x3b8, 0x16, 0x0, 0x1, @nested={0x3b2, 0x91, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @ipv4=@broadcast}, @generic="4860e9ba99cad10f9478f9a1dbddfd7d4b0fd85301c0462db270b1b050b3404488c1d5942e77661aab01727e6605f8637d3a6b1abd457b6f3f0bdeba6301409f54281135fb73e72cc8b47cbed4d00cb8d1623edd1544e3377397ad76c8ecc3a48544ebb1fa25161966bf61a7278d476f2fe7b868f54aba1194746431221ad33b1af487d0a425c61fc8c6e024c366fdf087cf8769e08bb3e52ba3fc66da54984218a7c99afaa6739a7490bfd9e6e6e0c10591eed6799f84c221ece873586f4684c9a5cfffc356e427c992c06d72ad47cb08ea86bc1f13177e94c14cf6d5aa5d7468254f21db061278e723bbb755ee90aa9967ecbf96ac37", @generic="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", @generic="3620794cea4b68ce51ee20a0f3443af67f7ca800944b9fedccdb0a8be947ebb1e1876e0fe6a0e22066acee986358b98e1bfc8fda62f07bdd313343c0981b344b998b8d3552cce722505e280e6fb7258663a43dd92e9ecb6e2d790449874d4ce0e30a16bfd801294951326988004db2b512ad31b0fd38535bcf3a99fd2e65145d5bd008e3c40f612fee12e3d1dd04440794edd79ef9743f3f49b1a08af9333c146e5a1c7631edf0035c1dd2fd42feef071e358d7342bf36e0914394b426", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x7}, @generic="43035ce96fe427f677b4c79f73496814a06dfe4ee6755bc6bdd18ccc4ccc6a70e01623f96efd0c2e93885772bd4b61a7e988703faebc102fa2f8c47c284d55a316e27eded821e26dd6b1418cdcb89265c50171a6634a6244b103d41eaab45d5e295277fa6c5c02347e2a8359b04f8f397871f8ffb11256e444ab2ae453d2893a2a36269c3f8b7dcf881f0b0e237f150e57464ec28d986541b6dc6eadec55ade44cfed1a1501d3ffcedfb99886e3a503aa8a2183647bfa73a02e5a3304cac87b2d5109fb03a564f3dd0ff4fb5eebd23956b045ea4b77f2ffb3b6af44b42063d33e5d334", @typed={0x8, 0x76, 0x0, 0x0, @fd=r2}]}}]}, 0x3e4}}, 0x40000) [ 248.783234][ T9110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.838984][ T9110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.867307][ T9395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=9395 comm=syz-executor.0 [ 248.899827][ T9110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.957019][ T9110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.341353][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.385843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.395321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.413917][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.452114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.462084][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.472372][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.479818][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.557574][ T9110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.568864][ T9110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.602643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.611992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.622327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.632088][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.639470][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.648611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.659467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.670299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.680557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.691105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.702608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.713279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.722901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.735853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.746231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 23:35:53 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x12, 0xd8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RAUTH(r1, &(0x7f0000000440)={0x14, 0x67, 0x1, {0x10, 0x4, 0x6}}, 0x14) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="0000000000401800280012800a00010076786c616e0000001800028014001015a504030c816c731b594165084a50e063e636a949b956cfac01fa4b54bdff9af53e12c0977cc4bb5d696f22142fb6564aeb60d319ac520e4ef3237f0b3c857e4ae9d11898fa1084dd84a001bf59d2d685c34a1f5f165d05411508b76f7cc5b49883fa533a0b250f3da55f4cec68e003a0d592105519153a40b43330149f531109aab3772071050edc6bef2812504819ff91b657da9a617a65404c42c6b5989d3734535be571837184eceb855ef242fd554dca830508b125f0da7dc37ebe659846133f0a636b97"], 0x3}}, 0x0) r3 = openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200041, 0x205, 0x15}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, &(0x7f00000004c0)=0x8) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xbc, 0x453, 0x400, 0x70bd28, 0x25dfdbfb, "da37a9592bc9d4f88e52ad07b92bcc850256b3a44ca0fd24494d7ec3db0d1a9f02959a6094f6ef7d1b7f5db6618ded2d0108de387b553968a033a23beb2530486e468cb8cbfee69583bc492f25799a1d4da808313ed12eb7bfaab442aa895d034f04d5266ae2adf7ad3deda9b4208c3256f993e77bb31c31b5ef08db7fc59227fe3ee5c4bf16432060706af6fc6187cb5651ce85a502176edf0f41d137cebec383b71a08093585a8a7d191ee", ["", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x14) [ 249.874881][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.032177][ T9110] device veth0_vlan entered promiscuous mode [ 250.083552][ T9110] device veth1_vlan entered promiscuous mode [ 250.099706][ T9403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=359 sclass=netlink_route_socket pid=9403 comm=syz-executor.0 [ 250.149692][ T9110] device veth0_macvtap entered promiscuous mode [ 250.183746][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.193540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.202621][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.210871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.218819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.228788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.238867][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.248433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.258723][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.267960][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.277416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.287316][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.305565][ T9110] device veth1_macvtap entered promiscuous mode [ 250.339894][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.349415][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.358719][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.422430][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.433425][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.443914][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.454546][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.468416][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.479604][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.489918][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.646636][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.657459][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.667633][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.678279][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.691963][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.709265][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.719415][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:35:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x401, 0x101801) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x8000000) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x22, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xb0}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) [ 251.061636][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.071263][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.158751][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.168677][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.010100][ T32] audit: type=1400 audit(1595288156.091:13): avc: denied { write } for pid=9431 comm="syz-executor.2" name="net" dev="proc" ino=29676 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 252.033758][ T32] audit: type=1400 audit(1595288156.091:14): avc: denied { add_name } for pid=9431 comm="syz-executor.2" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 252.055706][ T32] audit: type=1400 audit(1595288156.091:15): avc: denied { create } for pid=9431 comm="syz-executor.2" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 23:35:56 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x9, 0x7f, 0x6, 0x7}, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000140)="fbb9e9bf9e13ce239b335d87789727dd7ba8f0fce4240754e87e33cfc1fbc83e58bba55aae2f4b") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'wg0\x00', {0x3}, 0xfffb}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000001c0)={0x1, 0x200}) dup(r0) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x8040, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000240)={0x18, 0x3, 0x9, 0xfffffffffffffffb}) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000280)={0x78bd, 0x8, 0x8000, 0x0, 0x2, 0xe, 0x11, "151b5436a1fa36a0588a70a5efe3ae4e86553819", "3a11a0427f0029bbed01057c0edf61f2bad60157"}) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000002c0)={@any, 0x59f8}) r3 = openat$autofs(0xffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x20240, 0x0) bind$isdn_base(r3, &(0x7f0000000340)={0x22, 0x6, 0x1, 0x9, 0xfd}, 0x6) r4 = openat$vsock(0xffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x381203, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f00000003c0)) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000480)={0xd0, 0x0, 0x2}) getcwd(&(0x7f00000004c0)=""/85, 0x55) socketpair(0x21, 0x1, 0x400, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000580)=0x3, 0x4) 23:35:56 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x20, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000000c0)) setsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1f, 0x4) recvmmsg(r2, &(0x7f0000000140), 0x40000000000023d, 0x2000000022, &(0x7f00000001c0)={0x77359400}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000380)=0xe4) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x80000, &(0x7f0000000540)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@euid_gt={'euid>'}}, {@uid_eq={'uid', 0x3d, r5}}, {@euid_eq={'euid', 0x3d, r7}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}'}}]}}) 23:35:56 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000509000000100000000000000000f44e9e79bb0ba9aedf31c951870e6d20fbf4037dc9fc0cce9974b1e884f88677cc369f954f876dbb74b5db08bde03eabf1e6d32b8a3f3c02b8dc27f32af05cbf61d2347024943cfc626104541efe24fcd52d63d91c556ba638a7e149d937fc08058914c6609fc4dbe60f5340422107a39e6281f7400297307ef58cfe7acf60b6e535d58996db8e267f71693621222e614a8fd0a4caf3062bf771cc8aa23140d6c02abfa3c2ffc3b9c385a7c12094ec46a004951fc9", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x200, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40094) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3, @ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1c1e00002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000ec1d02"], 0x1e1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 252.547628][ T9446] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.585416][ T9446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=9446 comm=syz-executor.2 [ 252.606939][ T9446] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.625920][ T9448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=9448 comm=syz-executor.2 23:35:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = semget(0x2, 0x0, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000000)=""/44) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0cfdff", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 252.846045][ T9452] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:35:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="eddfd4312f260e996f471271bedf529aa5b21cf61345aa7592f092e3319a6e489c65922a14d862d17a317f982207c98c62344b1b03d5f09ffbf74819bebd1894e48c8139f86b818e5422ab30d0787490f5040f57dda7a58638155c14100eef41fe68eecf80380ef764edb511929404f933c0f794409a08453d70af5589b8bfcd4f"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xac, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="11", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) 23:35:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x6, 0x0, [{0x100000, 0x18, &(0x7f0000000080)=""/24}, {0x1000, 0x75, &(0x7f00000000c0)=""/117}, {0x107002, 0xe2, &(0x7f00000003c0)=""/226}, {0x6000, 0xdc, &(0x7f00000004c0)=""/220}, {0x100000, 0xf7, &(0x7f00000005c0)=""/247}, {0x5000, 0x7a, &(0x7f0000000140)=""/122}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040)=0x32) preadv(r0, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1, 0x3) 23:35:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '9p\x00'}}]}}) 23:35:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$audio1(0xffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) 23:35:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x16c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x140, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x79, 0x5, "b94326b867d450b1a4c81dde4a8d98d63198f1604de542b5afa2ae75ae0382b3d8d7284f5b5b92484cddc6e8308220b2b6f6c93b88b150d9512f153e14015f3fdbdb8e762f9f5df90d818854c44e7e83f0d1448e1ab282995333dbfa668d6255182928d4e88975c1c88f5f0fee280c8b2d90eba79c"}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "894e0ff8eb731c8846f983c9d3fec29b4f11ba3a4e774bdf2d147280552601ad1e8a99a2d1baab4ab4c3e1623cc96da6d712057809a66e7ba0d99e7fd083962630844f74179105cf69f5728d3beaeb3b8645177eaa541a329486dd40fbe8f0f7188d26bb83c0ca893d7d46a2f2768f7dad0f8648a79fe39b784a8ca4c68d3350702d1ce7c2f452a12cdb7500d2dd51ef92774dc36c802c5f80144adb72260c71ce0fd0118c38fca9e1805b6ec980a731d60ad7c2963726b88b74d8"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}]}, 0x16c}, 0x1, 0x0, 0x0, 0x801}, 0x8844) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@delsa={0xd4, 0x11, 0x100, 0x70bd2d, 0x25dfdbfc, {@in=@private=0x401, 0x4d5, 0x2, 0x2b}, [@algo_aead={0xa1, 0x12, {{'gcm_base(lrw(cast6),wp512-generic)\x00'}, 0x2a8, 0x180, "3ed3ac8668fcff6b26671e7e5a4295e5b037ba24713a4af25df8c57b8e2e621875dc650dfa1e5e359478a856a0a17861b5d40cde9747e335017af63b0d41dd2774a0d9bcf8b22fe2329c61504f46c5bcd552986e73"}}, @extra_flags={0x8, 0x18, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8090}, 0x42) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}}, 0x14}, 0x1, 0x60}, 0x0) 23:36:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r1}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r5, 0x0, 0xfff}) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e317a87736058c4140d8fe5d67450f4e38f91d2457b1f20672e51d2a112668d", 0x94}, {&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd6", 0x35}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:36:00 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x81, 0x3}, {0x6, 0x8001}], r3}, 0x18, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TUNATTACHFILTER(r4, 0x400854d5, &(0x7f0000000380)={0x1, &(0x7f0000000200)=[{0xfffa, 0x8, 0x20, 0xffffff6a}]}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="66643d94931fbf2a819686d2342b29ded1a34c59de68e194bc8e4aa827ce", @ANYBLOB="4f6a7f6c4cecac0d08bd15aa7389fa19ab1f51b8a0c5285aa389cc815a8e91271dec65ef33622f43bccbff669d1fc01150293836c39c67720e", @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030122a3030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="ef75705e29603d000000", @ANYRESDEC=0x0]) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) syz_open_pts(r5, 0x10040) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) tkill(0x0, 0x1000000000016) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, r7, 0x0, 0x0, 0x106, 0x5}, 0x1, 0x70000000, 0x7, 0x5, r2, 0x0, 0x5}) setfsgid(r7) write$FUSE_ATTR(r0, &(0x7f0000000300)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}, 0x78) [ 256.778872][ T9507] fuse: Bad value for 'fd' 23:36:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x30c, 0x0, 0x17c, 0x17c, 0x0, 0x5, 0x244, 0x260, 0x260, 0x244, 0x260, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x52020000, {}, [@common=@srh1={{0x8c, 'srh\x00'}, {0x33, 0x0, 0x43, 0x4, 0x1c4, @dev={0xfe, 0x80, [], 0xb}, @private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 0x2a1e, 0x2000}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4}}}, {{@ipv6={@local, @ipv4={[], [], @multicast1}, [], [], 'ip6tnl0\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'vlan1\x00', {0xffffffff}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x368) 23:36:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r1}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r5, 0x0, 0xfff}) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e317a87736058c4140d8fe5d67450f4e38f91d2457b1f20672e51d2a112668d", 0x94}, {&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd6", 0x35}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 257.004271][ T9509] xt_NFQUEUE: number of total queues is 0 23:36:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0200001800010026bd7000fedbdf251d01000015000300030000a00303000008170d6fcdd31c85020000001e0106006473629cffd30db19712ec890795b9d221766c4b7704c96c8925ab05df6d093022543a1ead5eb234b3bbaaea4842aa923f7200d239acc6a320ff3ccf8a19466dc43f5ba6b4111de4514c8493b360a9ad13d9e69b5386bd714afd1b29589f7aa9f3807668a26661b81292dceb81c9e262e94ae01815c296a339ba5090c8509243eea1f8663bf6d23e631e2f1d8c83b727fecb2a4fd5d4aaf9d1f2b3f6d3901f40829ffe024b8e902867acefd99b313e216e78da4a71d4a158aff06e080a3fa968da88f3ffccee05a69915d70f01cd7a9ac042f60a172b3248db48d8fa6abd34a833c7191a5664385ff5536912faba323e0e55f86c795ca60fdc39f055afdbf09a70b0c8f3ec0094c7cda1f1438e4fe419f795e98224afbe6f58530000150004000100004005010000ffc4a94b5bfb342804000000150002000000006001000000d51ad99c033666b375"], 0x2cc}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) [ 257.310585][ T9519] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.346675][ T9519] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.2'. 23:36:01 executing program 2: r0 = socket$inet(0x2, 0x6, 0x400105) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$sock_proto_private(r2, 0x89e8, &(0x7f0000000040)="0dd0f8fee38730ca91f1344402dc92c9f9f16481110cb2473fea2b30155e36fba7b053ce9ce8b782aa9d73205aefc160557a7a4cfb4193f52bc919e615ce1a9475989bb96ef2458e351104035f6e4ebfa343838f02e28816e3d6df26998a67e186ad6868e0ed9b93c40cb9003ebe4cde0c998e8108183a4a17a9c50c79333405") setsockopt$inet_int(r0, 0x0, 0x200000000000c8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r0, 0x0, 0xd4, 0x0, 0x0) 23:36:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x8, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x2000, 0x1, 0x7, 0x0, 0x2000000000096, 0x4, 0x1}, 0xffffffffffffffff, 0xffffff7f, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xa000, 0x2, &(0x7f000000c000/0xa000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, 0x20) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x180, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000200)={0x7, 0x8, 0x9, 0x7, 0xffffe902}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7, 0x6, 0x1f, 0x7}]}) syz_read_part_table(0x74, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="08010500000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtclass={0x24, 0x28, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xf}, {0x800a, 0xa}}}, 0x24}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) [ 257.801859][ T32] audit: type=1400 audit(1595288161.881:16): avc: denied { create } for pid=9523 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 257.835109][ T9529] Unknown ioctl -2143244695 [ 257.910985][ T9527] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 257.919300][ T9527] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 257.936491][ T9527] loop0: p5 size 1073741824 extends beyond EOD, truncated 23:36:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x108, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0xc100}, 0x400440d4) openat$vga_arbiter(0xffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x147, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) [ 258.294611][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:36:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r1}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r5, 0x0, 0xfff}) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e317a87736058c4140d8fe5d67450f4e38f91d2457b1f20672e51d2a112668d", 0x94}, {&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd6", 0x35}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:36:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x8, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x2000, 0x1, 0x7, 0x0, 0x2000000000096, 0x4, 0x1}, 0xffffffffffffffff, 0xffffff7f, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xa000, 0x2, &(0x7f000000c000/0xa000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, 0x20) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x180, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000200)={0x7, 0x8, 0x9, 0x7, 0xffffe902}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7, 0x6, 0x1f, 0x7}]}) syz_read_part_table(0x74, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="08010500000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtclass={0x24, 0x28, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xf}, {0x800a, 0xa}}}, 0x24}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) [ 259.062773][ T9568] Unknown ioctl -2143244695 [ 259.111046][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.215774][ T9568] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 259.279159][ T9568] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 259.372205][ T9568] loop0: p5 size 1073741824 extends beyond EOD, truncated 23:36:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="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", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x6e, @private2}, 0xfffffffffffffe6b) close(r0) 23:36:04 executing program 1: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x400000000000025a, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x2000fe2f}]) socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r2) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r5, r6, &(0x7f00000001c0)=0x202, 0x4000000000dc) dup2(r5, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') 23:36:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x8) 23:36:05 executing program 0: perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xea59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40040, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) write$P9_ROPEN(r2, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x0, 0x0, 0x6}, 0x9}}, 0x18) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0xc) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x80, 0x30}, &(0x7f0000000140)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4018641b, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x7ff, 0x1, 0x28, &(0x7f0000ff9000/0x7000)=nil, 0x7}) [ 261.264536][ T9611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.281588][ T9611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.297910][ T9611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:36:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x5a200, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x98000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdc00, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x20008001) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x9, 0x9, "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", 0x1, 0x2, 0x7e, 0x5, 0x7a, 0x3f, 0x12}, r6}}, 0x120) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000000)="b4", 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000080)) [ 261.575261][ T9617] tipc: Enabling of bearer rejected, failed to enable media 23:36:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) r1 = openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2300, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000580)={0x8, 0x8001, 0x10000, 0x2, 0x7, 0xffff8d2e, 0x2, 0x6, 0x0}, &(0x7f00000005c0)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000600)={0x0, 0xf87c}, &(0x7f0000000640)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="a61647460c8bbb1061199398096ee3f73d517e1db7be163cb8779c7041cf3f941916bb60bb81c60a5118c2f3621206d0b36ac14c2fccab5eeee4b58fac3745e2786ede6752b808252a41355302ca915a9ea98cf1ba99a5c3dc0d5d96f7baea017b6deb8438983071bab4bc51760811e4d789", 0x72}, {&(0x7f0000000180)="50ea35dd8d12c90f2f84054f718d6064f3cfb9bf0318a69daa59922d1cd61f6101c4796fb9ace4b30b6f14a56fd606999c9532aac1cc07941bdca6ffe588853a99ac689ea6bde4da8e6d07b1144f39573627f6", 0x53}, {&(0x7f0000000200)="eb94cb4f406f9928f7df1836392f8d5862c66062678004a6e558ae4b5c1ef124aaec65b52b575d77ef2d5f377b17b0a5c84e2db52120f370fcf429", 0x3b}, {&(0x7f0000000240)="17e2c0a6827c0772bf1082f243e8698ac802a4b0ba51fce1c274ddea8ca1fafb3ab584756f595139912347af4b6702b31bf613", 0x33}, {&(0x7f0000000280)="59fe95cfbed46238b36b29982a4135897180d7e3f4b1379471a5be42be9429989ccae31e2b9ca46697f7f03d19fa14cf3c2d9da21f4fa0eb120c33d64f509ba9156ede76adb5b299f6364ea189945687682c5fc7ac1c2995c62a363dbf00d5be8072acc489f498506ebc996533415efe251b1f0c904f3f749dfee308fe9d4e7142c97af1fb2b00501dd07f5ccaa9e7594960804a3832e8c28ce4b5093cc21dc230404d97e4b21780ec058060711410b75a033c07538164d883282db6433a6194b2d294bb1143ff", 0xc7}, {&(0x7f0000000380)="dabe19089a746b67ab4e78eba73aa2cdd43534f1c2fced6df2b4000e144e140412f3b56544e4bbb919ef9bfbd4b7559dee3e8b1038280fa5b1fb4a170d2eedefe6c43dfdf2af7836b571e47d7c4e3be53118f1a4e8a72f88c81def806c47f58a39574c2d7821d5", 0x67}, {&(0x7f0000000400)="d6", 0x1}, {&(0x7f0000000440)="1e0e93607ee93aa9e852e9fe5da016aa3d2bcf263962566c5c80302aa57a601188dbecdd4ec0d938ffd70bc61a65244fbf075f8a408a912f5d29fe9d7e22995b2c7b19305cee2b60799206a345297fb02e51bb357f07ae3349cb1829454b15352daae2496bfa2deda9baeee1ae2c01a1828ffd5ba6e61cb0f04d166df8e57690efa5b264147d83255dc9da42a1f016978244f4344a5f170794985a1af6abf0682f2925bf98a876a1267fb6e4a5af129e3f4e08c0c90040036b8796e99419454d7ea15d74ba15c7ab64bf5fff47494731d546c2982bf0c563806c1ca128a94e8846", 0xe1}], 0x8, &(0x7f0000000680)=[@dstaddrv4={0x10, 0x84, 0x7, @broadcast}, @sndrcv={0x2c, 0x84, 0x1, {0x1, 0x6, 0x8008, 0x9, 0x9, 0x9, 0x9, 0x0, r2}}, @dstaddrv6={0x1c, 0x84, 0x8, @mcast2}, @init={0x14, 0x84, 0x0, {0xe407, 0x1f, 0x2, 0x2b5e}}, @dstaddrv6={0x1c, 0x84, 0x8, @empty}, @dstaddrv4={0x10, 0x84, 0x7, @broadcast}, @sndinfo={0x1c, 0x84, 0x2, {0xffc1, 0x1, 0x2, 0x7, r3}}], 0xb4, 0x20008044}, 0x44801) r4 = openat$audio(0xffffff9c, &(0x7f0000000780)='/dev/audio\x00', 0x80000, 0x0) ftruncate(r4, 0x3f) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0x4}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x4, 0x6, 0x8, 0x80000000, 0x20, 0x4, 0x5}, 0x9c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000900)={r4, 0x33, 0x3, 0x6}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000940)={0x0}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000009c0)={0x1, 0x8, 0x8, 0x80000001, 0x9, 0x5, 0x0, 0x8000, r7}, 0x20) r8 = openat$cachefiles(0xffffff9c, &(0x7f0000000a00)='/dev/cachefiles\x00', 0x20082, 0x0) ioctl$CHAR_RAW_ROGET(r8, 0x125e, &(0x7f0000000a40)) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9d) dup2(0xffffffffffffffff, r9) getresuid(&(0x7f0000000a80), &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000e00)={{0x1, r10, r11, 0x0, 0x0, 0x1, 0x3f}, 0x5, 0x6, 0x40000000, 0x400, 0x0, 0x0, 0x9dc}) 23:36:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x3d}}], 0x8000000000000ba, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3366199", @ANYRES16=0x0, @ANYBLOB="050600000000000000000400000014000180060001000a0000000800050002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x0, 0x605, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x28}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) nanosleep(&(0x7f00000002c0)={r4, r5+10000000}, &(0x7f0000000580)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x300, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r7, @ANYBLOB="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"], 0x88}}, 0x24046004) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/236, 0x20000103) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x6, @local}, 0x6c, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'macvlan1\x00'}) 23:36:06 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x3f, 0x4}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:36:07 executing program 2: socketpair(0x1e, 0x80005, 0x0, &(0x7f00000000c0)={0x0, 0x0}) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "829adb33ffffff7f00000000d30001f2bf9ecb12"}, 0x15, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/185, 0xb9}], 0x1, &(0x7f0000000380)=""/6, 0x6}, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)="8e", 0x1}], 0x1}, 0x0) close(r1) [ 262.946868][ T9635] IPVS: ftp: loaded support on port[0] = 21 23:36:07 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x3f, 0x4}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 263.580204][ T9635] chnl_net:caif_netlink_parms(): no params data found [ 263.951184][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.958662][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.968298][ T9635] device bridge_slave_0 entered promiscuous mode 23:36:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x240007fd}, 0x10) write(r1, &(0x7f00000000c0)="1800000016009b8a14e5f407000000000a640bda75000000", 0x18) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xe) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r7, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r7, 0x100, 0x70bd2b, 0x3, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c000}, 0x800) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000280)=""/241) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0x477, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, {0xa, 0x4e23, 0x0, @mcast1, 0x1000}, 0x4, [0x1, 0xc0, 0x81, 0x81, 0x1f, 0x200, 0x391c, 0xffff0000]}, 0x5c) 23:36:08 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000280)=""/198, 0xc6}], 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffb) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x1f, 0x0, 0x2, "336165083d4d01b55feb40597c86421c202618dfb4f51eaa66db85e138ac4329", 0x32314742}) r3 = gettid() tkill(r3, 0x1000000000016) r4 = getpgid(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/604], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0xb, [], 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x9}, 0x10}, 0x74) bpf$PROG_LOAD(0x5, &(0x7f000000ad00)={0x0, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f000000ac80)={0xa, 0x4}, 0x8, 0x10, &(0x7f000000acc0)={0x0, 0x0, 0x8, 0x7fff}, 0x10, r5, r6}, 0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xffffb805, r5}, 0x8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r5, 0x4) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r7, &(0x7f0000000380)={r2, r1, 0x465}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r1, 0x0, r8, 0x0, 0x4ffe2, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0245629, &(0x7f0000000100)={0x0, 0x1, 0x12143db0, [], &(0x7f00000000c0)=0x2}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1, 0x62ca9215) [ 264.115111][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.122688][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.132645][ T9635] device bridge_slave_1 entered promiscuous mode [ 264.563794][ T9635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.591677][ T9635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 23:36:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) prctl$PR_SET_ENDIAN(0x14, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400210100000002000000610696aede0c626e0be4b20000000000", @ANYRES32=r2, @ANYBLOB="1400020003000000000000000000000000000001"], 0x2c}}, 0x0) 23:36:08 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendfile64(r1, r2, &(0x7f0000000000)=0x10001, 0x486d) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ff0769", 0x5, 0x2f, 0x0, @private2, @local, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) [ 264.772996][ T9635] team0: Port device team_slave_0 added [ 264.809994][ T9635] team0: Port device team_slave_1 added [ 264.950708][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.957772][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.984306][ T9635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 23:36:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x6c}}, 0x0) [ 265.145211][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.152539][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.178760][ T9635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 23:36:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x817}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) [ 265.525959][ T9635] device hsr_slave_0 entered promiscuous mode [ 265.587868][ T9635] device hsr_slave_1 entered promiscuous mode [ 265.638815][ T9635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.646449][ T9635] Cannot create hsr debugfs directory 23:36:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x91) [ 265.947816][ T9860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.002252][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.081848][ T9860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.114114][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.466408][ T9635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.541159][ T9635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.610836][ T9635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.670711][ T9635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.990259][ T9635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.050289][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.059817][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.085577][ T9635] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.113100][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.123331][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.132741][ T9299] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.140111][ T9299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.162070][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.184950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.194287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.203587][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.210974][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.302883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.313785][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.324612][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.335409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.345753][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.356232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.366647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.376322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.385954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.395619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.414931][ T9635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.467385][ T9635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.547889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.558998][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.566811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.574751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.584820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.616065][ T9635] device veth0_vlan entered promiscuous mode [ 267.643381][ T9635] device veth1_vlan entered promiscuous mode [ 267.699358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.709125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.719631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.729603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.739081][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.749095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.762231][ T9635] device veth0_macvtap entered promiscuous mode [ 267.779296][ T9635] device veth1_macvtap entered promiscuous mode [ 267.850492][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.861511][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.871566][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.882192][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.892247][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.902915][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.916886][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.936224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.945498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.954917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.964894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.974392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.984413][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.013045][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.025031][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.035100][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.045735][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.055802][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.066388][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.080217][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.098859][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.109776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:36:13 executing program 3: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6800f9ff0f00010400"/20, @ANYRESHEX=r4, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="61020000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) 23:36:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x101041) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x120, 0xa, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_COMMENT={0xb, 0x1a, '\t%-&\xab[\x00'}, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'basic\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={[], 0xf}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x37}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc0}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_COMMENT={0xf, 0x1a, '/dev/vcsa#\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r2, 0x29, 0x20, 0x7, 0x1, 0x0, @mcast1, @dev={0xfe, 0x80, [], 0x27}, 0x40, 0x700, 0xff, 0x401}}) r4 = socket(0xa, 0x800, 0x9) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000400)={'vlan1\x00', 0x7, 0xffffffff}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000001640)={&(0x7f0000001540), 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x44, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x400a0c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000fc000100109f74f99c3995f9e144e9406fd219473e000000000000000000000a2003000000e1ffffff002d689b456fbb8846680308a37d000000000000080000000900010073797a300000000001000000000000000008665bf8c65b821b0011ffc960f36f062bf214dfb44d2109ebd23d11045851c7f91f5322d030f52b08a44354f047739c9fa6fa6d29c09710e147a332d4869e0822b1fb77ea85c36cfe3e23c81cad334b9890ca185c35d983f716d37c7912ac339fa1aacb3049bf84ffa6bb"], 0x48}}, 0x0) 23:36:13 executing program 0: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b4f0a", 0xc, 0xfffffffffffffffe) readlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000001c0)="52921ab20df7643df287de4b76a1399b054ab15972c48ad01ddac3d41f0139bb37812fa101224de49a46fd7177ebf0f546f66c4a918f03a1181388ea782f0eb5f4462ddf699e385b9642ea8d67abb1952fa886a2801ea3f8b9b5207fec7b197d0bf2e4cac7fd3f131106fc3440b885f1a1c639b845ed827d2f39bd4c157e8a7e553ee29724424a24aba34698554ecf862573e7c01a922538a16bbe7cde4238143c2d0c4e06359cd7731588887cd8b8694114f48c7cd1c1600de02e9b9e8e3c237bc8e13f5ef0f60157566c269149ef65dc", 0xd1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0) [ 269.268951][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:36:13 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000001, 0x101000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) clone3(&(0x7f0000000040)={0xa80b4100, 0x0, 0x0, 0x0, {0x100010}, 0x0, 0xffffffffffffff32, &(0x7f0000000180)=""/4096, 0x0, 0xfffffffffffffe36}, 0x58) 23:36:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x68, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 269.863331][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.953014][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 23:36:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800bec010067656e650a0000000000e29fcae3d52530cd50a4a40edb0098aa06429cfdb6008725db84cb14dd2939c0bd27dbfbcf90baeb663c04c9f0ed049973c9115f522116d379c3242f098b6b273ab2371c5f99c1b61ec2286baa3189bc703641c112d3fde884922659"], 0x3c}}, 0x0) [ 270.275306][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:36:22 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x3, 0x2) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000002c0)={'macvtap0\x00', 0x140100, 0x8}) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00005287422778512766be0a9601148070330e"], 0x2) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x20040822) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_settings={0x3f, 0x4, @fr_pvc=&(0x7f00000007c0)={0x5}}}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) r4 = socket$inet6(0x10, 0x3, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000500)=""/215) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00'}) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000600)='virt_wifi0\x00') 23:36:22 executing program 1: ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = dup2(r0, 0xffffffffffffffff) write$vhci(r3, &(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0x2, 0x2, 0x9, 0x21}, @l2cap_cid_signaling={{0x1d}, [@l2cap_move_chan_cfm={{0x10, 0xff, 0x4}, {0x3, 0x7}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x9, 0x4, 0x9, 0x7fff}}, @l2cap_create_chan_req={{0xc, 0xe5, 0x5}, {0x3f, 0x2e, 0x1}}]}}, 0x26) r4 = socket(0x840000000002, 0x3, 0xff) socket$l2tp6(0xa, 0x2, 0x73) r5 = eventfd(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RXATTRCREATE(r6, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000065c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="9b7f8cfb8d2fc3690a04dccc95f492737a3b2f78", 0x14}], 0x1}}], 0x1, 0x0) 23:36:22 executing program 0: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) syz_mount_image$bfs(&(0x7f00000001c0)='bfs\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="0f3b17f206e36a5c969db7abb1f60c5fd0ba915115e8c49cac98b17a5f86420685a8905c3dd51a5b7e25a2f41e498cc8273bf54c36f9b98ea711b282a9315b3a5c745e84b6fb3483136a4094f817d553eba72c0df031d4f7730308fc561759bdd9214af443c627985d9e04c0c3c14f5ded6d26e379d0fae188e7cbd73317544ca5cf45f8e8f39e8792d9c64fa0cc71cc8a1dc837429b7bee68f44b295bc2beb5b345f037c0b57c78dd8c2c838edab22de56fc0df0eb51ef51da395a68fccebf0ef6f18f32fd7eba7fb6ed39c2561c30f9e49bbbcda7a2f73c6b218ed70309f76d62bdb28e1cbb1b9a8c581f71b802edc97747534b802aa93a4", 0xf9, 0xfffffffa}, {&(0x7f0000000340)="bb57aabba41384471dbd338a6b81489aa35b3443ef4911cbdb762e73d6185644695bad12bd43a5253e726b9689daef007e4af617caf87da306dd6f2728af0508d73db5d7e1044f1d3513ad88eee2a1da7fa226c171432dde", 0x58, 0x20}, {&(0x7f00000003c0)="8b3029fb1dd1f2609476c293b96b40ce52d4c1ab131f4a281103dfd9dbaac302539cab046fcdb9b592bb9d997b8c810feceb7deee671b43cdea3df7a9ac2ffbffb36f4e33bd14dbd2c03dcfb5bb8f972db81f0213230dea0e9759ff0b5e867e91024ce3b2fb7487f49c5f9b5284cc36458a70f26ae8dcb4cdc4a2dec43259cd586c01c6bed5d26d6218b7416e7de80c90866d9b5665bd1837be018fb6b", 0x9d, 0x8000}, {&(0x7f0000000600)="e231d596b39fb5a26a9d25bd67678264c2c38bda48aa39a12bd1199d237193d7189565bacab8e7fe2c2e5e00a85de870e9bdfaafa2fa333d757f979205e6a063e0e6f8eeb021fe69e94cb06b1430b22b1d4f65fdb7d860b8668c2188d1d4cc72e8e4a5dc9443260b51893cccb47e39d43a2e14bbd8e5325e4342156916b6dd00586bf1", 0x83, 0x4}], 0x9000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000540)={0x3, 0xffffffffffffffff, 0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) tee(r1, r2, 0x5, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) accept4(r3, &(0x7f00000006c0)=@un=@abs, &(0x7f0000000200)=0x80, 0x100800) write$P9_RATTACH(r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$pppoe(0x18, 0x1, 0x0) fstat(r5, &(0x7f0000000480)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000314000125bd7000fcdbdf250900020073797a3000000000080041007369770014003300626174616476300000000000000000000900020073797a31000000000100410073697700140033006d6163766c616e310000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x850) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000580)=0x8) 23:36:22 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x74d1, 0x2) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000140)="116c21a09fa5f6deee70b0a23c702942491ead54d73f4113f204178097d1c5e6ad35effa69afd8361d9bc99c5dcec61e97449d24470fb7f5f5e1c4b50c7786876af3fc67004a0ca6e3d1875e730c065d647cdf0507563c069d19af27618ba8747db7f168a6e7ca065372b0b17e5d43ab6e508d2ffdbeb093c230f677c44c8fb48a96bc82881d6486d826087abd45ca80c5f20910da9f34c0fcf478d2a1e10c86282c1b0163193fc18a06d9380917054a993f24eae69e58c178690e4dd3cee3d59b629dba303f664fe9c5c9443c6df02c59", 0xd1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x7fffffff}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe2, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0, @ANYRESDEC=r5, @ANYRES32=r7, @ANYRES64, @ANYRESOCT], 0xfffffecc) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001c0000000000", 0x24) 23:36:22 executing program 4: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200202, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x4, 0x1800010, 0x1, 0x5, 0x80}}, 0x50) r1 = openat$vcs(0xffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r2}}, 0xc) fchdir(r1) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000200)) ppoll(&(0x7f0000000240)=[{r3, 0x6410}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x7fffffff, 0x1]}, 0x8) r4 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0185649, &(0x7f00000003c0)={0x9d0000, 0x1ff, 0x0, r1, 0x0, &(0x7f0000000380)={0x9909c9, 0xfffffffe, [], @p_u32=&(0x7f0000000340)}}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000400)='wg0\x00', 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x2f, 0x7f, 0xff, 0x5, 0x14, @mcast1, @mcast1, 0x10, 0x7, 0x9, 0x800}}) connect$packet(r0, &(0x7f0000000500)={0x11, 0x8, r6, 0x1, 0x1, 0x6, @multicast}, 0x14) r7 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x51a, 0x509203) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000580)={0x4}, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTLCK(r8, 0x80045439, &(0x7f00000005c0)) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000600)={'broute\x00'}, &(0x7f0000000680)=0x50) 23:36:22 executing program 1: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) exit(0x0) [ 278.300967][ T9979] IPVS: ftp: loaded support on port[0] = 21 23:36:22 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x2004, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x50) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) [ 278.716412][ T9999] IPVS: ftp: loaded support on port[0] = 21 23:36:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe2, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x11, 0x2, 0x8, 0x5, 0x1f}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 23:36:23 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x2) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={'macvtap0\x00', 0x140000, 0x8}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="0000da35a324f8c3ae65302e363954670011fb80d69a99ecf71377fd5ba374b1aa57092d9f00f9ce5a831169cff67471133ad92cfa3018123c9741255109fae8f170c7d7f81452905e6e61d104b4dbf9a9cfb22cb775039bd23871cd5a50a22d64ddc58a468b0067aa48f753f0e97c7a97bc34787b086740dc354e88c77e97675c7c80c68266983ee3131ad987fbe308abb5f107973d001525d31752f96a23b60000"], 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x8000) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x2c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x890) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c8b9f91b5640bb648cf07f95958e91f49ce4d85ff86dba0fd2267e9b2fc5934ba313a9ed8005ee9245942c13705791d9d0ab96a8d775162ad0b59071db02c74d1d2a2e01de956839e8c4a8dc11886da42206da787c7226a6b68074a00d2ffd07f4c4c67a03db4955a8dbfc31f34e3943840b6ecc560fb03f6cbe9fc812501c538cdb8023d4763205f3760fd3e0919f2b81b151a210bf5d7e860371f46cad56544ff09e00751cd50a45d14ffa0fdbc81a9c0f888eea6ab8c1011d5d49e416fad62d5e4dc8d0599fdad00d5957c050a6a5787fe6e80da07ee13d163f35e7276cc6db400003afc3a1048671ba9b64993a48742fc568f026db11c022fdc4bd19d0bb44d304700743030901a6df2f4d2fb2de13767f54f740b3821eb5bed92c5af62f14f0ac6a96adce65d169c63c24d17677324d38ae773f2d814fb520028c88f6d9d9abf7cc93058c58f68b9454b6cb40816acfd3bb9d9fe5125c6a67afd749fcf45cfa27fa384aea76ee1a1c8001dc2436008cbe9c1e4728b3e66cc29baf77c2945b07ce055f54f410a7515aa3315a23aa17cb9f8608051493f714e9700004ffbd9b0140f20a00b80915351b521843d7ba8ea2c1f5b5c911ba6661c155cc9fdc332720830b1b4f8737216b0d8e3e329ddb9366d6093c53290eb48983b81f785522bde7a34613c8aa7605880c176cbef72ca751dc7a8b232d664a7ce7774c4e91ea188109d145d5aa5f29a1c48885b685342d79dc45109b416c88a07a7ec2ff7cdc9e88d94bddfb657f46263190ecd8c914ffa30f0ac04d688f65a40b4767b365eb99e3902fc7c394304563ec14f28e0765fa4b3cbf93f"], 0x1}}, 0x20040822) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_mtu=0xfffffc01}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000600)='virt_wifi0\x00') [ 279.220251][T10039] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 279.269648][T10039] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.294751][T10039] device veth3 entered promiscuous mode [ 279.379532][T10042] IPVS: ftp: loaded support on port[0] = 21 23:36:23 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000, 0x0, &(0x7f0000000000), 0x22004e4, &(0x7f00000000c0)=ANY=[@ANYRES16]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) 23:36:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800bc97bac6fa0000103100"/25, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xda7}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000340)={@any, 0x7, 0xef38, 0x200, 0x8000, 0x9821, "8516f077c2e3155547c34cbe7b8be6b726e3a6ea9b1ae8b1d55a153349607f934d2d321d665e8a4657c082c114d210054ac0ccbe808091c4b613c88c28fa6cb0d555a2c88b3d5470c86f4e071e1b1946e35f528179166075877dd0b66320700d1ff5668747153de7186349fc50b6f472ffaf2c9065cce5edcaad52ca144e7ca0"}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = openat(r6, &(0x7f0000000000)='./file0\x00', 0xd2000, 0x44) write$uinput_user_dev(r7, &(0x7f0000000780)={'syz1\x00', {0x6, 0x3, 0x9, 0x2}, 0x4b, [0x4, 0x100, 0x8000, 0xffffffc1, 0x5, 0x9, 0x2, 0x2, 0x5, 0x8, 0xfffffff9, 0xfffff801, 0x5, 0x6803, 0x6, 0x8, 0xffffffc1, 0x6, 0x2, 0x7fffffff, 0x101, 0x5, 0x4, 0x0, 0x0, 0x0, 0x9, 0x9, 0x4, 0x5, 0x9, 0x1, 0x3, 0xffffffff, 0x960, 0x8, 0x20, 0x40, 0x3f, 0x4, 0x1, 0x5c3, 0x10000, 0x7f, 0x4a, 0x7, 0x1, 0x4, 0x7, 0x2, 0x4800000, 0x2, 0x1, 0x80, 0x3, 0x6, 0xffffff1e, 0x6, 0x2, 0xaa, 0x401, 0xc3, 0x4, 0x7], [0x1bd, 0x3683, 0x30a4, 0xe6d8, 0x7, 0x4, 0x1, 0x4, 0x0, 0x6, 0x8, 0x80000000, 0x5, 0x1fc0, 0x9e80, 0x8, 0x5, 0x3, 0xffffffff, 0x7fff, 0x7eeb, 0x4, 0x6, 0x5, 0xc76, 0x98, 0xfffffffc, 0x95, 0x2a1a, 0x3, 0x6, 0xf9, 0x401, 0x5, 0x7, 0x80000000, 0x8, 0x1ff, 0x8, 0xfc000, 0x6, 0x4, 0x3, 0x7ff, 0x0, 0x1f, 0x96, 0x1, 0x20, 0x4, 0x1, 0x9, 0x8989f7b, 0x2, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x20, 0x3ff, 0x3f, 0xfff, 0x77], [0x3, 0x479247fb, 0x6, 0x1000, 0x3, 0x6, 0x101, 0x800, 0x5, 0xffffffff, 0x5, 0x0, 0x8, 0x80000001, 0x0, 0x1, 0x40, 0x6, 0x7383, 0x3ff, 0x9, 0x101, 0x6b, 0xfffff800, 0x8, 0x45, 0x2, 0x4, 0x40, 0x5, 0x3, 0x7f40, 0x6, 0xc7d8, 0x1, 0x7, 0xa5f7, 0x7, 0x20, 0x8000, 0x101, 0x101, 0x8a, 0x3, 0x6, 0x4, 0x1f, 0x2381d35, 0x10000, 0x5, 0x6, 0x7, 0xffff, 0x9, 0x7, 0xfff, 0x101, 0x401, 0x4, 0x8f30, 0x9b7, 0x0, 0x7, 0x6], [0xfffffc00, 0x8, 0x6, 0x401, 0x7, 0x9, 0x7fff, 0xffffff25, 0x6, 0x16, 0x2, 0x101, 0x8, 0x2, 0x9b6a, 0x0, 0x7, 0x8, 0x200, 0xffff, 0x3, 0x3, 0x0, 0xee74, 0x7f, 0x1, 0x0, 0x3, 0x5, 0x8, 0x1ff, 0x8f, 0xa982, 0x3, 0x1, 0xc52, 0x10001, 0x7, 0xfff, 0x20, 0x8a54, 0xfffff000, 0x10000, 0x0, 0x2, 0x1ca, 0x1, 0x58db, 0x3, 0x13, 0x6, 0x6, 0x7, 0xd5, 0x7, 0x74ed, 0x2, 0x8, 0x9, 0x1, 0x4, 0x8, 0x9, 0x6]}, 0x45c) [ 280.093639][T10055] IPVS: ftp: loaded support on port[0] = 21 [ 280.134607][T10039] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 280.178850][T10039] device bond1 entered promiscuous mode [ 280.185076][T10076] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.210528][T10076] device veth3 entered promiscuous mode [ 280.245901][T10076] bond1: (slave veth3): making interface the new active one [ 280.255358][T10076] bond1: (slave veth3): Enslaving as an active interface with an up link [ 280.313565][T10049] IPVS: ftp: loaded support on port[0] = 21 23:36:24 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="02010f0020000a000000ff45ac00000000006300e931190000000000000680ffffff81000000e100e2ff8777007200300700050000000000003a008000da55aa", 0x40, 0x1c0}, {&(0x7f00000003c0)="a38ce900d8249b01f1a9ef69e636b365fcb15c4d20661fed4f9f024c80677c382c6f04501f40001a3a420fa73cb1b084360ec58aa38d49f481d8b9853d6873eb51e18967e3d29395f45e2f318363cbb7eb9005c213d0880ae02e3d280dfb4ae6f322d9bd3241dd6146055a90bebc770f0f8a69138374cc630f8f8eddd7df913d71eef2a7e969237bc644c944dcd970370e128f2b7145e682269358375b3291f5818fb294564f4ee0ff97bd280273f54f2e5ab19c5652f022b37dc54f60abf8aa53ec0beeb14ecd049aca9694d55b6b1d7e2a3e5c63fbd9f6a228bb164d0aaed5e43abcf5567857b28077e2251a64fb4e057e147e86a09e3aea1b26680f107329379e76f97da9da009bc683cfcc9e3ab1d90dece684d0e4b9a68518beebbfa68af7444a28cbce1ca112bc12897c39c7f99907edf940a43762e5d14bf0e2a93054c192af272e5115f6c0a8c07e1c66151f9f7c5dbbfd31f5d0b8f3d3d43580afc7172b0623f39c8312ed0feba7b169c409e5a0468aff2ea3dca433795668b0603c2870bbd74db40c69db9c70387ec4e779d9d24b6f0dde72bd301984301ceae29e2bd57297ca3722accb3618209c7e9f9bd41d8fc5aa118d3f221a", 0x1ba, 0x5}]) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x1, 0x4, 0x17, 0x4, "8a343fdc7ef3d0e841c1622430f87bca53f7aa1792a06fa759ffceebb14c85ae6cadcfebf1e7bde109e2369b8f6490abf43c4ad4f477b9edf710e9060b2bfb5d", "9eff56bcb358c055b580dffa793115cb19e506f5d3a099b565549a328d20051a", [0xbc, 0x7]}) [ 280.904728][T10172] loop3: [ 280.907978][T10172] loop3: partition table partially beyond EOD, truncated [ 281.115135][T10172] loop3: [ 281.118490][T10172] loop3: partition table partially beyond EOD, truncated [ 281.171935][T10049] chnl_net:caif_netlink_parms(): no params data found 23:36:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_NAT_SRC={0x4, 0x19}, @CTA_MARK={0x8, 0x12}]}, 0x20}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x200000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xe8, r3, 0x1707, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xd4}]}, 0xe8}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x37c, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x84}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa715}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x422}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfb17}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5aa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA={0x12c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc9456de}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e8f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce49}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ffc0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc6e}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x6000001}, 0x40004000) 23:36:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000100)=0x7) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{r4, r5+60000000}}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x2000000) r6 = openat$hwrng(0xffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x2e2000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r9, 0x4, 0x2, 0x1f, 0x1, 0x10, @ipv4={[], [], @loopback}, @loopback, 0x8, 0x1, 0x4, 0x6}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) [ 281.452545][T10272] netlink: 'syz-executor.1': attribute type 18 has an invalid length. 23:36:25 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50f0000003000000"], 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x1000) [ 281.574708][T10277] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.694209][T10049] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.701589][T10286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 281.701616][T10049] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.703667][T10049] device bridge_slave_0 entered promiscuous mode [ 281.801410][T10286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:36:26 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)=[{0x1008, 0x0, 0x0, "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"}, {0x48, 0x0, 0x0, "f820fd0180001d82f56c4e92d3588d26596a5dc87253703b17c5ca986719cfe1980915dbe5f66aa4c6348f438882b4e55307a3663ef1fa5f67"}, {0x20, 0x0, 0x0, "b18d7bec8d7177d2e2d9667e772434640f"}, {0x58, 0x0, 0x0, "b2a144dabf84df0a611c213525d8c68f41a310aaf378c0a379528d516f8e786c1d70c8be4ddbf6a7a13da5aed786e5778350bf179836152b27caceb3e1344fc2668b62b588f6d9a1b9"}, {0x100, 0x0, 0x0, "79515282732645287efa1f70323958eb4753934b4cbb93fae63eef6431fd2ae6e76746496ed272b49b073553d810df0cd14987c86a1337a30479ccfcb5601ee8f0f9d8174da4151d1b98d88e27d270d2f9056a40590ebd92ff0b0d300c2e4293e21052a206e1117c9fb4b4b0510c8eb8c3af9a2559581c95e7c40f2899b9a5492428c821ee935b447dd7e4cd26db1ef60936d9b328ecee3bc4a8a539b1770a5353a15610dec80e705301bab8021339e88aadf4241a23f6c555a3e3eb724c7f97b9e892448b69761e5283f39da4797a97844bff51cef7bbf21cbd25d42d5c8b0307920b19596f6920a75d7fe946eecc4a4d"}, {0x40, 0x0, 0x0, "5b8dbf8f0c8f9608aae21dec1bc030c8bff5f07645d516765bc7fc146c8cf54743fa8a8e4acdd8783e1ab9af33c02d3218"}, {0xdc8, 0x0, 0x0, "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"}], 0x1fd0}}], 0x2, 0x0) [ 281.963537][T10049] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.971253][T10049] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.981300][T10049] device bridge_slave_1 entered promiscuous mode [ 282.260506][T10049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.340350][T10049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.537051][T10049] team0: Port device team_slave_0 added [ 282.577201][T10049] team0: Port device team_slave_1 added [ 282.750874][T10049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.758053][T10049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.786009][T10049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.915279][T10049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.922723][T10049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.948820][T10049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.076533][T10049] device hsr_slave_0 entered promiscuous mode [ 283.139468][T10049] device hsr_slave_1 entered promiscuous mode [ 283.208956][T10049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.216584][T10049] Cannot create hsr debugfs directory [ 283.580512][T10049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.629698][T10049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.695778][T10049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.776737][T10049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.109236][T10049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.146709][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.156290][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.181537][T10049] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.207362][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.217381][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.227877][ T9299] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.235178][ T9299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.254114][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.267825][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.278229][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.287530][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.294881][ T9015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.352995][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.364363][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.375473][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.385840][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.396445][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.407055][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.417596][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.427538][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.437458][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.447348][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.465984][T10049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.516669][T10049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.533735][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.544769][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.552732][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.714290][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.724800][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.783578][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.793736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.815528][T10049] device veth0_vlan entered promiscuous mode [ 284.829918][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.839403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.865005][T10049] device veth1_vlan entered promiscuous mode [ 284.934974][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.945132][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 284.955551][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.965779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.989564][T10049] device veth0_macvtap entered promiscuous mode [ 285.015619][T10049] device veth1_macvtap entered promiscuous mode [ 285.064132][T10049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 285.075194][T10049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.085288][T10049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 285.095909][T10049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.105959][T10049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 285.116573][T10049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.126666][T10049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 285.138140][T10049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.152403][T10049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.162080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.172005][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.181913][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.192069][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.249187][T10049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 285.259856][T10049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.269923][T10049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 285.280493][T10049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.290548][T10049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 285.301181][T10049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.311342][T10049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 285.322059][T10049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.336219][T10049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.349260][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.359397][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:36:30 executing program 4: 23:36:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r11], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x42b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) 23:36:30 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x88, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400a00, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0185649, &(0x7f0000000240)={0x9e0000, 0x4, 0x5, r6, 0x0, &(0x7f0000000200)={0x990af5, 0x80000001, [], @p_u32=&(0x7f00000001c0)=0x4}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={r5, 0x0, r7, 0x654, 0x80000}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001300)={r4}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r4, 0x2, 0x4692}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r8, 0x40}, 0x8) 23:36:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x274, 0x94, 0x94, 0x94, 0x0, 0x0, 0x1bc, 0x1e0, 0x1e0, 0x1e0, 0x1bc, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x94}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@rand_addr, @local, 0x0, 0x0, '\x00', 'vlan0\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2d0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000100)) close(0xffffffffffffffff) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='obj_type=&,obj_type=veth1_to_team\x00,appraise_type=imasig,appraise,euid<', @ANYRESDEC=r5, @ANYBLOB="2c66736d616769633d3078303030303030303030303030303366662c736d61636b66e542171a6e41251949f204"]) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20008800) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000040)={0x8, 'xfrm0\x00', {'veth1_to_team\x00'}, 0x2}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x2, [0x49, 0x0]}, &(0x7f0000000400)=0x8) 23:36:30 executing program 5: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20c0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) r1 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x80, 0x9, 0x400, {{0x8, 0x4, 0x0, 0x2, 0x20, 0x80, 0x0, 0x1f, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@generic={0x88, 0xa, "188bfb420ea0847a"}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40841}, 0x80) r4 = openat$zero(0xffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x20000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x4ddc1585) r5 = openat$mice(0xffffff9c, &(0x7f0000000500)='/dev/input/mice\x00', 0x12041) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x3c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x401}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x401}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x8}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x9ca2}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x7}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x7}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2}}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x20}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x74}}, 0x4000800) r7 = openat$sequencer(0xffffff9c, &(0x7f00000006c0)='/dev/sequencer\x00', 0x240400, 0x0) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000700)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001b80)={0x0, @remote}, &(0x7f0000001bc0)=0xc) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000001c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, r2, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000001cc0)) fstat(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000001d00)='iso9660\x00', &(0x7f0000001d40)='./file1\x00', 0x7f, 0x6, &(0x7f0000003000)=[{&(0x7f0000001d80)="cd7338e93c6fc8e083", 0x9, 0x4}, {&(0x7f0000001dc0)="78377fcead249070fba520cdf53c1a25d6c13d954ca9090d6b392045d254e6e6249f10b8c10e00bc72f2b292d4e2615a1087a366d09ce695", 0x38, 0x9}, {&(0x7f0000001e00)="dc8505d33b78bb578c496862385daa9cbfb05b0dc97eeb6e5c5e6881f3c6d6e2c59e67f6e424836e7f389f15862668af1f4a19c2b727da6cc4959e9a329263f35b4761827ca7dd78349b265a27fcfd14e24c19b721409470b84aa031f79e8079f6436ff2b21c56aa2d578c6f97d4c17e9a9a585ed38eb9d2a99c6188c520f88e7b6ca7ba1588fa41686cae6f112ca71f", 0x90, 0x400}, {&(0x7f0000001ec0)="47b8233cb27d7e03c3eb8471f94682252b6930ae642b0489f2a80c625768e8fbd7b5a0c77086be9b93ce64de98323a5b50245b47238cc8b01d3e49bfd76d70b5f6fadae829b4b9b8c2da9cdc57acbf97a7db3516b8a9a4e7095becb65bf1e6ebf2970ccda950503ddae821c1602722b915da5eb2f68c7c631647a6c146c65ac634a453b1393a637bf530b3e1e258f4c5f3d6758e821b6b9f9bb96f7a5108830d5120b7492b9e", 0xa6, 0x800}, {&(0x7f0000001f80)="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", 0x1000, 0x1000000}, {&(0x7f0000002f80)="0666beaca7bf06a2288a004fd26147b9cd8e31644581ab88950181d7b7f2e3b6ec9d2ef84968df8e73ad00941033c95b72ce8b998254d41ca0ef09d43c814bb2438800d6015d69e10050f9bec5f30e092ed8a3ad136612e4abb94cdf72eee32d332f57728f4c366d", 0x68, 0x1fe00000}], 0x208000, &(0x7f0000003100)={[{@nojoliet='nojoliet'}, {@block={'block'}}, {@dmode={'dmode', 0x3d, 0xad5f}}, {@map_normal='map=normal'}, {@map_normal='map=normal'}, {@map_normal='map=normal'}, {@map_acorn='map=acorn'}, {@map_normal='map=normal'}], [{@obj_user={'obj_user', 0x3d, 'gre0\x00'}}, {@dont_measure='dont_measure'}, {@smackfshat={'smackfshat', 0x3d, ',('}}, {@uid_gt={'uid>', r9}}, {@obj_role={'obj_role', 0x3d, 'gre0\x00'}}]}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000003200)='\x00', &(0x7f0000003240)) linkat(0xffffffffffffffff, &(0x7f0000003280)='./file0\x00', r5, &(0x7f00000032c0)='./file0\x00', 0x1400) 23:36:30 executing program 0: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x204, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x1f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1ea, 0x3, "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"}]}]}, 0x204}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0xe6, &(0x7f0000000080)=0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000001c0)={0xa839, 0x2}) [ 286.004791][T10420] x_tables: duplicate underflow at hook 2 [ 286.096228][T10424] device bridge_slave_0 left promiscuous mode [ 286.103237][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.186737][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.233422][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 23:36:30 executing program 4: 23:36:30 executing program 3: 23:36:30 executing program 4: 23:36:30 executing program 3: 23:36:31 executing program 1: 23:36:31 executing program 2: 23:36:31 executing program 0: 23:36:31 executing program 3: 23:36:31 executing program 4: [ 287.127408][T10445] IPVS: ftp: loaded support on port[0] = 21 23:36:31 executing program 1: [ 287.750083][T10445] chnl_net:caif_netlink_parms(): no params data found [ 287.913256][T10445] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.921652][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.931399][T10445] device bridge_slave_0 entered promiscuous mode [ 287.943254][T10445] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.951523][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.961227][T10445] device bridge_slave_1 entered promiscuous mode [ 288.012683][T10445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.034025][T10445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.084481][T10445] team0: Port device team_slave_0 added [ 288.112506][T10445] team0: Port device team_slave_1 added [ 288.190369][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.197396][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.225380][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.238322][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.245320][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.271811][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.354766][T10445] device hsr_slave_0 entered promiscuous mode [ 288.411581][T10445] device hsr_slave_1 entered promiscuous mode [ 288.468421][T10445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.476016][T10445] Cannot create hsr debugfs directory [ 288.672128][T10445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 288.723150][T10445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.774167][T10445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.832148][T10445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.979525][T10445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.002226][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.010645][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.028918][T10445] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.043960][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.053267][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.062492][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.069846][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.088013][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.096767][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.107255][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.116590][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.123872][ T9015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.140612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.160154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.192555][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.202217][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.212680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.222768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.233202][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.242316][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.254490][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.276181][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.286271][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.302190][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.330616][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.338440][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.356786][T10445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.449523][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.461011][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.504901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.514867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.532611][T10445] device veth0_vlan entered promiscuous mode [ 289.541411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.550965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.570777][T10445] device veth1_vlan entered promiscuous mode [ 289.615245][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.625396][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.635165][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.644658][ T9015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.661020][T10445] device veth0_macvtap entered promiscuous mode [ 289.677665][T10445] device veth1_macvtap entered promiscuous mode [ 289.706308][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.717682][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.727902][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.738544][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.748609][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.759209][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.769275][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.779875][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.789900][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.800538][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.813873][T10445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.825246][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.834744][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.843801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.853795][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.876249][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.886997][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.897119][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.908024][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.918248][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.929004][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.939064][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.949645][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.959691][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.970244][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.984074][T10445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.993154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.003373][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:36:34 executing program 5: 23:36:34 executing program 2: 23:36:34 executing program 0: 23:36:34 executing program 4: 23:36:34 executing program 3: 23:36:34 executing program 1: 23:36:34 executing program 0: 23:36:34 executing program 1: 23:36:34 executing program 3: 23:36:34 executing program 4: 23:36:34 executing program 2: 23:36:35 executing program 5: 23:36:35 executing program 0: 23:36:35 executing program 3: 23:36:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0xc) 23:36:35 executing program 2: ioperm(0x0, 0x8002, 0x6) shmctl$SHM_LOCK(0x0, 0xb) 23:36:35 executing program 4: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c9992602338753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274a95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725397b77d94dbfd3", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000600)="d7", 0x1, r1) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000500)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r0, r2}, 0x0, 0x0, 0x0) 23:36:35 executing program 5: unshare(0x40600) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1}) 23:36:35 executing program 0: 23:36:35 executing program 3: 23:36:35 executing program 2: dup(0xffffffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80363}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 23:36:35 executing program 1: ioperm(0x0, 0x8002, 0x6) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 23:36:36 executing program 4: ioperm(0x0, 0x8002, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:36:36 executing program 2: ioperm(0x0, 0x8002, 0x6) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) 23:36:36 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c9992602338753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274a95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725397b77d94dbfd3", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="d7", 0x1, r1) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000500)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r0, r2}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={'sha224-ssse3\x00'}}) 23:36:36 executing program 3: unshare(0x40600) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x11, 0x0, &(0x7f0000000140)=0xc) 23:36:36 executing program 5: ioperm(0x0, 0x8002, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8}) 23:36:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:36 executing program 2: socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x1c000000) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208000, &(0x7f0000000380)=ANY=[@ANYBLOB='P']) 23:36:36 executing program 4: ioperm(0x0, 0x8002, 0x6) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x5, 0x0, 0x0, 0x0) 23:36:36 executing program 3: ioperm(0x0, 0x8002, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40) [ 292.617904][T10748] could not allocate digest TFM handle sha224-ssse3 [ 292.708853][T10766] could not allocate digest TFM handle sha224-ssse3 23:36:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) 23:36:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:37 executing program 4: ioperm(0x0, 0x8002, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0xfc, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0xd0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x48, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0xfffffffffffffee7}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{}, {0x8}, {0x8}, {0x8}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}]}, @IFLA_PROTO_DOWN={0x5}]}, 0xfc}}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8}) 23:36:37 executing program 0: unshare(0x40600) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 23:36:37 executing program 3: ioperm(0x0, 0x8002, 0x6) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x242042, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='-%\x00', &(0x7f0000000240)="ed", 0x1) 23:36:37 executing program 4: unshare(0x40600) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x39, 0x0, &(0x7f0000000140)) 23:36:37 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c9992602338753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274a95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725397b77d94dbfd3", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="d7", 0x1, r1) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000500)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r0, r2}, &(0x7f0000000400)=""/241, 0xf1, &(0x7f00000002c0)={&(0x7f0000000140)={'sha3-256-generic\x00'}}) 23:36:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) 23:36:37 executing program 2: ioperm(0x0, 0x8002, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x314, 0xffffffffffffffff, 0x2}, 0x40) 23:36:37 executing program 0: ioperm(0x0, 0x8002, 0x6) prctl$PR_SET_TIMERSLACK(0x21, 0x0) 23:36:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:37 executing program 4: unshare(0x40600) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000140)) 23:36:38 executing program 5: getpid() syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x7fffffff, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001001000001000000ec80000000a025a5906782ace162e1469a4000000000"], 0x18}}], 0x1, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRES64, @ANYBLOB="2c726f6f746d6f64653d30060000003030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="b6186ef884759949c67dddcc7db7baac514b2e8ac7f28be067077f33cf40", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x8011, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 23:36:38 executing program 0: ioperm(0x0, 0x8002, 0x6) prctl$PR_SET_TIMERSLACK(0x10, 0x0) 23:36:38 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:38 executing program 4: ioperm(0x0, 0x8002, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioprio_set$uid(0x3, r1, 0x0) 23:36:38 executing program 2: [ 294.403348][T10826] fuse: Bad value for 'fd' 23:36:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000003b0000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}, 0x14) [ 294.552901][T10831] fuse: Bad value for 'fd' 23:36:38 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) [ 294.896016][T10841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:36:39 executing program 3: ioperm(0x0, 0x8002, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioprio_set$uid(0x2, r1, 0x0) 23:36:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000680)=[{r2}, {r2}, {r3}], 0x3, &(0x7f0000000800)={0x0, 0x3938700}, 0x0, 0x0) 23:36:39 executing program 4: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c9992602338753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274a95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725397b77d94dbfd3", 0xc0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="d7", 0x1, r1) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="1333674441c5fd34f19f981411cef564add5ae11c93bc3dc25bc71b023b0bbfb5267010000005254b8a1", 0x2a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r0, r2}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={'sha224-ssse3\x00'}}) 23:36:39 executing program 5: unshare(0x40600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 23:36:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80363}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 23:36:39 executing program 5: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) clone(0x6f009500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:36:39 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000001c0)={0x7, 'vlan0\x00'}) [ 295.571202][T10858] could not allocate digest TFM handle sha224-ssse3 [ 295.602793][T10872] IPVS: ftp: loaded support on port[0] = 21 23:36:39 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) unshare(0x40600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc020662a, 0x0) 23:36:39 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, ',}(+/('}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'pids.current\x00'}}, {@appraise_type='appraise_type=imasig'}]}) [ 295.680330][T10874] could not allocate digest TFM handle sha224-ssse3 23:36:40 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x2, r1, 0x0) [ 296.015366][T10908] IPVS: ftp: loaded support on port[0] = 21 23:36:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x32}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 296.191507][ T1407] tipc: TX() has been purged, node left! 23:36:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000001c0)={0x7, 'vlan0\x00'}) 23:36:40 executing program 0: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:36:40 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000001c0)=""/66, 0x42}], 0x2, 0x0) 23:36:40 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:40 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf787428", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) 23:36:40 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xffffffe6, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast1}, {0x0, 0x0, 0x0, @loopback, "0ef44cdba07e3289d8ef6bf9a761f8f78e03bda9b4482bd93f92104340e9742ee7bc1dd294a19278d6b2f9ec12682b228bfae254397707c8774e38853ff917c0ab998783ec7c14efd9f61bb08aa4b64ce4b59bde9c0d7159e547b1b5aaddfeeb15b9c44adf5066f4ca026da1521636efd202ca6cc13a3424a63611da56b46e4c9665bd2c093e1a88ea134c76b288edbeef59f407916ad4030f57143ea1119d94ae29f919ae5169a5789b306092b28447739e82933d62abd331bd935b29140894e148eb30cb3849"}}}}}, 0x0) 23:36:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000001c0)={0x7, 'vlan0\x00'}) 23:36:41 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000500)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) 23:36:41 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000001180)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d9c494", 0x44, 0x3c, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x8}}}}}, 0x76) 23:36:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) connect(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @remote, 0x2}, 0x80) 23:36:41 executing program 2: set_mempolicy(0x4001, &(0x7f0000000140)=0x1, 0x9) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:36:41 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1fb842, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 23:36:41 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:41 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10=\x8f\xa2\xc7\x8b\x96|?\x16\xbf\xa1$\xe2\xf4\xa6t#M\xe0l\x0e<\x89\x8df\xa0m\x00\a\xbb\x84\xc2V\xff\xb0j\x06\x00\xba\x1a\xe7@\xab\xe2v\x8a\x97\x88\xd3\xa5\xeePb\x10\xf5\'\xc1\x01\xfew\xdfgCM>\xba\xc6\xe5\xa6\xac\xfa\xed\xdf;') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x1}) 23:36:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@dev, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x2c, 0x0, @dev, @remote, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23:36:42 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c400000004060101ea000000000000f04ee816100500010006"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff99) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x8007fc1, 0x0) 23:36:42 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0) 23:36:42 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lchown(0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x145042, 0x0) write(r1, &(0x7f0000001200)="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", 0xffffffffffffff3e) [ 298.534597][T11006] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. 23:36:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) connect(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @remote, 0x2}, 0x80) 23:36:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000700)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) 23:36:43 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) 23:36:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000280)=@srh={0x3c, 0x8, 0x4, 0x4, 0x0, 0x48, 0x3f, [@dev={0xfe, 0x80, [], 0x20}, @mcast2, @mcast1, @mcast1]}, 0x48) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140), 0x8) r1 = socket$inet6(0xa, 0x4, 0x298) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x2, [{}, {}]}, 0x44) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe80) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr=' \x01\x00', @local, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x401, 0x0, 0x0, 0x400083, r3}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @ipv4={[], [], @multicast1}, @empty, 0x7, 0x5, 0x2, 0x100, 0x0, 0x3f59129000e34b0e, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002900)={@mcast1, @mcast1, @private1, 0x8000, 0x3ff, 0xd9, 0x500, 0x6, 0x46700222, r3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x5c, 0x29, 0xb, {0x0, 0x8, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x5c}, 0x0) 23:36:43 executing program 5: 23:36:43 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:43 executing program 5: 23:36:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000280)=@srh={0x3c, 0x8, 0x4, 0x4, 0x0, 0x48, 0x3f, [@dev={0xfe, 0x80, [], 0x20}, @mcast2, @mcast1, @mcast1]}, 0x48) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140), 0x8) r1 = socket$inet6(0xa, 0x4, 0x298) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x2, [{}, {}]}, 0x44) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe80) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr=' \x01\x00', @local, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x401, 0x0, 0x0, 0x400083, r3}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @ipv4={[], [], @multicast1}, @empty, 0x7, 0x5, 0x2, 0x100, 0x0, 0x3f59129000e34b0e, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002900)={@mcast1, @mcast1, @private1, 0x8000, 0x3ff, 0xd9, 0x500, 0x6, 0x46700222, r3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x5c, 0x29, 0xb, {0x0, 0x8, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x5c}, 0x0) 23:36:43 executing program 0: 23:36:43 executing program 3: 23:36:43 executing program 4: 23:36:43 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:44 executing program 5: 23:36:44 executing program 0: [ 300.139231][ T1407] tipc: TX() has been purged, node left! 23:36:44 executing program 2: 23:36:44 executing program 3: 23:36:44 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:44 executing program 4: 23:36:44 executing program 5: 23:36:44 executing program 0: 23:36:44 executing program 3: 23:36:44 executing program 2: 23:36:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:36:44 executing program 4: 23:36:45 executing program 5: 23:36:45 executing program 0: 23:36:45 executing program 3: 23:36:45 executing program 2: 23:36:45 executing program 4: 23:36:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:36:45 executing program 5: 23:36:45 executing program 0: 23:36:45 executing program 2: 23:36:45 executing program 3: 23:36:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 23:36:45 executing program 4: 23:36:45 executing program 5: 23:36:46 executing program 0: 23:36:46 executing program 2: 23:36:46 executing program 3: 23:36:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23:36:46 executing program 4: 23:36:46 executing program 5: 23:36:46 executing program 0: 23:36:46 executing program 2: 23:36:46 executing program 3: 23:36:46 executing program 4: 23:36:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23:36:46 executing program 5: 23:36:47 executing program 0: 23:36:47 executing program 2: 23:36:47 executing program 3: 23:36:47 executing program 4: 23:36:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23:36:47 executing program 5: 23:36:47 executing program 2: 23:36:47 executing program 3: 23:36:47 executing program 0: 23:36:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:36:47 executing program 4: 23:36:47 executing program 5: 23:36:47 executing program 3: 23:36:48 executing program 2: 23:36:48 executing program 0: 23:36:48 executing program 4: 23:36:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:36:48 executing program 5: 23:36:48 executing program 3: 23:36:48 executing program 2: 23:36:48 executing program 0: 23:36:48 executing program 4: 23:36:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:36:48 executing program 5: 23:36:48 executing program 0: 23:36:48 executing program 3: 23:36:48 executing program 2: 23:36:48 executing program 4: 23:36:49 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000300)='./bus\x00', 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0x0, 0x2}, 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x100000000000}, &(0x7f0000000440)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:36:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 23:36:49 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 23:36:49 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x33, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x400, 0x0, 0x80, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x2, "e30060"}, "ccbfc12abc282c27820fd9118600820e000500110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a) 23:36:49 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) close(r0) 23:36:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 23:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 23:36:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000580)={'syz'}, &(0x7f0000000280)="eb", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r2) 23:36:50 executing program 0: pipe(&(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0x0, 0x2}, 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r1+30000000}, 0x0) 23:36:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:36:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 23:36:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 23:36:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 23:36:51 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000300)='./bus\x00', 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540), 0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x100000000000}, &(0x7f0000000440)={0x0, r3+30000000}, 0x0) 23:36:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x5, @fixed}, 0xe) 23:36:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 23:36:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) 23:36:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:51 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000300)='./bus\x00', 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540), 0x0, &(0x7f0000000200)={0x1ff}, &(0x7f0000000440)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:36:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:36:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x0) 23:36:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x90) 23:36:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x0) 23:36:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 23:36:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:52 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:36:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x0) 23:36:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:53 executing program 0: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x80000000, 0x0) 23:36:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) getpid() symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB], 0x3c}}, 0xc010) getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x521a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:36:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc485, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000100), 0x0, 0xfce}, {0x0, 0x0, 0x112c}, {&(0x7f00000002c0)="4d3b27fcd121e2161f535e18769137bea4330977edf6a5ec44a80dad5d06456e60b23fa319063a05658df3db2864e1ddca6c2359625deb2a5f98f00979b3a6180d96a9eb498ad7fd8ba86df807b24fea8bbca5b953f8a4ef38c0c91644db43004fc2590c691a3c5455737137c826fffe1cb04246b4bff5fe783dd0bafdf82f25afc3b30a751282456f85c70ade04f6504f846e0e36572647c6b4ebb10dffc85d240ee2523c89346c002b780f7a35883a03c276a3731648acd2245761caf73846f0d8c6ce4cafc3c34244745a1f066e115eede50e4446ce9962c09d974cd8b2bddcc57266b838a7a850884b0000000000", 0xf0}]) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt(0xffffffffffffffff, 0x2ae2, 0x7, &(0x7f0000000400)=""/171, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:53 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x80047456, 0x2070e000) 23:36:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a) sendfile(r0, r1, 0x0, 0x20000102000003) 23:36:54 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) accept4(r1, 0x0, 0x0, 0x0) 23:36:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc485, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000100), 0x0, 0xfce}, {&(0x7f0000000040), 0x0, 0x6}, {&(0x7f0000000240)="840ee421f7820dcee46ad0b1309f0ec5af18206c6efc5b176f929b2af1f6c1478117a98a", 0x24, 0x112c}, {&(0x7f00000002c0)="4d3b27fcd121e2161f535e18769137bea4330977edf6a5ec44a80dad5d06456e60b23fa319063a05658df3db2864e1ddca6c2359625deb2a5f98f00979b3a6180d96a9eb498ad7fd8ba86df807b24fea8bbca5b953f8a4ef38c0c91644db43004fc2590c691a3c5455737137c826fffe1cb04246b4bff5fe783dd0bafdf82f25afc3b30a751282456f85c70ade04f6504f846e0e36572647c6b4ebb10dffc85d240ee2523c89346c002b780f7a35883a03c276a3731648acd2245761caf73846f0d8c6ce4cafc3c34244745a1f066e115eede50e4446ce9962c09d974cd8b2bddcc57266b838a7a850884b0000000000", 0xf0, 0x7}]) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x20, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000002030300000000000000000000000000080005400000002008000440000000001000aecbd807e335d388a17bf7aaaeefbf8b48fe0755d5"], 0x24}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000000203030000000800000005000000000008000540000000200800044000000000242dfefe266ab0c5ef8b1a8def30ebc9d9ddb7046aeb77150b3fd7a03bb27a56997ded4aa00e2264c3e01e040f36a39678e2b0200130d8f03b2066b7f4b3fcb5c2082264471592abbf5fc7f282a3b1651710f1cb1e126764d0f87ab53bc10f829bd296b9770dff00"/149], 0x24}}, 0x0) getsockopt(r3, 0x2ae2, 0x7, &(0x7f0000000400)=""/171, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000100)={0x8, {{0xa, 0x4e20, 0x2, @local, 0x9}}}, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) socket(0x10, 0x2, 0x400000) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/105) syz_open_procfs(0x0, 0x0) setxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', 0x0, 0x0, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:36:54 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x80047456, 0x2070e000) [ 310.547079][T11342] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:36:54 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x80047456, 0x2070e000) 23:36:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='\t'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0xffff}}}, 0x24}}, 0x0) 23:36:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/105) syz_open_procfs(0x0, 0x0) setxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', 0x0, 0x0, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:36:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) accept4(r1, 0x0, 0x0, 0x0) 23:36:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0xe0ffff, 0x32, 0xffffffffffffffff, 0x0) 23:36:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/105) syz_open_procfs(0x0, 0x0) setxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', 0x0, 0x0, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0xa4}) 23:36:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc485, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000100), 0x0, 0xfce}, {&(0x7f0000000040), 0x0, 0x6}, {&(0x7f0000000240)="840ee421f7820dcee46ad0b1309f0ec5af18206c6efc5b176f929b2af1f6c1478117a98a462e97997579145dfaa7d7d6f6ad7c16ced0de92f129cf9183032af0b5084b1dce27165d", 0x48, 0x112c}, {&(0x7f00000002c0)="4d3b27fcd121e2161f535e18769137bea4330977edf6a5ec44a80dad5d06456e60b23fa319063a05658df3db2864e1ddca6c2359625deb2a5f98f00979b3a6180d96a9eb498ad7fd8ba86df807b24fea8bbca5b953f8a4ef38c0c91644db43004fc2590c691a3c5455737137c826fffe1cb04246b4bff5fe783dd0bafdf82f25afc3b30a751282456f85c70ade04f6504f846e0e36572647c6b4ebb10dffc85d240ee2523c89346c002b780f7a35883a03c276a3731648acd2245761caf73846f0d8c6ce4cafc3c34244745a1f066e115eede50e4446ce9962c09d974cd8b2bddcc57266b838a7a850884b0000000000", 0xf0, 0x7}]) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x20, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000203030000000000000000000000000008000540000000200800"], 0x24}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000100)={0x8, {{0xa, 0x4e20, 0x2, @local, 0x9}}}, 0x84) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:58 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) accept4(r1, 0x0, 0x0, 0x0) 23:36:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/105) syz_open_procfs(0x0, 0x0) setxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', 0x0, 0x0, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:36:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc485, 0x3, &(0x7f00000003c0)=[{0x0, 0x0, 0x6}, {0x0}, {&(0x7f00000002c0)="4d3b27fcd121e2161f535e18769137bea4330977edf6a5ec44a80dad5d06456e60b23fa319063a05658df3db2864e1ddca6c2359625deb2a5f98f00979b3a6180d96a9eb498ad7fd8ba86df807b24fea8bbca5b953f8a4ef38c0c91644db43004fc2590c691a3c5455737137c826fffe1cb04246b4bff5fe783dd0bafdf82f25afc3b30a751282456f85c70ade04f6504f846e0e36572647c6b4ebb10dffc85d240ee2523c89346c002b780f7a35883a03c276a3731648acd2245761caf73846f0d8c6ce4cafc3c34244745a1f066e115eede50e4446ce9962c0", 0xda, 0x7}]) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:58 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:36:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/105) syz_open_procfs(0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:36:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x9f}) 23:36:59 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:37:01 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='x'], 0x5) r1 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 23:37:01 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:37:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/105) syz_open_procfs(0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:37:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='\t'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:37:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:37:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:37:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/105) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:02 executing program 0: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x0, 0x0, 0x0, 0xf2, 0xc5e, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x21603}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x41) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$zero(0xffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000400)='/dev/vcsu\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) [ 318.477144][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 318.538730][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop 23:37:02 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x0) 23:37:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) [ 318.643298][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 318.669025][T11535] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:37:02 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 318.755530][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 318.772378][T11543] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.832561][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop 23:37:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 318.884669][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 318.963320][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 318.995934][ T32] audit: type=1400 audit(1595288223.071:17): avc: denied { module_load } for pid=11548 comm="syz-executor.2" path="/proc/vmallocinfo" dev="proc" ino=4026532097 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=system permissive=1 [ 319.064717][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop 23:37:03 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:37:03 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) [ 319.130852][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop 23:37:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='\t'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) [ 319.211285][T11525] kvm [11523]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop 23:37:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) [ 319.435052][T11567] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:37:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff9}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000300)) 23:37:03 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:37:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 23:37:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000000140)=0xfffffffffffffff8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/105) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') setxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', 0x0, 0x0, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:37:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) 23:37:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:04 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000180)) 23:37:04 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x3, 0x4, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x19, 0x1f4) 23:37:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x80047456, 0x2070e000) 23:37:04 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:04 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) [ 320.757453][T11625] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:37:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000001100)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0xedc0) 23:37:05 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @private}}}, 0x0, 0x0, 0x32, 0x0, "8c1521569d7e48cf2d812a6739d1a4e240e6d4dc0cfff5625a57bb110178be280839b7f5b85a99fa45bb3b9decf50e306b7841026ae25f7d80107faca1759614b7357c4de694cfc4f86954bde1dfe91e"}, 0xd8) accept4(r0, 0x0, 0x0, 0x0) 23:37:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:05 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) [ 321.082731][T11642] binder: 11641:11642 ioctl c018620c 20000140 returned -1 23:37:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x80047456, 0x2070e000) 23:37:05 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 321.388014][T11662] binder: 11656:11662 ioctl c018620c 20000140 returned -1 23:37:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_int(r1, &(0x7f00000004c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 23:37:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:05 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:05 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x80047456, 0x2070e000) 23:37:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x30) wait4(0x0, 0x0, 0x0, 0x0) [ 321.899363][T11681] new mount options do not match the existing superblock, will be ignored [ 321.914965][T11682] binder: 11678:11682 ioctl c018620c 20000140 returned -1 [ 321.976431][T11681] new mount options do not match the existing superblock, will be ignored 23:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x80047456, 0x2070e000) 23:37:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:06 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f", 0x1}], 0x1) 23:37:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x6612, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$unix(0x1, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8356f10380c690f53a2200", @ANYBLOB="4fe2d5aa255b92fd693506cb6d5f1433940861b110c36652d8a85aea0a3eb9bb4ebbb55d813107eaaf7d48621059cf2ce23706400d249b1f50608ee09f4b13ebc82796084cf1f39b32552381ec4722a2422ecf4c24ec69c4d45c33dd649f06b371f6b6670cc3114dcc7bfbdc090000008bd29d", @ANYBLOB, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="db3042bbbf62755c42cf71297348833cde4adaa27c78459079", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) keyctl$chown(0x4, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x10, 0x0, 0x7}}, 0x14) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000025000511d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x102) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4, 0x80010, r4, 0x8000) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x87) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-neon\x00'}, 0x58) 23:37:06 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000140)) [ 322.501452][T11707] binder: 11703:11707 ioctl c018620c 20000140 returned -1 23:37:06 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:06 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x2000000000000072, &(0x7f0000000080)) 23:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x0) 23:37:06 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000140)) 23:37:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x158, &(0x7f00000003c0)="c4c691019919da070000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b908a971362838350808ffdb2dc4a741357baa16dacdcfac32957d83d8c0b2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a558594f90399513f49d5135aea235b86495999dd604f5f3bcdc9ded4aad49dc3d25b919b831d2c8e6845a8a8c2e95d09954d467317f1ec9f9a84072163cb1544c90bc92b31e0cc668a8243dfa0a42ab126a3b83190da0000000000005297c93ffe51c04bfc75b95167dab035152714679124a124089648f2bfc54f4c03ae1205aaa090226f28f1a00070f05313ba5bf1b05fb112fca120ba103afbbf39d3e433c40c278ec8729700999de474ad618ed7af5da2c0f96ed22c5809e04186d46e6dafaf20"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x2) 23:37:07 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000140)) 23:37:07 executing program 5: 23:37:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x0) 23:37:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:07 executing program 2: 23:37:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047456, 0x0) 23:37:07 executing program 5: 23:37:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:08 executing program 2: [ 323.936461][T11768] binder: 11766:11768 ioctl c018620c 20000140 returned -1 23:37:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:08 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:37:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast1}, {0x48}}}, 0xb8}}, 0x0) 23:37:08 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 23:37:08 executing program 2: 23:37:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 324.473655][T11782] binder: 11780:11782 ioctl c018620c 20000140 returned -1 23:37:08 executing program 5: 23:37:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:08 executing program 4: 23:37:08 executing program 2: 23:37:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 324.980522][T11804] binder: 11803:11804 ioctl c018620c 20000140 returned -1 23:37:09 executing program 5: 23:37:09 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:09 executing program 4: 23:37:09 executing program 2: 23:37:09 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 23:37:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 325.523006][T11820] binder: 11815:11820 ioctl c018620c 20000140 returned -1 23:37:09 executing program 4: 23:37:09 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:09 executing program 5: 23:37:09 executing program 2: 23:37:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:10 executing program 4: [ 325.986772][T11835] binder: 11830:11835 ioctl c018620c 20000140 returned -1 23:37:10 executing program 5: 23:37:10 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:10 executing program 2: 23:37:10 executing program 4: 23:37:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 23:37:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 326.556367][T11853] binder: 11852:11853 ioctl c018620c 20000140 returned -1 23:37:10 executing program 5: 23:37:10 executing program 2: 23:37:10 executing program 4: 23:37:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:11 executing program 5: 23:37:11 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:11 executing program 2: 23:37:11 executing program 4: 23:37:11 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 23:37:11 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 23:37:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) 23:37:11 executing program 5: 23:37:11 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000140)) 23:37:11 executing program 2: 23:37:11 executing program 4: 23:37:11 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000140)) 23:37:12 executing program 5: 23:37:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) 23:37:12 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000140)) 23:37:12 executing program 2: 23:37:12 executing program 4: 23:37:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 23:37:12 executing program 5: 23:37:12 executing program 2: 23:37:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) 23:37:12 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 23:37:12 executing program 4: 23:37:12 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) [ 328.803968][T11931] binder: 11927:11931 ioctl c018620c 0 returned -14 23:37:13 executing program 2: 23:37:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, 0x0) 23:37:13 executing program 4: 23:37:13 executing program 5: 23:37:13 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) [ 329.065247][T11941] binder: 11939:11941 ioctl c018620c 0 returned -14 [ 329.312566][T11950] binder: 11946:11950 ioctl c018620c 0 returned -14 23:37:13 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 23:37:13 executing program 2: 23:37:13 executing program 0: 23:37:13 executing program 5: 23:37:13 executing program 4: 23:37:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, 0x0) 23:37:14 executing program 2: 23:37:14 executing program 5: 23:37:14 executing program 0: 23:37:14 executing program 4: 23:37:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, 0x0) 23:37:14 executing program 2: 23:37:15 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:15 executing program 5: 23:37:15 executing program 4: 23:37:15 executing program 0: 23:37:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:15 executing program 2: 23:37:15 executing program 0: 23:37:15 executing program 4: 23:37:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:15 executing program 2: 23:37:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 23:37:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7c) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @empty=0xfdffffff}, @l2tp={0x2, 0x0, @dev}, @nl=@unspec, 0xfe}) 23:37:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="f5", 0x1}], 0x1, &(0x7f0000000380)=[@init={0x14, 0x84, 0x0, {0xff27}}], 0x14}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 23:37:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 23:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x14, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:37:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) r3 = dup3(r1, r0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0xa00, 0x8) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) 23:37:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 334.417507][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:37:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7, 0x0, 0x0, 0x200}}]}}}]}, 0x78}}, 0x0) 23:37:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 334.878272][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:37:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="f5", 0x1}], 0x1, &(0x7f0000000380)=[@init={0x14, 0x84, 0x0, {0xff27}}], 0x14}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 23:37:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, 0x0) [ 335.169410][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 23:37:19 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:37:19 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7c) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @empty=0xfeffffff}, @l2tp={0x2, 0x0, @dev}, @nl=@unspec, 0xfe}) 23:37:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="f5", 0x1}], 0x1, &(0x7f0000000380)=[@init={0x14, 0x84, 0x0, {0xff27}}], 0x14}], 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) 23:37:21 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, 0x0) 23:37:21 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d00800006400ffff715ac0ecf44f6841e0329e00", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff"], 0x8d0}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:37:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:37:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x144, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x40) 23:37:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xf000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'ip6gre0\x00'}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 337.762399][T12083] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.5'. 23:37:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, 0x0) [ 337.907133][T12083] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.5'. 23:37:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x38}}, 0x0) 23:37:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x17e, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:37:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x0, 0x10000}, {0x80000006}]}, 0x10) 23:37:22 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/1632], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf086dd1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 23:37:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 23:37:24 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x146, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x40) 23:37:24 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x7fff, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 23:37:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) 23:37:24 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:37:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000200)="66ad", 0x2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f013c", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0xc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:37:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) 23:37:25 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = io_uring_setup(0x196, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[r0]}, 0x1) 23:37:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) 23:37:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 23:37:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x4, [@const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xdc}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 23:37:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) [ 341.062463][T12151] kvm: pic: level sensitive irq not supported [ 343.418769][ T0] NOHZ: local_softirq_pending 08 23:37:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b060101000000000100fdffffffffff060001000600f2ff9b0007801800018050000240fe8000faff0000000000020000001c0006000442000000000c00160508000140acdc14aa1400170076657468315f766c616e000000000000050007008800000014001700767863616e3100000000001b020000000900120000007a32000000000c001b4070dcf77b000080000c00148008200140ee000000000000000004008aab860000000000000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4467d, 0x0) 23:37:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="665f07000005eb301420", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 23:37:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r0, &(0x7f0000000480)=@random={'osx.', '/dev/bsg\x00'}) 23:37:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) write$tun(r1, &(0x7f0000000500)={@val, @void, @eth={@broadcast, @random="690810fe8b68", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x8, 0x0, 0x0, @local, @mcast2, {[@dstopts]}}}}}}, 0x42) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 344.269495][T12232] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 23:37:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 344.680832][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.696688][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.706692][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:37:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:37:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}, 0x0) 23:37:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x4, [@const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @struct={0x0, 0x4, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xe8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 23:37:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 345.114063][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.130568][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.138563][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:37:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xd0, 0x1c0, 0xd0, 0xd0, 0xd0, 0x2c0, 0x2e0, 0x2e0, 0x2e0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xfffa}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'wg1\x00'}}}, {{@ipv6={@local, @dev, [], [], 'bridge_slave_1\x00', 'ipvlan0\x00', {}, {}, 0x11, 0x0, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x1, 0xa, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe]}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) 23:37:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 345.680928][T12264] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 345.732580][T12265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.749418][T12265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.757288][T12265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:37:31 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 23:37:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e16a13", 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 23:37:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:37:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') sendfile(r3, r4, 0x0, 0x10000) 23:37:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100020000) [ 347.335708][T12285] ===================================================== [ 347.342450][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 347.342725][T12285] BUG: KMSAN: uninit-value in sha256_update+0x8bf0/0x9090 [ 347.357189][T12285] CPU: 1 PID: 12285 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 347.357998][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.366027][T12285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.366034][T12285] Call Trace: [ 347.366061][T12285] dump_stack+0x1df/0x240 [ 347.366083][T12285] kmsan_report+0xf7/0x1e0 [ 347.366103][T12285] __msan_warning+0x58/0xa0 [ 347.366122][T12285] sha256_update+0x8bf0/0x9090 [ 347.366141][T12285] ? kmsan_task_context_state+0x47/0x90 [ 347.366157][T12285] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 347.366171][T12285] ? update_stack_state+0xa18/0xb40 [ 347.366193][T12285] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 347.366212][T12285] ? __module_address+0x68/0x600 [ 347.366246][T12285] ? kmsan_get_metadata+0x11d/0x180 [ 347.366263][T12285] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 347.366281][T12285] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 347.366298][T12285] ? __update_load_avg_cfs_rq+0x1a8/0x13b0 [ 347.366332][T12285] crypto_sha256_update+0x8b/0xb0 [ 347.366352][T12285] ? sha1_base_init+0x180/0x180 [ 347.366368][T12285] crypto_shash_update+0x4e9/0x550 [ 347.366384][T12285] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 347.366399][T12285] ? hash_walk_new_entry+0x6c7/0x770 [ 347.366430][T12285] ? crypto_hash_walk_first+0x1fd/0x360 [ 347.366445][T12285] ? kmsan_get_metadata+0x4f/0x180 [ 347.366463][T12285] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 347.366487][T12285] shash_async_update+0x113/0x1d0 [ 347.366509][T12285] ? shash_async_init+0x1e0/0x1e0 [ 347.366523][T12285] hash_sendpage+0x8ef/0xdf0 [ 347.366546][T12285] ? hash_recvmsg+0xd30/0xd30 [ 347.366566][T12285] sock_sendpage+0x1e1/0x2c0 [ 347.366591][T12285] pipe_to_sendpage+0x38c/0x4c0 [ 347.366607][T12285] ? sock_fasync+0x250/0x250 [ 347.366633][T12285] __splice_from_pipe+0x565/0xf00 [ 347.366653][T12285] ? generic_splice_sendpage+0x2d0/0x2d0 [ 347.366689][T12285] generic_splice_sendpage+0x1d5/0x2d0 [ 347.366717][T12285] ? iter_file_splice_write+0x1800/0x1800 [ 347.366737][T12285] direct_splice_actor+0x1fd/0x580 [ 347.366760][T12285] ? kmsan_get_metadata+0x4f/0x180 [ 347.366784][T12285] splice_direct_to_actor+0x6b2/0xf50 [ 347.366801][T12285] ? do_splice_direct+0x580/0x580 [ 347.366843][T12285] do_splice_direct+0x342/0x580 [ 347.366873][T12285] do_sendfile+0x101b/0x1d40 [ 347.366912][T12285] __se_compat_sys_sendfile+0x301/0x3c0 [ 347.366933][T12285] ? kmsan_get_metadata+0x11d/0x180 [ 347.366947][T12285] ? __ia32_sys_sendfile64+0x70/0x70 [ 347.366963][T12285] __ia32_compat_sys_sendfile+0x56/0x70 [ 347.366983][T12285] __do_fast_syscall_32+0x2aa/0x400 [ 347.367011][T12285] do_fast_syscall_32+0x6b/0xd0 [ 347.367032][T12285] do_SYSENTER_32+0x73/0x90 [ 347.367052][T12285] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 347.367064][T12285] RIP: 0023:0xf7f35549 [ 347.367069][T12285] Code: Bad RIP value. [ 347.367077][T12285] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 347.367092][T12285] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000007 [ 347.367101][T12285] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000 [ 347.367109][T12285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.367118][T12285] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 347.367127][T12285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.367143][T12285] [ 347.367148][T12285] Uninit was created at: [ 347.367164][T12285] kmsan_save_stack_with_flags+0x3c/0x90 [ 347.367179][T12285] kmsan_alloc_page+0xb9/0x180 [ 347.367192][T12285] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 347.367207][T12285] alloc_pages_current+0x672/0x990 [ 347.367219][T12285] push_pipe+0x605/0xb70 [ 347.367231][T12285] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 347.367245][T12285] do_splice_to+0x4fc/0x14f0 [ 347.367260][T12285] splice_direct_to_actor+0x45c/0xf50 [ 347.367274][T12285] do_splice_direct+0x342/0x580 [ 347.367286][T12285] do_sendfile+0x101b/0x1d40 [ 347.367299][T12285] __se_compat_sys_sendfile+0x301/0x3c0 [ 347.367313][T12285] __ia32_compat_sys_sendfile+0x56/0x70 [ 347.367327][T12285] __do_fast_syscall_32+0x2aa/0x400 [ 347.367342][T12285] do_fast_syscall_32+0x6b/0xd0 [ 347.367357][T12285] do_SYSENTER_32+0x73/0x90 [ 347.367369][T12285] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 347.367374][T12285] ===================================================== [ 347.367379][T12285] Disabling lock debugging due to kernel taint [ 347.367388][T12285] Kernel panic - not syncing: panic_on_warn set ... [ 347.367406][T12285] CPU: 1 PID: 12285 Comm: syz-executor.2 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 347.367422][T12285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.367428][T12285] Call Trace: [ 347.367450][T12285] dump_stack+0x1df/0x240 [ 347.367474][T12285] panic+0x3d5/0xc3e [ 347.367513][T12285] kmsan_report+0x1df/0x1e0 [ 347.367535][T12285] __msan_warning+0x58/0xa0 [ 347.367556][T12285] sha256_update+0x8bf0/0x9090 [ 347.367577][T12285] ? kmsan_task_context_state+0x47/0x90 [ 347.367597][T12285] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 347.367612][T12285] ? update_stack_state+0xa18/0xb40 [ 347.367635][T12285] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 347.367654][T12285] ? __module_address+0x68/0x600 [ 347.367690][T12285] ? kmsan_get_metadata+0x11d/0x180 [ 347.367709][T12285] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 347.367727][T12285] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 347.367743][T12285] ? __update_load_avg_cfs_rq+0x1a8/0x13b0 [ 347.367777][T12285] crypto_sha256_update+0x8b/0xb0 [ 347.367796][T12285] ? sha1_base_init+0x180/0x180 [ 347.367816][T12285] crypto_shash_update+0x4e9/0x550 [ 347.367858][T12285] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 347.381511][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.385662][T12285] ? hash_walk_new_entry+0x6c7/0x770 [ 347.927247][T12285] ? crypto_hash_walk_first+0x1fd/0x360 [ 347.933128][T12285] ? kmsan_get_metadata+0x4f/0x180 [ 347.938227][T12285] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 347.944023][T12285] shash_async_update+0x113/0x1d0 [ 347.949040][T12285] ? shash_async_init+0x1e0/0x1e0 [ 347.954049][T12285] hash_sendpage+0x8ef/0xdf0 [ 347.958630][T12285] ? hash_recvmsg+0xd30/0xd30 [ 347.963298][T12285] sock_sendpage+0x1e1/0x2c0 [ 347.967881][T12285] pipe_to_sendpage+0x38c/0x4c0 [ 347.972718][T12285] ? sock_fasync+0x250/0x250 [ 347.977322][T12285] __splice_from_pipe+0x565/0xf00 [ 347.982335][T12285] ? generic_splice_sendpage+0x2d0/0x2d0 [ 347.987986][T12285] generic_splice_sendpage+0x1d5/0x2d0 [ 347.993464][T12285] ? iter_file_splice_write+0x1800/0x1800 [ 347.999183][T12285] direct_splice_actor+0x1fd/0x580 [ 348.004811][T12285] ? kmsan_get_metadata+0x4f/0x180 [ 348.009918][T12285] splice_direct_to_actor+0x6b2/0xf50 [ 348.015277][T12285] ? do_splice_direct+0x580/0x580 [ 348.020319][T12285] do_splice_direct+0x342/0x580 [ 348.025184][T12285] do_sendfile+0x101b/0x1d40 [ 348.029792][T12285] __se_compat_sys_sendfile+0x301/0x3c0 [ 348.035333][T12285] ? kmsan_get_metadata+0x11d/0x180 [ 348.040514][T12285] ? __ia32_sys_sendfile64+0x70/0x70 [ 348.045781][T12285] __ia32_compat_sys_sendfile+0x56/0x70 [ 348.052095][T12285] __do_fast_syscall_32+0x2aa/0x400 [ 348.057291][T12285] do_fast_syscall_32+0x6b/0xd0 [ 348.062132][T12285] do_SYSENTER_32+0x73/0x90 [ 348.066624][T12285] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 348.072935][T12285] RIP: 0023:0xf7f35549 [ 348.076990][T12285] Code: Bad RIP value. [ 348.081037][T12285] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 348.089455][T12285] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000007 [ 348.097411][T12285] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000 [ 348.105366][T12285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.113329][T12285] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 348.121460][T12285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.130638][T12285] Kernel Offset: 0xcc00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 348.142769][T12285] Rebooting in 86400 seconds..