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", 0x1000}, {&(0x7f0000002340)="ee7a69944bd12b8192d8a1aa2bdca01e7fca56e352744c835bdce88197018802967ff7fc97a26a1ea016d73118c91003fbe38a177d5c942788848cd0c84559ed5ab457524dfb59aafef38fa7fac808290164e98f06e977f3411416e7ba9580005e5fd1a00eafd8b3312b54bcde87912b8f12adf205c2d84eae8ce38d5811d915de2c4ba0617c8e12fbb64a19", 0x8c}, {&(0x7f0000002400)="4398d910963149379a935e5f055ef6cf60b44181bc0c1a007fc59d8ce8bcc3a1ead065aaeb665a13ae80acd69ce1622de7db382f6aa51181faf2580400915ba53b1f2ee6bf0c888f6d33404be076cf2c544b29e20ffa960a87a54d34db513779ccc625cda81cd0bf3ad951859e57fb4d8b576cafbf3b8e1a6401effbc7c41e84316b63911e730df9d665b4baed79d3b07161c3774944298f723ac518f482115f66047bfdf5e7f87d0c34cca79b1303e8e32b1c56111658d0f3", 0xb9}], 0x9, 0x3572395540f2bd61) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 21:51:15 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100025690000000000000000647262672d70725f73686131285f280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081b70742e2d1"], 0xe0}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x121000, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000200)=0x9, 0x4) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000001c0)={0x2, 0x7}, 0x2) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$pptp(0x18, 0x1, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) setuid(r3) 21:51:15 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in6={0xa, 0x4e21, 0x85, @mcast2, 0x6}, @in={0x2, 0x4e23, @local}], 0x7c) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4148, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0xffffff99) [ 194.599240][ T9753] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 194.808401][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:15 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x149040, 0x0) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000000c0)=0x80000000) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x4, 0x4) 21:51:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[{0x10, 0x10d, 0x7fffffff}], 0x10}}], 0x2, 0x0) 21:51:15 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in6={0xa, 0x4e21, 0x85, @mcast2, 0x6}, @in={0x2, 0x4e23, @local}], 0x7c) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4148, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0xffffff99) 21:51:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:15 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x100000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x20172b, 0xa, 0x4, 0x20000, 0x533, {0x0, 0x2710}, {0x1, 0x8, 0x3, 0x2, 0x7, 0x7, "fae7ba6e"}, 0xb, 0x4, @fd, 0x2, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x45d3) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40100, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) [ 194.991989][ T9787] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:15 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x70, 0x28, 0xff, 0x2, 0x2, 0x0, 0xb, 0x40053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3139ab8e01c57e76, 0xfa}, 0xffffffffffffffff, 0x0, r2, 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x28001, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xc5) openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000240)={0x6, {{0x2, 0x4e23, @remote}}}, 0x88) getpid() 21:51:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220000006a0a00fe000000008500000017000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b0e1773f04a22ba8cedf8510e63fb112cf6956e09d193c217e0f6ae30bcb733d40b32753ecd1f46f09238028a1dba339f54e8a96ec60f2af47f99376e438366dd0baeb5a447f936e000071c34991d0e5e9b6528c8586a9180cf7ce404d91aafcc8fb5fcecb670f2193f2497ea349d1961498c7311e1122dc8eaf4b2e0ad8765823ecfae1a53d354b39ebfe17b5d3ca0d06ea310989c2bc4b11bfb7312cb7e8ef03156d2a4605e9813cbabc42274620a7daa27311b713c60e83cc1ae9c6d367f157c9d6195eaa58eb7cede5fa94e2edf01d5cb492bfbf1c6ebe77c3bfdcd6e170ad3920487eba9c607aa94636113d985d743e4eb8732f2b956c50f17c25774e2f5a3ce4e0b5c2c389117da169cf17d978a3b5e57e9a6cfc621bbae1ddfa866b4ce07279014d9946994a0716300134c4deaf354d47276180d01d13cd00831fea162783c85fa3ff95c81462dc0372c2976aa082ef58269bbbe4388372a4eadb644b8ce6b7fad4f70784b3c26c632d8006ad91f12284b9da915abf0cbad7bfd262511a58bd26317b01d0dafad257995bf474aa37836c4e4074056519df43a64a7cf9cc4e94b8df28c22276ea90bff24c6e344f03a9806d66c3b00ab57fae16c4780a1d8ce59945571b594f9b567766ccf3992a069f313ca7086f67c05851391a623d8fbf0f0e1816e503d0c04a4377abd8580461bda429452858c1fcd4c3bc481afb"], &(0x7f0000000340)='GPL\x00'}, 0x48) prctl$PR_SET_DUMPABLE(0x4, 0x2) 21:51:15 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x40201, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000400)="3bbab9b4bcda8931f3b63d7a7fe3aedb6889125bcf557828094c816cff0953fabe66ce96fa1fe7d9ac0baf935071ce6bb73c274c60abdfb67826a7a5ddcd0156f2e5b94e9015fea1d3ffa974e48fac00b7da7319f18a2da276e98ed6cb8ffc9f4013f784ffcc8817acf7964a6a95ed7e1593b056c5e0d07b04bf11a45ea6b44fe04e07") sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x25dfdbfd, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x54}}, 0x0) flock(r1, 0x8) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x100, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30325}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xe6e3}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x54}}, 0x0) fremovexattr(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="81656368b871d0731e41c375726919818515df7780daa019a8d31b0000000000f278c9fc"]) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 195.377379][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:16 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 21:51:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000100)={0x0, 0x0, [0x9, 0xfff7, 0x6]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)={0x4, 0x8, 0x4, 0x400000, 0xfffffff7, {}, {0x5, 0x8, 0xff, 0x7, 0x20, 0x20, "61e5e43f"}, 0x8, 0x3, @offset=0x4, 0xffffffff, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000400)={0x601, 0x9, &(0x7f0000000080)=[0x8001, 0x7f, 0x80000000, 0xfffffffc, 0xd1b2, 0x0, 0xfffeffff, 0xd8, 0x1], &(0x7f0000000280)=[0x5, 0x8001, 0x101, 0x42561bfe, 0x0], &(0x7f0000000380)=[0xfffffb7f, 0x1f], &(0x7f00000003c0)=[0x6, 0x8], 0x0, 0x6}) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x3, 0x40000004, 0x0, 0x4, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 195.900710][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:16 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000400)=0xf000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000380)=0x3) 21:51:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000400)=0xf000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000380)=0x3) 21:51:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000400)=0xf000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000380)=0x3) 21:51:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:16 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x6000, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000040)="3d34f703168d20c2c232c66248538aa0213d9f7d5037f15136a0c544351ed59ad5cb4ddd62c148f3e33fb5b85b3b1d12fe5d4ae10a31dc1e9433a1df10acb48909fb6329bc379b61a06de2d01b0af03292c809093d1dd702c3ac20b1d5712d5586e2b741b4bef70978eb6937695765ff757fdaf92700cb6b89e9154b0b1493b87768eeafe90ee2df8d7c9329bc22fa897147ee1f99658c1528f9bc5de9ef4fb9", 0xa0, 0xfffffffffffff4f2, &(0x7f0000000100)) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x2200, 0x4) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) [ 196.369723][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000400)=0xf000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000380)=0x3) 21:51:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:17 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x411ef, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r2, 0x536ae464467e3e0b, 0x0, 0x0, {0x24}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xd4, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x3, 0x3, 0x1}}}, {{@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xffffffab, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xa0}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r8, @ANYRESHEX=r3], 0x3}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7e5}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_LINK={0x8}]}, 0x30}}, 0x0) 21:51:17 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:17 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000400)=0xf000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) 21:51:17 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001ac0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001b00)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000001c00)=0xe8) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000001d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x40) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x28000, 0x0) ioctl$BLKREPORTZONE(r7, 0xc0101282, &(0x7f0000000080)={0x1, 0x2, 0x0, [{0x6, 0x1ff, 0x7ff, 0x3, 0x4, 0x3f, 0x6}, {0x2, 0x5, 0x7, 0xff, 0x0, 0x7f, 0x8}]}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'veth0_vlan\x00', {0x8}, 0x4}) 21:51:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) [ 196.697888][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:17 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:17 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000400)=0xf000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 21:51:17 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:17 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000400)=0xf000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 21:51:17 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) write$tun(r1, &(0x7f0000000200)={@void, @val, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @rand_addr="54326d5498a42373620e6eb5d9a5785a", @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x689, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfffb}}}}}}}}, 0x76) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000040)='./file0\x00', 0x1) dup(r3) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000180)=0xc) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:17 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 196.920073][ T9913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:17 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000400)=0xf000) 21:51:17 executing program 2: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = getpid() gettid() rt_tgsigqueueinfo(r0, 0x0, 0x11, &(0x7f0000000600)={0x0, 0x0, 0xab7}) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x11, &(0x7f0000000600)) r2 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCDELRT(r3, 0x89e2, 0x0) kcmp(r0, 0x0, 0x1, r2, r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x181900, 0x3) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:51:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:17 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:17 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)) 21:51:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 21:51:18 executing program 2: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = getpid() gettid() rt_tgsigqueueinfo(r0, 0x0, 0x11, &(0x7f0000000600)={0x0, 0x0, 0xab7}) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x11, &(0x7f0000000600)) r2 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCDELRT(r3, 0x89e2, 0x0) kcmp(r0, 0x0, 0x1, r2, r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x181900, 0x3) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:51:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001840) 21:51:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:18 executing program 4: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000540)) r0 = socket$xdp(0x2c, 0x3, 0x0) getuid() setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x11cc00, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x180000000) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff8, 0x6, &(0x7f0000000480)=[{&(0x7f00000000c0)="9c8dd501cd5c690003df472fc796afa1a573c6cb25ae138ba260841a64ddfd0505ab5f5debba015e4acff9b825428440751d59a755a098adce1debeedd0cf9f84bdb8795dcc680c315bd3199ceef6073b8840b2314d210e0054c8a28d240bd3b52650f67f4c596693ecc976054a06b8cbd", 0x71, 0x6}, {&(0x7f0000000140)="4573f90f1823b5fe7c7aade046106e8d7cdda776cd0ad6f029999b348e561edbd4775b8bf6d24a98f9a50b77766172b4511b146b403b1d8623c969e19e798733409a6eb61dfe867ef51194ee1337324460d97abce62ea90e31cdb6c2a0813040ca5cb2e06980177b8c008af168bee93fb4f49302923fa2bd", 0x78, 0x28}, {&(0x7f00000001c0)="ceecce574080c497ff31ecb0bda4ac0624c2ad438ad756ee6756c3fd5cd0f93de54344c08a684ca96b55019b9b5a52bc59b0ffe73ddab8ae3421f2c16620b01e2d611b5dc6320ba8ef20bd52242bdf110d39049644d20bf60b09def3a2e841408bfdece6ba7a1090580673eaeb554bdd407ccdddfdde11652b8d7e87c55c931f30c85011270b8a4a79000dd67a546ae90667df30d3375cb94b4193e2c3a551f18bd2a350a655e185c187c5b78ec230e0a04f0c9559a12e19fe9b3c82718173d433ee03acbcf5aa65415357779e054c2067d76d340d356a741620bd8b60c267d8f1dec514f776a4167b94194d", 0xec, 0x9}, {&(0x7f00000002c0)="8474365c18467a60057c8219492f765a9d0606e138ffbe45b188d214", 0x1c, 0x44}, {&(0x7f0000000300)="a809466d433c27afd8d35d20245c6db99a4c16b45e23657756289250dc13d34df0980f95c881320c841975194395895489a43fb8b1e54e6f1f1f4b4b5e7e804522e2e65d1251626cf245b37608e05fe0f8d86547f4a5c8886f53939c885feed75c7eb486758eb6d0f7a459cae2038971c217477fe5102b8dd7550bd4529d29e3f1cfa0a584497156d7e473d9291f12e34f280813a6d963838b5ac104c45fd9eca8d659d597940fba097290c9d0ab063e80f260d3ecb04e0b35888f6e387ac8b1f9d96f98f0e479462f80fb23328ab018545c", 0xd2}, {&(0x7f0000000400)="bee89b0520103f4b09eb3728120c5dd49720671c6edc6890bcdcd3bace9d2db570b1772429cf4b1a9d38cde5c86c8293332c30c20df800c1bb4179b2a416a16cbf02062e552a247b3bcd46f4298017", 0x4f, 0x10000}], 0x1000010, &(0x7f0000000640)={[{@inline_dentry='inline_dentry'}, {@background_gc_sync='background_gc=sync'}, {@extent_cache='extent_cache'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}], [{@smackfsdef={'smackfsdef', 0x3d, 'em0v'}}]}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:18 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x406600, 0x0) 21:51:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8000, 0x4) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r3, 0xa, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000, 0x3f00}]) 21:51:19 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = open(&(0x7f0000001140)='./file0\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x23}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4041004) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:19 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:19 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) [ 198.534558][ T9982] __nla_validate_parse: 2 callbacks suppressed [ 198.534565][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 198.601682][ T9990] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 21:51:19 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x8000, 0x0, 0x8, r4}, 0x10) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21:51:19 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000080601010040edf07f96fbcc163db9742af90d00000000000000020000050900020073797a3000000000050001000700000005000100070000000500010007001311e20e9d18528ef95439e9b06e23a278"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x400000d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 198.688271][ T9990] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 198.702909][ T9990] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 21:51:19 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) [ 198.818296][ T9990] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 21:51:19 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x1022160, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:19 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 21:51:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:19 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:19 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) write$tun(r1, &(0x7f0000000200)={@void, @val, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @rand_addr="54326d5498a42373620e6eb5d9a5785a", @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x689, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfffb}}}}}}}}, 0x76) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000040)='./file0\x00', 0x1) dup(r3) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000180)=0xc) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:19 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:19 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:19 executing program 0: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) [ 199.080684][T10031] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:19 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x2, 0x15) sendto$inet6(r1, &(0x7f0000000000)="1ba0000010001d0d89fdc5cbdd0457987028ed4dca29a7960f0f8ec8da78031c7660b08f515e", 0xff3b, 0x0, 0x0, 0x2e2) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:19 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/182) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:19 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x8aa80, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='veth0_to_hsr\x00') clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r6, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'ib'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r6, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0xf, 0x7, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) r7 = gettid() write$FUSE_LK(r4, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x2, 0x3, 0x1, r7}}}, 0x28) rt_sigtimedwait(&(0x7f0000000100)={[0x200]}, &(0x7f00000001c0), &(0x7f0000000240)={r2, r3+30000000}, 0x8) 21:51:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:20 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) [ 199.476294][T10063] netlink: 40763 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:20 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 199.695097][T10071] netlink: 40763 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.972965][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:20 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) fsopen(&(0x7f0000000100)='minix\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:20 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x180000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:20 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x80000000) ioctl(r0, 0x4, &(0x7f0000000080)="81ddbd12aa7efd3c8035dd7a4e863df0727790ee2e5daa4e31b9da798ecc9bfc6797d5227e941a3fbeff55e5f85a6eb69aaab557adc7ebc0179eb3") mincore(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000007100c011c48dd566250b099605a76f738dee2d34567af345f5228a4dd6dbd952b64c47ddc5ce356337cd1f7730752ba01118bdb42b340b999cd9ed62af51326c8fef275c2ea057b1fa14a70a603331444a0b0dc35295cee7b8bd70e7c2241e4cde"], 0x77) 21:51:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:20 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:20 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) [ 200.385228][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:20 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0xf, r3, 0x3c}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getnetconf={0x5c, 0x52, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x15260098}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4000}, @NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x8040) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:20 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600014005d8af740a63743ed04000000000000eeaee39ea0f1cc10fd11b9e0657b9c36eb35f7f30637c0e08a4af66cb4b8e69aab62d34872d07fb3d7320b", @ANYRES16=r1, @ANYBLOB="080029bd7000fbdbdf25060000000800050003000000140004006e65747063693000000000000000000008000500040000000c0099003f00000000000000080001000100000008000500070000000c009900ffffff7f03000000"], 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:21 executing program 2: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000540)) r0 = socket$xdp(0x2c, 0x3, 0x0) getuid() setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x11cc00, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x180000000) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff8, 0x6, &(0x7f0000000480)=[{&(0x7f00000000c0)="9c8dd501cd5c690003df472fc796afa1a573c6cb25ae138ba260841a64ddfd0505ab5f5debba015e4acff9b825428440751d59a755a098adce1debeedd0cf9f84bdb8795dcc680c315bd3199ceef6073b8840b2314d210e0054c8a28d240bd3b52650f67f4c596693ecc976054a06b8cbd", 0x71, 0x6}, {&(0x7f0000000140)="4573f90f1823b5fe7c7aade046106e8d7cdda776cd0ad6f029999b348e561edbd4775b8bf6d24a98f9a50b77766172b4511b146b403b1d8623c969e19e798733409a6eb61dfe867ef51194ee1337324460d97abce62ea90e31cdb6c2a0813040ca5cb2e06980177b8c008af168bee93fb4f49302923fa2bd", 0x78, 0x28}, {&(0x7f00000001c0)="ceecce574080c497ff31ecb0bda4ac0624c2ad438ad756ee6756c3fd5cd0f93de54344c08a684ca96b55019b9b5a52bc59b0ffe73ddab8ae3421f2c16620b01e2d611b5dc6320ba8ef20bd52242bdf110d39049644d20bf60b09def3a2e841408bfdece6ba7a1090580673eaeb554bdd407ccdddfdde11652b8d7e87c55c931f30c85011270b8a4a79000dd67a546ae90667df30d3375cb94b4193e2c3a551f18bd2a350a655e185c187c5b78ec230e0a04f0c9559a12e19fe9b3c82718173d433ee03acbcf5aa65415357779e054c2067d76d340d356a741620bd8b60c267d8f1dec514f776a4167b94194d", 0xec, 0x9}, {&(0x7f00000002c0)="8474365c18467a60057c8219492f765a9d0606e138ffbe45b188d214", 0x1c, 0x44}, {&(0x7f0000000300)="a809466d433c27afd8d35d20245c6db99a4c16b45e23657756289250dc13d34df0980f95c881320c841975194395895489a43fb8b1e54e6f1f1f4b4b5e7e804522e2e65d1251626cf245b37608e05fe0f8d86547f4a5c8886f53939c885feed75c7eb486758eb6d0f7a459cae2038971c217477fe5102b8dd7550bd4529d29e3f1cfa0a584497156d7e473d9291f12e34f280813a6d963838b5ac104c45fd9eca8d659d597940fba097290c9d0ab063e80f260d3ecb04e0b35888f6e387ac8b1f9d96f98f0e479462f80fb23328ab018545c", 0xd2}, {&(0x7f0000000400)="bee89b0520103f4b09eb3728120c5dd49720671c6edc6890bcdcd3bace9d2db570b1772429cf4b1a9d38cde5c86c8293332c30c20df800c1bb4179b2a416a16cbf02062e552a247b3bcd46f4298017", 0x4f, 0x10000}], 0x1000010, &(0x7f0000000640)={[{@inline_dentry='inline_dentry'}, {@background_gc_sync='background_gc=sync'}, {@extent_cache='extent_cache'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}], [{@smackfsdef={'smackfsdef', 0x3d, 'em0v'}}]}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:21 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/169) prctl$PR_SET_SECUREBITS(0x1c, 0x2) [ 200.609456][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:21 executing program 3: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) [ 200.728948][T10131] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.736807][T10131] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 200.745805][T10131] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.754478][T10131] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 21:51:21 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) 21:51:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:21 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) write$tun(r1, &(0x7f0000000200)={@void, @val, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @rand_addr="54326d5498a42373620e6eb5d9a5785a", @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x689, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfffb}}}}}}}}, 0x76) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000040)='./file0\x00', 0x1) dup(r3) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000180)=0xc) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) [ 200.899125][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:21 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) exit(0x3) 21:51:21 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="5400000010003b90e21b6fafc03cb90000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) signalfd(r1, &(0x7f0000000000)={[0x18e1]}, 0x8) 21:51:21 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:21 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) [ 201.091388][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:21 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) [ 201.143404][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:21 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/68, 0x3000, 0x800, 0x6, 0x3}, 0x20) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:21 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x4, 0x0, 0x7ff}) 21:51:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:22 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x123009, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000000)=0x2) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:22 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:22 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:22 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x200000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000280)=""/155) 21:51:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:22 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:22 executing program 0: mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x2) read$FUSE(r0, &(0x7f0000000040), 0x1000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000001040)=0x9, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) stat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r11, 0x202002) keyctl$chown(0x4, r11, r9, r10) setregid(r7, r10) r12 = dup3(0xffffffffffffffff, r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r12, &(0x7f0000000900)={0x2c, 0xf, r5, 0x3c}, 0x10) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r13, 0x1, 0x0, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r15) ioctl$DRM_IOCTL_GET_CLIENT(r13, 0xc0286405, &(0x7f0000001140)={0x400, 0x4, {0xffffffffffffffff}, {r15}, 0x80000000, 0x7}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001180)={{{@in6=@mcast2, @in=@rand_addr=0x3, 0x4e20, 0x1, 0x4e21, 0x6, 0xa, 0x60, 0xa0, 0x8c, r5, r16}, {0x3, 0x0, 0x9, 0x101, 0x5, 0x401, 0x3f, 0x8}, {0x80000001, 0x5, 0x2, 0x2}, 0xfffffc01, 0x6e6bb9, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d6, 0x6c}, 0x2, @in=@rand_addr=0x6, 0x3505, 0x3, 0x1, 0x3f, 0x7, 0x1000, 0x81}}, 0xe8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001080)={0x0, 0x7}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001100)=@assoc_id=r17, 0x4) 21:51:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x7ff}) 21:51:22 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:22 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/162, 0x100a000, 0x800, 0x4}, 0x20) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:22 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:51:22 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000000)) 21:51:22 executing program 2: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 21:51:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:23 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:51:23 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x2b, 0x46, 0x7, 0xe7, 0x5a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, 0x10) 21:51:23 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x180000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:23 executing program 2: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 21:51:23 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) [ 202.603380][T10266] FAULT_INJECTION: forcing a failure. [ 202.603380][T10266] name failslab, interval 1, probability 0, space 0, times 1 21:51:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 202.703828][T10266] CPU: 1 PID: 10266 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 202.712557][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.722719][T10266] Call Trace: [ 202.726013][T10266] dump_stack+0x1fb/0x318 [ 202.730358][T10266] should_fail+0x4b8/0x660 [ 202.734791][T10266] __should_failslab+0xb9/0xe0 [ 202.739559][T10266] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 202.745278][T10266] should_failslab+0x9/0x20 [ 202.749782][T10266] __kmalloc+0x7a/0x340 [ 202.753941][T10266] ? tomoyo_realpath_from_path+0xdb/0x6b0 [ 202.759688][T10266] ? kfree+0x1f/0x220 [ 202.763679][T10266] tomoyo_realpath_from_path+0xe8/0x6b0 [ 202.769247][T10266] tomoyo_path_number_perm+0x18f/0x690 [ 202.774739][T10266] ? smack_file_ioctl+0x225/0x2e0 [ 202.779755][T10266] tomoyo_file_ioctl+0x23/0x30 [ 202.784500][T10266] security_file_ioctl+0x68/0xd0 [ 202.789432][T10266] __se_sys_ioctl+0x4e/0x190 [ 202.794002][T10266] ? do_syscall_64+0x1d/0x1c0 [ 202.798660][T10266] __x64_sys_ioctl+0x7b/0x90 [ 202.803231][T10266] do_syscall_64+0xf7/0x1c0 [ 202.807715][T10266] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.813608][T10266] RIP: 0033:0x45c429 [ 202.817484][T10266] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 202.837066][T10266] RSP: 002b:00007f9e54751c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.845455][T10266] RAX: ffffffffffffffda RBX: 00007f9e547526d4 RCX: 000000000045c429 21:51:23 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) [ 202.853408][T10266] RDX: 0000000020000080 RSI: 0000000000005603 RDI: 0000000000000003 [ 202.861356][T10266] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 202.869303][T10266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 202.877249][T10266] R13: 0000000000000667 R14: 00000000004c8f7c R15: 0000000000000000 21:51:23 executing program 2: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 21:51:23 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4c80, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x810, r1, 0x100000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:23 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x20, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044014}, 0x408c4) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:23 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 21:51:23 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) 21:51:23 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:51:23 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:23 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 21:51:23 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) 21:51:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 203.269653][T10266] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.318075][T10319] FAULT_INJECTION: forcing a failure. [ 203.318075][T10319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.331299][T10319] CPU: 0 PID: 10319 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 203.339952][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.349989][T10319] Call Trace: [ 203.353275][T10319] dump_stack+0x1fb/0x318 [ 203.357592][T10319] should_fail+0x4b8/0x660 [ 203.362003][T10319] ? __kasan_check_read+0x11/0x20 [ 203.367015][T10319] should_fail_alloc_page+0x4f/0x60 [ 203.372200][T10319] prepare_alloc_pages+0x283/0x460 [ 203.377306][T10319] __alloc_pages_nodemask+0xb2/0x5d0 [ 203.382585][T10319] kmem_getpages+0x4c/0x930 [ 203.387072][T10319] cache_grow_begin+0x7e/0x2e0 [ 203.391815][T10319] ? cache_alloc_pfmemalloc+0x1e/0x1a0 [ 203.397257][T10319] cache_alloc_refill+0x328/0x400 [ 203.402261][T10319] ? debug_smp_processor_id+0x9/0x20 [ 203.407530][T10319] __kmalloc+0x318/0x340 [ 203.411749][T10319] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 203.417448][T10319] tomoyo_realpath_from_path+0xe8/0x6b0 [ 203.422988][T10319] tomoyo_path_number_perm+0x18f/0x690 [ 203.428456][T10319] ? smack_file_ioctl+0x225/0x2e0 [ 203.433471][T10319] tomoyo_file_ioctl+0x23/0x30 [ 203.438215][T10319] security_file_ioctl+0x68/0xd0 [ 203.443136][T10319] __se_sys_ioctl+0x4e/0x190 [ 203.447716][T10319] ? do_syscall_64+0x1d/0x1c0 [ 203.452386][T10319] __x64_sys_ioctl+0x7b/0x90 [ 203.456960][T10319] do_syscall_64+0xf7/0x1c0 [ 203.461445][T10319] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.467316][T10319] RIP: 0033:0x45c429 [ 203.471188][T10319] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 203.490765][T10319] RSP: 002b:00007f9e54751c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.499151][T10319] RAX: ffffffffffffffda RBX: 00007f9e547526d4 RCX: 000000000045c429 [ 203.507112][T10319] RDX: 0000000020000080 RSI: 0000000000005603 RDI: 0000000000000003 [ 203.515063][T10319] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 203.523012][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 203.530962][T10319] R13: 0000000000000667 R14: 00000000004c8f7c R15: 0000000000000001 21:51:24 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 21:51:24 executing program 0: socket$xdp(0x2c, 0x3, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 203.600160][T10307] __nla_validate_parse: 5 callbacks suppressed [ 203.600168][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:24 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:51:24 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:24 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x181, 0x4) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) [ 203.767044][T10338] FAULT_INJECTION: forcing a failure. [ 203.767044][T10338] name failslab, interval 1, probability 0, space 0, times 0 [ 203.792285][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 203.795139][T10338] CPU: 1 PID: 10338 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 21:51:24 executing program 4: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 203.810378][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.820428][T10338] Call Trace: [ 203.823723][T10338] dump_stack+0x1fb/0x318 [ 203.828065][T10338] should_fail+0x4b8/0x660 [ 203.832498][T10338] __should_failslab+0xb9/0xe0 [ 203.837266][T10338] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 203.842986][T10338] should_failslab+0x9/0x20 [ 203.847487][T10338] __kmalloc+0x7a/0x340 [ 203.851644][T10338] ? tomoyo_realpath_from_path+0xdb/0x6b0 [ 203.857372][T10338] ? kfree+0x1f/0x220 [ 203.861378][T10338] tomoyo_realpath_from_path+0xe8/0x6b0 [ 203.866948][T10338] tomoyo_path_number_perm+0x18f/0x690 [ 203.872441][T10338] ? smack_file_ioctl+0x225/0x2e0 [ 203.877466][T10338] tomoyo_file_ioctl+0x23/0x30 [ 203.882214][T10338] security_file_ioctl+0x68/0xd0 [ 203.887159][T10338] __se_sys_ioctl+0x4e/0x190 [ 203.891730][T10338] ? do_syscall_64+0x1d/0x1c0 [ 203.896388][T10338] __x64_sys_ioctl+0x7b/0x90 [ 203.900974][T10338] do_syscall_64+0xf7/0x1c0 [ 203.905460][T10338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.911341][T10338] RIP: 0033:0x45c429 [ 203.915217][T10338] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 203.934808][T10338] RSP: 002b:00007f7425856c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.943202][T10338] RAX: ffffffffffffffda RBX: 00007f74258576d4 RCX: 000000000045c429 [ 203.951153][T10338] RDX: 0000000000000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 203.959125][T10338] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 203.967089][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 203.975052][T10338] R13: 0000000000000667 R14: 00000000004c8f7c R15: 0000000000000000 [ 204.088103][T10338] ERROR: Out of memory at tomoyo_realpath_from_path. 21:51:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:51:24 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x15, 0x1, 0x1d8, &(0x7f0000000000)="4abae8cddcdf072f034392a214596a9e4663827d74c8a4107310f312a283b32d5e32be92b17e8eddcd8be201298f5e26704cbec222f87e7aed896d918388fbbe5cf105edd81cf5f23255cdd092790a6cffe89dd70764a43c1aaa14f7a6b53ae30580df68a0dc9aba67b0557157ef9bf2fbc2c8815a657c26f63322c88a82370e144e050740b664516252ec6278077b4ea9a0b50d28e9f2634593b30c8150525c30d9add47de408bab91fed0e2f96c2b05161d81be4f41b824ffac3543de367f7e0a309eca5c9e88ed373833a432eefda83bf880db9791f83d6cf347cccd8a038f980a54eaf538a3c4bd84bcbabd56107d73ffb6bebddb939313e9f5462a590468e86e90a310cb85ead1deddb150dfe3e1279a36383f81122fc62cd3e23377a12ef41cb6d6c83548b144fa1027d8f83f5fe7a194c20a1ecb5493d813bf4d369a8c9feca204718ba74a42d119fe0d3518576f1c74817e17a3e04eba8c4986c94866b38e7fc1bd041065bad782121865a545d87282436a9028b69705ed14800254d96ea5fcbb7f470929168c310f652b43326d1389ec0ff928b439fad903e40310c4db8d901431153cdaf1e60a74d1608fa5e786d39d76bba7fb3dbab7022928b62552426b83c2d2a56bf09a98449fcee0fc9f9d41a2490878b523ed9aa529a9a6a6cb9c6dff98d1010aaa2ab6a6a73010d512a7f272587cca2f0dbd0c2fc500fdb7936c350c45f04f8b9ef9b5438f923dc7944ce555755eecd0a74dc8d173c3f7c7132fa30d361a39687274e54972e1a6998d9220a63d690a8a089c66f9d6e0a14818ce4add7044cb757841c1284743f41e5f3d69308e4c151786cf67fe825cc9c405ebea4281f117e82978ebd1d020adae9edb55bc4c0e0b4174fc01aa5d4b3b9861c19daa2c487d0174c718761a626959a54ac82c4356e5e1bfef94698f11011242bbe11bbb6f2c4e01070400a49ac31f4eb90e166e74e6d77c416075d88f90e7b3ee10d167226222f094c0260be8586251da6811db853208ae2d23407810b035ece0015d189e2e9de3fa051b1cee9430b22c6eec8ebf056a35eae2cbabccf32e6fffffc0b2e4186c2dde9ff58bf00603d5252a844dfe253f37d44d9389ff003808230731e40e4c2408dae20bc0717c33cfa40b4aaf2e57a66bba41b2d376614ea3d27d25ded12db80ec547244ff76e2547cf8cf8a913e7ef6f7d87eb814bbcec8cefd08a0c1436f6e66480b8de763df16e3c2429d3a420de04fd5b1f49715f91cb45b22df184bf404b9523da928cab2339f683a7b8f79d00e9988665bcb4fef946474f49b7eaa128c2c9eda19ea768603ec74d6f235f5f7b089d408ac9ecf186adbe7abb1a7eeaa1befe5378db8dc5795a36317b719fd90928eda9403850c1b7184e95d758e4be4894df2c887bcb431d4976dc115631425898cd0df92e2da36"}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:24 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f00000001c0)={0x10001, [[0x8, 0x2, 0x3f, 0x5, 0x0, 0xfff, 0x1, 0x2a], [0x7, 0x7ff, 0x3e, 0x400, 0x8, 0x3, 0x200, 0x7fff], [0x1, 0x7, 0x400, 0x4c, 0x1f, 0x4, 0x7fffffff, 0x8000]], [], [{0x800, 0x7fff, 0x0, 0x1}, {0x7, 0xffff, 0x1, 0x0, 0x1, 0x1}, {0xf2e, 0x101}, {0x40, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x20, 0x1}, {0x6, 0x0, 0x1, 0x0, 0x1}, {0xff, 0x9, 0x1, 0x0, 0x1}, {0x94, 0x81, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x80, 0x80000001, 0x1, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x5206, 0x40, 0x1, 0x0, 0x1}], [], 0x400b}) accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@bcast, @null, @netrom, @netrom, @bcast, @bcast, @null, @bcast]}, &(0x7f00000000c0)=0x48) 21:51:24 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 204.182216][T10362] FAULT_INJECTION: forcing a failure. [ 204.182216][T10362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.196110][T10362] CPU: 1 PID: 10362 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 21:51:24 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x1006080, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000000)=0x8) [ 204.196118][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:51:24 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 204.196123][T10362] Call Trace: [ 204.196143][T10362] dump_stack+0x1fb/0x318 [ 204.196167][T10362] should_fail+0x4b8/0x660 21:51:24 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000640)="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", 0x1000, 0xa}, {&(0x7f0000000080)="35640cc6fa6e70d663ff93c959eb7f5c2b6c8daf920808e22f3f22371f1a9d04d499197e5f4d826d768ab6429126d6724ea947823f5318e539b39603444016b13b3ffdbc15", 0x45, 0x8}], 0x921040, &(0x7f00000001c0)={[{@fat=@umask={'umask', 0x3d, 0xfff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'self,,selinux*\xdawlan0mime_type'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) [ 204.196185][T10362] ? __kasan_check_read+0x11/0x20 [ 204.196205][T10362] should_fail_alloc_page+0x4f/0x60 [ 204.196215][T10362] prepare_alloc_pages+0x283/0x460 [ 204.196233][T10362] __alloc_pages_nodemask+0xb2/0x5d0 21:51:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 204.196265][T10362] kmem_getpages+0x4c/0x930 [ 204.196283][T10362] cache_grow_begin+0x7e/0x2e0 [ 204.196310][T10362] ? cache_alloc_pfmemalloc+0x1e/0x1a0 [ 204.196328][T10362] cache_alloc_refill+0x328/0x400 21:51:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) [ 204.196341][T10362] ? debug_smp_processor_id+0x9/0x20 [ 204.196359][T10362] __kmalloc+0x318/0x340 [ 204.196370][T10362] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 204.196390][T10362] tomoyo_realpath_from_path+0xe8/0x6b0 [ 204.196422][T10362] tomoyo_path_number_perm+0x18f/0x690 [ 204.196479][T10362] ? smack_file_ioctl+0x225/0x2e0 [ 204.196506][T10362] tomoyo_file_ioctl+0x23/0x30 21:51:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 204.196520][T10362] security_file_ioctl+0x68/0xd0 [ 204.196539][T10362] __se_sys_ioctl+0x4e/0x190 [ 204.196553][T10362] ? do_syscall_64+0x1d/0x1c0 [ 204.196569][T10362] __x64_sys_ioctl+0x7b/0x90 [ 204.196593][T10362] do_syscall_64+0xf7/0x1c0 [ 204.196616][T10362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 204.196626][T10362] RIP: 0033:0x45c429 [ 204.196638][T10362] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 204.196645][T10362] RSP: 002b:00007f7425856c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.196657][T10362] RAX: ffffffffffffffda RBX: 00007f74258576d4 RCX: 000000000045c429 [ 204.196664][T10362] RDX: 0000000000000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 204.196670][T10362] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 204.196677][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 204.196683][T10362] R13: 0000000000000667 R14: 00000000004c8f7c R15: 0000000000000001 [ 204.285562][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 204.636336][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x2, &(0x7f0000000080)) 21:51:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video37\x00', 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000600)='trusted.overlay.redirect\x00', &(0x7f0000000640)='./file0\x00', 0x8, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x1, 0xffffffff, 0x7, 0x137, &(0x7f0000000040)="41623dbc2414b2cd28108c715efe33acd8c02c693ca833504b3ad67ed17618e5a87b2fccf4e5c9cbf02c7e0ed83f2781f468f9a4a5f2dcfdf131d3a24b239e802727f261a706099309f3b5697ed70be768d4c286400e9e030139966c257fcf4a6003f4fef5037c7aa2249949ad3df6561a915e316b2b64eb81b4621dc99dc270bf6e46ea52a5f2c621c973a1c5f95b208395b20dd8bee7df11094d356f73b0ad227e26bfe80eb18739edd9126ebdf833e881878b4cc5cd1a3603a467f2135aa057d44a31c2b3ecf2597e14e429373b072d692c9c47f8f79d7e28f260959505de9f6d2ae933c32e6b5bb07c0c2c4b8bbd85b547bedebb10c58a7379ae3c0de4e3fd68c74c0e6a06003fd973b05b3932279ff20f44d930f3f46a2fb32fba1337d17aca22f0d9910fc48f0a487ac8fca7d452994d16c1a542f4cfd9fc15dbfb3da6239d1fe9724e4129959ca9ab3326db82bc893da2394f8db8cbead4a1f18ad673034c5d9fe1862c6f0596a81d1baedea6d870ae7beac5aa92e3ed3d2f5b77d30c1c2ab0428d4bc6f98f6f842f51c28fdf38e904fc0a692673917c6cef2224118d7c8d499dbfdb49a54daa69fd022c70c3217f5f9d160a111f54d71340f5c7c97fd7b4c1fd39c36151b1eeb1734c1529972d727ee1a6da35bdc658fea21ae72ecbeee54fb4fabdde0b37f14bab01e128cf5f9b47e6fa351df8a7f0cbd852a49d4597be6cd8b50c4f6cf30dbe80d109730cecce5303c5ba41423b8b9c44f86b0221710ef4b3f54fc1adfa9f3aa48fde6c34452529788a8ffe3acfeb6f3a69b097db6623739bba76380cb96bc09f308468e49352e8bf836cc4a985c3f36081ca681ce5f94661b7eb1db5c8585b32a02536ae332fb69a4814d778aadb14799333938721073ca260b3919bbf62fb156e83f9c87516cf56346a48b82b6211cf52f043b6072b4aac0314fd2f6647e5ebc72e0b79623e1389ac5ddf4bdfe4178e7dd277d1c6167e55a19384b444ed20c07dec1ee41036e62d289daee306140b7b110e85e905735dd18798a056863afac39c7507b261a0f32873e19cf0148426bb1eb18f4a4d865a2ff5abbd57e5800239954ad886c71e4ab99d8327866f9875b1942ba9cae0360016b7b2ad9ac14f6fc57b33722f8a9eaa3cabeced40d5ecffcf3994bc0ba16f0e5d3bb9fa5aeb4bf79b85f46d1c91aee25157ca3cc280321afcac1567654c5b9ef729896c0482f8744e99b4f2070ef43e1f92abe088e57b871646d7f6b0795620902b58d96782f355dd763b07e6206f1efd47a2a86074bb78d711ab291d6594ff41a47594dd54d50e45f62e73004045cd84fb90ccc91a3be8d7759da20ec6c0def510d9cce4e18801323d5b784f417591681b4b2568a1811c7c3751f93b0ec0787478ef973d528a435d3da0eebed30a70683bad0b32d3f3291ce7ae0384"}) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:25 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x398, 0x284142) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) fcntl$getflags(r1, 0x40a) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:25 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) [ 204.926826][T10412] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 204.946749][T10415] FAULT_INJECTION: forcing a failure. [ 204.946749][T10415] name failslab, interval 1, probability 0, space 0, times 0 [ 204.985445][T10415] CPU: 0 PID: 10415 Comm: syz-executor.2 Not tainted 5.6.0-rc2-syzkaller #0 [ 204.994135][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.004188][T10415] Call Trace: [ 205.007483][T10415] dump_stack+0x1fb/0x318 [ 205.011830][T10415] should_fail+0x4b8/0x660 [ 205.016282][T10415] __should_failslab+0xb9/0xe0 [ 205.021054][T10415] ? tomoyo_encode2+0x262/0x580 [ 205.025909][T10415] should_failslab+0x9/0x20 [ 205.030415][T10415] __kmalloc+0x7a/0x340 21:51:25 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:25 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) writev(r3, &(0x7f0000001340)=[{&(0x7f00000002c0)="ebd2a1335c9cf3c2aa4699792543d2cf92c636ba1c00c8bd4dffd27b654066bf1210123f2be27d309b1f8bddfd1c95e6b2c1de6a2cd225", 0x37}, {&(0x7f0000000300)="7d237cc588257385d6075b0c1c185168926752d7d4df5c2e0805cddf16eb80321ba095b912e500a9", 0x28}, {&(0x7f0000000340)="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", 0x1000}], 0x3) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc0505611, &(0x7f0000000200)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ec738934"}, 0x0, 0x0, @planes=0x0}) socket$inet(0x2, 0x80000, 0x8) r4 = open(&(0x7f0000000000)='./file0\x00', 0x8440, 0x7) ioctl$UI_DEV_CREATE(r4, 0x5501) 21:51:25 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x1, 0x9, 0x69}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f9, &(0x7f00000000c0)="ce32f56fa0f3f45c3d69f0ee5bef25c0a21503e484f08daecb564dd88880fba909d3966a8a6fae1a0e6cac1bf5fe54d5a42ffb86a7e599407d9ff4f3b46a10a92a0cfd00073ddc8b08a3f6102e319c49c405d4b7") [ 205.034579][T10415] tomoyo_encode2+0x262/0x580 [ 205.039285][T10415] tomoyo_realpath_from_path+0x65c/0x6b0 [ 205.044940][T10415] tomoyo_path_number_perm+0x18f/0x690 [ 205.050563][T10415] ? smack_file_ioctl+0x225/0x2e0 [ 205.055612][T10415] tomoyo_file_ioctl+0x23/0x30 [ 205.060390][T10415] security_file_ioctl+0x68/0xd0 [ 205.065341][T10415] __se_sys_ioctl+0x4e/0x190 [ 205.069937][T10415] ? do_syscall_64+0x1d/0x1c0 [ 205.074618][T10415] __x64_sys_ioctl+0x7b/0x90 [ 205.079211][T10415] do_syscall_64+0xf7/0x1c0 [ 205.083729][T10415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.089623][T10415] RIP: 0033:0x45c429 [ 205.093516][T10415] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.113114][T10415] RSP: 002b:00007f7425856c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.121522][T10415] RAX: ffffffffffffffda RBX: 00007f74258576d4 RCX: 000000000045c429 21:51:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x10, &(0x7f0000000080)) [ 205.129490][T10415] RDX: 0000000000000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 205.137462][T10415] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 205.147517][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 205.155487][T10415] R13: 0000000000000667 R14: 00000000004c8f7c R15: 0000000000000002 21:51:25 executing program 2 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) [ 205.210976][T10415] ERROR: Out of memory at tomoyo_realpath_from_path. 21:51:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4148, &(0x7f0000000080)) 21:51:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 205.274037][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 21:51:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b2f, &(0x7f0000000080)) 21:51:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) [ 205.469112][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x2, 0x0) [ 205.643001][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.873968][T10432] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.040911][T10457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x400000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r2 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r2, &(0x7f0000002000)='/', 0x1) sendfile(r2, r2, &(0x7f0000000200), 0x87) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x72, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x8, 0x1}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) 21:51:27 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9fec6f271a68b988c2578b7d955400000010003b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="540000005aa300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[r0, r0, r2, r0, r0, r3, r4]}, 0x7) 21:51:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 21:51:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b30, &(0x7f0000000080)) 21:51:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x10, 0x0) 21:51:27 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, 0x0}, &(0x7f0000000a00)=0x14) sendmsg$inet(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="7ac056f91b1015665cc196e6c5e89d20672b231a823008dadea5dc2421a4cd5259ec3c81c77843ec3f37ff81d2b0c6e48a5d4a93113c0046829b6b7d5f3ccbf190f9d1a2b42b66befdc9c39e3402055aec071a9bac5464d3765c184638475d00bbcbe9f875b7a9934c94d4814a9586e49f9545ca5f7d31fbc72b82fb9e0a93411ce271aff36e772f0035d44322759c01caaae4542d22019c772ae663adba724c75313cd45c259f4ce786852d37d76993a514c33ed6e3f8720c88acfeee64590fa6180d9a5483a7167e3af4a65611a3", 0xcf}, {&(0x7f0000000140)="30ef04169ec4a52e4c1a74311a14beb173c038138f239284ec0c8ed99b5f36699da2381d48d14d528498f24e0cd2c52f7c46f33a2f890717b29e35c449d3c98e3d554a70e883850b52202be21c954ebe1ceb5ed989834afccad929629592a99df9be68eeeb4a8b02c24d4153ac906f317713961b0445de4ce1f1a138472a008520c5f77df5f17396bc6d3c02fa33dab912e3063111c80ff8a45f4c36050ac8a65a931b55fc360aca0595f4b9cbeda5e580a6f1eca5da76b9fe206ee4cfde969d9319c894b4697033c22bc0ee0f9bd2151a9ca592ed90120875b3c310a81e0994233d4b1bd651", 0xe6}, {&(0x7f0000000240)="8d9aab420eaa3e40da7e488f436fababe182030b7a2e546156818e83ba87bf44a4f0920ed808faa4173dda55778d9a6f0e89563feb99bf8a021666b12d5904519ab45fcb03e49e5ca5511527d7c791a62a0a15dea5772924e245b80a9915d6a655ba574e735e7ae871fb38fdfe839f5202ba8614a9c1983018ba1730bc6ca4056cdff8903a27d9b329606dcff6cb09de96be1ed26f25946fb766dae484375295c1775e08c2ea577f3bd60ce452b3097d8256da22625ffdd494140e0cef6eec1dc6031a895ef60527220b5f413c6d0a4cd8", 0xd1}, {&(0x7f0000000340)="564aef7991e2f1332775e2375d5d39d55fd7683f47442f53b13234d2f72ec649fba3ecb1c6f00a6563ed2b4faefb201064e9f28d99f4f4ae23e699a11c222090e1a3ef099f57af44566ff1a749eb1544285c9f0354c5f8bd83f05c03661a8c94d883ed4ed2393e76cda174fe1cc8fca2b41dd594e627b5b299b3df3289711ef37118a7dc32894a8733607390958e632584bd84c37866edcf89d40a7cfc67", 0x9e}, {&(0x7f0000000800)="598e69ed889afda32dd0bac733d49ad35a3558682c4a3ac24159b194457b58c6a3c47cec47a83f1d494fa1d1e5cbf0979ea1da62f29563ec9ce9f1ca85c032d15127acc9abbe8f695d062aa865726f70217be9326e9d9156ec38c5462899ac32fbf0c49010f6aacc3e30578d2bf34b0d88c1030fade637117456d3d896a464d6e4f72e37c53a20c647efa10ff929f923b5b5d0b7f801d2755c928a9ce5002ad80a4486a9eef12bb9eeeb2e96d5ee0d36c72396fb8cfd89ba106d1116", 0xbc}], 0x5, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffff4b}}, @ip_retopts={{0x10}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x8a, 0x3, 0xb, [{@broadcast, 0x5}, {@local, 0x3ff}, {@rand_addr=0xfffffffc}, {@rand_addr=0x4, 0x5}]}, @end, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x0, [{@loopback, 0x5}, {@local, 0x3}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1000000}]}, @cipso={0x86, 0x29, 0x0, [{0x2, 0x4, "06ae"}, {0x5, 0xe, "c1c284201bfd2f79c2423eab"}, {0x0, 0x11, "a802a9bd1309b008e42e7a1b310951"}]}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x4, [{@loopback, 0x40000000}]}, @lsrr={0x83, 0x13, 0xce, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x5, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x8}, {@loopback, 0x1ff}, {@empty, 0x3}, {@broadcast, 0x8}, {@loopback, 0x200}, {@rand_addr=0x1000, 0x634d}]}, @generic={0x89, 0x6, "ca529f64"}, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x8, [{@multicast2, 0x5}, {@multicast2, 0x3}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff1a}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x9d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @empty, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xf, 0x20, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_prespec={0x44, 0x4c, 0xf0, 0x3, 0x4, [{@broadcast, 0x7}, {@remote, 0x9}, {@empty}, {@multicast1, 0xfffffffe}, {@empty, 0xf2}, {@local, 0x8000}, {@loopback, 0x6}, {@remote, 0x7f}, {@empty, 0x101}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb1fe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x248}, 0x4000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x50, r2, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video1\x00', 0x2, 0x0) 21:51:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b2f, 0x0) 21:51:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b31, &(0x7f0000000080)) 21:51:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04022cbd7000628897d4b76ba68f411afbdbdf251000002b0800310044a2000005003500040000000a00"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4810) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/41, 0x10000, 0x0, 0xf36a, 0x5}, 0x20) 21:51:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 21:51:27 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0101000000000000000001000fd03dfc2df0c2b62c361a6d290100a7effb2a7e3e57ca90b981978b4ef257f65ccaf8de36f11f15da4d000000d83ef7dacf6943d75d69a6a9794d"], 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x91) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'veth0_to_hsr\x00', {0x2, 0x4e20, @broadcast}}) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000440)={0x201, 0x9, &(0x7f0000000340)=[0x3ff, 0xfe59, 0x10001, 0x0, 0x34, 0x400, 0x6980, 0x400, 0x101], &(0x7f0000000380)=[0x8, 0x7, 0x5], &(0x7f00000003c0)=[0x80000000, 0x5, 0x7fff, 0x1f74, 0x800, 0x3f, 0x200], &(0x7f0000000400)=[0x10001, 0x8, 0x200, 0xffffffff, 0x3, 0x9], 0x0, 0x5}) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x80, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000001c0)={0xfffffff8, "1f57a003f5420b6f6a450f53adf0534e8afeef747d65229f0d2b4a21953879d8", 0x1, 0x1, 0x4, 0x40000, 0x4000000, 0x2}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000000)) 21:51:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b30, 0x0) 21:51:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b32, &(0x7f0000000080)) 21:51:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:27 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 21:51:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b31, 0x0) 21:51:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b33, &(0x7f0000000080)) 21:51:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x25c31b83) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) recvmsg(r0, &(0x7f0000001200)={&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/60}, {&(0x7f0000000100)=""/120}, {&(0x7f0000000180)=""/209}, {&(0x7f0000000280)=""/153, 0xffffffca}, {&(0x7f0000000340)=""/121}], 0x10000000000001d5, &(0x7f0000001100)=""/221, 0xdd}, 0x60) 21:51:27 executing program 4: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xa30000, 0x200, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0903, 0x40, [], @ptr=0x6}}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000000c0)={0x6, 0x3}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) 21:51:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b32, 0x0) 21:51:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b34, &(0x7f0000000080)) 21:51:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) 21:51:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = dup(r0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x800, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044019}, 0x0) accept$ax25(r1, &(0x7f0000000140)={{0x3, @netrom}, [@remote, @rose, @bcast, @bcast, @null, @bcast, @netrom, @netrom]}, &(0x7f00000000c0)=0x48) 21:51:27 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r2, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000000c0)=r5) 21:51:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b33, 0x0) 21:51:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b35, &(0x7f0000000080)) 21:51:28 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) 21:51:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b36, &(0x7f0000000080)) 21:51:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b34, 0x0) 21:51:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) 21:51:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b35, 0x0) 21:51:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, &(0x7f0000000080)) 21:51:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3a, &(0x7f0000000080)) 21:51:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) [ 208.695413][T10567] __nla_validate_parse: 12 callbacks suppressed [ 208.695422][T10567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.858695][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, &(0x7f0000000080)) 21:51:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b36, 0x0) 21:51:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3b, &(0x7f0000000080)) 21:51:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:29 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x3, 0x4) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)={0xffffffff, 0x2, 0x4, 0x0, 0x7ff, {0x0, 0x2710}, {0x1, 0x8, 0xff, 0x6, 0x4, 0x2f, "f0ad3a19"}, 0xfffffffa, 0x3, @userptr=0xfffffffffffffffc, 0xfffffea7, 0x0, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mincore(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) 21:51:29 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/74, 0x1020000, 0x1000, 0x1, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x62086f92d82365a3, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000240)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x600, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f00000001c0)=""/125) 21:51:29 executing program 0: ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000100)=0xc) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x214, 0x1, {r2, r3/1000+10000}, {0x0, 0x2710}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "08f125204d7501529f6c2c6a749c1a61a363208f7b90dd4f7e8c6c737431961d80f015b885556513a8deb1915bb77a05668ea8a6adc5dedb0bbbf368660c8c6a"}}, 0x80}}, 0x24000041) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x5da0bd4cf38a555c, &(0x7f0000000040), 0x4) shutdown(0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3c, &(0x7f0000000080)) [ 209.122080][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, 0x0) 21:51:29 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x9b0000, 0x9, 0x58, r0, 0x0, &(0x7f0000000000)={0x990905, 0x10000, [], @value=0x5}}) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x100000001, 0x3f, 0x8001, 0x10000, 0xfffffffffffffeff, 0x8}) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, &(0x7f0000000080)) 21:51:29 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x80000000) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 21:51:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3d, &(0x7f0000000080)) 21:51:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3a, 0x0) 21:51:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:29 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/138, 0x1000000, 0x800, 0x151f, 0x3}, 0x20) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) 21:51:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, &(0x7f0000000080)) 21:51:30 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8b42, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002580)={&(0x7f0000000080)=@newtaction={0x24e8, 0x30, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{0x24d4, 0x1, [@m_csum={0x144, 0x1e, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x1f, 0x6, 0x20, 0x2}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x7, 0xf606}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1ffc000, 0x20000000, 0x3f87}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x6, 0x8, 0x40000000}, 0x6e}}]}, {0xbd, 0x6, "db91774f3b1ffd9529f2c1543c0171a63a328ed2eee1ac6e4099fc10ad559b1aa06271ca543736c41ee02ae3581548d80c54110d7ce27d36af2e4dcb04c5d648c570ef471d6068bb8bbfd5dad69e3bb5f12308265bf2316ea72d531945361e96597ad0b80292ae552c37c956034972ce8b024ca1c7ce0c5a321a47f41e3b912ef02c39bdfefdfde9f0965c73ff2b7b35232a20b13b028bddf74342bac7d4a62a9d51a0a458238170d2f32e1a26b3346bc2117d3be0e55bb532"}}}, @m_bpf={0x98, 0xc, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x2000, 0x0, 0x1, 0x10000}, {0x0, 0x8f, 0xff, 0x9}, {0x6, 0x2, 0x5, 0x6}]}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x6, 0x80, 0x76, 0x9}, {0x7da, 0x0, 0x9, 0x400}, {0x3, 0x7, 0x1, 0x8}, {0x6, 0xbb, 0x44, 0x9}, {0x9, 0x8, 0x64, 0x2}, {0x7, 0x81, 0x2}]}, @TCA_ACT_BPF_FD={0x8}]}, {0x2e, 0x6, "11d38c9eb0188b4b8c461ff55c17bf60cc13b11d7dc5f64938c5c5f304b6652c3de695aa5c00aae8fa22"}}}, @m_skbmod={0x1038, 0x11, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="f6d37968deb7"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x818}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x1004, 0x6, "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"}}}, @m_skbmod={0x1044, 0x14, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xffffffff, 0x4, 0x0, 0x100}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x1004, 0x6, "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"}}}, @m_simple={0xf8, 0x1e, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x19, 0x3, '/proc/self/net/pfkey\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x83d, 0x8, 0xa681fdf7f278dc98, 0x5, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x8, 0x8, 0x800, 0x4}}]}, {0x96, 0x6, "6de6956b80ade467fe5a40f8c9d653be09b219f2dfc2c4fdff71545b97ae240543335b53c82810c3dd551a71e9fa8cb6fbae2ae41cf7c03eaeedb18234a7ca6b212c13f295c775a9ddf9002d869be558f4de2ddc0b97fff1b44560050e2cbbeabcc9d5e21e110ee764c59a6609b14e581c29f22b9c3ea43ef01ce6ec9748ed44f0d46bf2e144924f0b972b5bc236e4bb5fa0"}}}, @m_mpls={0x98, 0xd, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0x79, 0x6, "c8393ee459d32b6db723273ce204faf0d15e6a884647598ed151e15c3dc05e7205cbe2a24114376ee906a2ed1933f15583589a02052fe0c4304f640d00b84009ad4bb51213b3030ae027d105b5e573cceebd0645e051416d2992cff0485618aa43e25de8101135325c061a1086c5bcfe328b239614"}}}, @m_ipt={0xe8, 0x1b, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x7e, 0x6, "9b8a0c5e1d5370f246aaa551403251a6e55edada6e1c655dde2e43b0d6468118003bc3365d43a3cfd93fb2afdb5f8b978d5356f2a988f1d8c554b7150a1522e39c865f6d05c272cab19b353e60d3c2acd8653652fbfd66c60f8503c0a6c8ba774c528dd4fe0cc0bd0c798d8ebc6c8884b773bb2da1805e888cef"}}}]}]}, 0x24e8}, 0x1, 0x0, 0x0, 0x20000824}, 0x4000001) 21:51:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b40, &(0x7f0000000080)) [ 209.517568][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3b, 0x0) 21:51:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x3, 0x3, 0x288}]}) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/91, &(0x7f0000000080)=0x5b) 21:51:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b41, &(0x7f0000000080)) 21:51:30 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b37, &(0x7f0000000080)) 21:51:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3c, 0x0) [ 209.696056][ T27] audit: type=1326 audit(1582321890.208:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10673 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f26a code=0x0 [ 209.744836][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x6881, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fchmod(r2, 0x1) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)) 21:51:30 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:30 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b37, &(0x7f0000000080)) 21:51:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b44, &(0x7f0000000080)) [ 209.828979][ T27] audit: type=1326 audit(1582321890.248:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10673 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f26a code=0x0 21:51:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3d, 0x0) 21:51:30 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000040)=0x200) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10010, r1, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x6c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8081}, 0x40140c1) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="2bce2dd469cb1cee8950b7af988bc537fc40e8ca0a02bf92193dff966ddf3a04935d6d38f9551718674a72db4485152fca0555ebc2152f8ad960a93173236f3113edff10ecb27dcff22793af87d66e23477bb69e540db9895a37e240df01476a784731ea0dc4538d8891b4313f19c9e931220ac2f70310c6fee94bc3b8140ebad1ed0fb761341b1644f2c64b0ee00ff8469d099d4116bb31a40ae20986cc3760b61e62d7addcfbbad35069c95c3ffc44d783aa870924a35f4b2961723cd1e96e9a4d6ea435fc08f972c4ccd821354e11ca3c86", 0xd3, 0x5}, {&(0x7f0000000100)="39741326dfc866354c04402dc50e0b6bbc7485e97ceb9347570db50b", 0x1c, 0x2}, {&(0x7f00000002c0)="c15b368217c7352b57cac31b19df763b433b0b4c087ac4ae13620d489cfd28c2a726d6368cc080ffb61308ab894fb60bab1a7c5efe280d85bd0fbc7d1655fbde2efea7b5cf3ea8a3c69d11c409a245ad10c0622343bd9f0881a87a5b6a25fd8ecce8c817072e9a40a8f588f9798cdafa6fda18f8f59730f691272ae37a4b8b590fb481d7ba55dabe6c0d9fd37d9ae8373cff86350cb4ceac1ed8f230e3c5e553667091f3c3f263ae6db1e1436f6d23da09771f439bd845c7d860a7b114b2ef13f049acec97bee3dc831808a27898cb3ecae20c4448d974691d72990468e85fa7a0e164d99d02b3ed61cf04e935dd045bfc73302dd4ed49", 0xf7, 0xb5}], 0x0, &(0x7f0000000140)='wlan1\x00') 21:51:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b45, &(0x7f0000000080)) [ 209.984403][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:30 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b37, &(0x7f0000000080)) 21:51:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b40, 0x0) 21:51:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b46, &(0x7f0000000080)) [ 210.136609][T10709] nfs4: Unknown parameter 'wlan1' 21:51:30 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x110, 0xffffffffffffffff, 0xef14d000) 21:51:30 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b37, &(0x7f0000000080)) 21:51:30 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b47, &(0x7f0000000080)) 21:51:30 executing program 4: r0 = fanotify_init(0x1, 0x400) ftruncate(r0, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x1100904, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r1}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x30, @mcast2, 0xb0}}, 0x0, 0x0, 0x2f, 0x0, "e575951b62ffb9d635d9ad61ae91c73fc5254bb0002ea9dc4ae073b0ba52802190ef0320cf1bef294daa991c8e18e1efad396dc3edc941db4d730aa4f707e2a8abb95e5e4b5530cc1e8de87f587edcaf"}, 0xd8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40804) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000140)={0x3, 0x0, 0x7, 0x8, 0x137, &(0x7f0000000640)}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=@RTM_GETNSID={0x1c, 0x5a, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NETNSA_FD={0x8}]}, 0x1c}}, 0x50) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000000c0)) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{r6}, 0x1000, 0x5, 0x2}) 21:51:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b41, 0x0) 21:51:30 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab295f9bea1d1c9af8b3a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b9421855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0xf, r3, 0x3c}, 0x10) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:30 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b37, &(0x7f0000000080)) 21:51:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b48, &(0x7f0000000080)) 21:51:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b44, 0x0) [ 210.463516][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:31 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) socket$l2tp(0x2, 0x2, 0x73) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b49, &(0x7f0000000080)) 21:51:31 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b37, &(0x7f0000000080)) 21:51:31 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200000, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4}, 0x6) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:31 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b45, 0x0) 21:51:31 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x0, 0x28, &(0x7f0000000040)='loposix_acl_access[wlan1(eth1}cpuset/$+\x00', 0xffffffffffffffff}, 0x30) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r7}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={r7, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000001c0)={r8, 0xb0, "5b1957ffef58c14cd3ac56b0ecfe018d64848cef36ebdd83c38b2005d43ca42a84407244a2dfe31dfddc775ee23cc5b0b5a53297b9d64dfa60f510ccc5172db69c7596677985de8338dee13bd4692050d66f22f8420d046ad7c0446b761d07eafb9d3fa43b42e80ffdc9eb41ede2daafb1757b60a6a4541fb652567bb9c0ee5a982c03382a12ef6b34e4e13156319942e513a4c00e94c2773d9d28a0e8e9f16636091476d20f2af41d109cf840cb60cf"}, &(0x7f0000000280)=0xb8) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x80000001, 0x7, r3}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4a, &(0x7f0000000080)) 21:51:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, 0x0) 21:51:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b46, 0x0) 21:51:31 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) bind$netrom(r1, &(0x7f0000000040)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) 21:51:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4b, &(0x7f0000000080)) 21:51:31 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000a, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200600, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x800, 0x3, 0x6, 0x3, 0x4, 0x7, 0x3}) [ 210.887202][T10786] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:31 executing program 1: ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000100)=0xc) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x214, 0x1, {r2, r3/1000+10000}, {0x0, 0x2710}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "08f125204d7501529f6c2c6a749c1a61a363208f7b90dd4f7e8c6c737431961d80f015b885556513a8deb1915bb77a05668ea8a6adc5dedb0bbbf368660c8c6a"}}, 0x80}}, 0x24000041) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x5da0bd4cf38a555c, &(0x7f0000000040), 0x4) shutdown(0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b47, 0x0) 21:51:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, &(0x7f0000000080)) 21:51:31 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:31 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xabb}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) 21:51:31 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz0\x00', {0x9, 0x81, 0x2, 0x2}, 0x3, [0x0, 0x3, 0x4, 0x80, 0x1f, 0x80, 0x101, 0x9, 0x1, 0x5, 0x200, 0x3cc, 0x81, 0x200, 0x7f, 0x5, 0x2, 0x81, 0x80000001, 0x0, 0x8948, 0x3, 0x1f, 0x2, 0x10000, 0x8, 0x5, 0x0, 0x9, 0xe15, 0x80000000, 0x7, 0xfffffffe, 0x1, 0xfe, 0x2, 0xef, 0xfffffff7, 0x1f, 0x4, 0x7, 0x2eb, 0x6d260ece, 0xffff24d0, 0x1f, 0x3, 0x3, 0x0, 0x1, 0x0, 0x6, 0x3, 0x8, 0x0, 0x3, 0x2, 0x401, 0x401, 0x9, 0x3, 0x3, 0x9, 0x40, 0xe1d], [0xfffffff7, 0x4, 0x586, 0xaa, 0x2, 0x1, 0x3, 0x1, 0x4, 0x2, 0x9e3, 0xe12f, 0x8, 0x0, 0xfd4, 0x45fc6b27, 0xffff, 0x7f, 0x7f, 0x8001, 0x40, 0xffff8dc4, 0x7, 0x8, 0x2441dc9e, 0x6d9, 0x81, 0xfff, 0xff, 0x6, 0x7, 0x9, 0x2, 0x4, 0x8, 0x80000000, 0x8, 0xc9, 0x3, 0xd, 0x6, 0xfffffff7, 0x0, 0x1, 0x2, 0x1ff, 0x7ff, 0x2, 0x24, 0x3, 0x0, 0x7, 0x6, 0x100, 0x1, 0x7f, 0x3f, 0xff, 0x9, 0x6, 0x3ff, 0x8, 0x2d, 0x3ff], [0x7e15b5d7, 0x3, 0x6, 0x2, 0xffffffff, 0x6, 0x7, 0x7f, 0x0, 0x5, 0x3, 0x40, 0x5, 0x80, 0x3a, 0x7, 0x0, 0x8, 0x8, 0x3, 0x9, 0x9, 0x7, 0x10a1, 0x80, 0x7, 0x8, 0x800, 0x5, 0x1, 0x8, 0x5, 0x1, 0x6, 0x24c, 0x1f, 0x4bb, 0x0, 0x9, 0x4, 0x1ff, 0x1, 0x4, 0x7fff, 0xfffffff9, 0x80000000, 0x10001, 0x2, 0x3, 0x3, 0x21, 0x9, 0x5, 0x1, 0x4, 0x0, 0x9, 0x5, 0x200, 0x4, 0x80, 0xa236, 0x0, 0x8], [0x5a, 0x1, 0x4, 0x4, 0x3ff, 0x2, 0x2, 0x401, 0x2, 0x3f, 0x5, 0x401, 0x200, 0x400, 0x1, 0x8, 0x7, 0x2, 0x800, 0x1, 0x6, 0x7, 0x6, 0x9e78, 0x80, 0x3f, 0x800, 0xffff, 0x36, 0x4ed, 0x0, 0x9, 0x6, 0xffffff81, 0x8, 0x80000001, 0x80, 0x5, 0x9, 0x1, 0x2, 0x7fff, 0x3, 0x6, 0xd36c, 0x80, 0x6, 0x40, 0x990, 0x4, 0x401, 0x7, 0x4, 0xfffffff8, 0x5, 0xffffffff, 0x10000, 0x81, 0x3, 0x5, 0x3, 0x0, 0x81]}, 0x45c) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000004c0)={0x0, @bt={0xdb2, 0x10000, 0x0, 0x3, 0xc5a, 0xf4bef8f, 0x0, 0xeb, 0xfffffffe, 0x3, 0xff, 0x7fffffff, 0x408, 0x9, 0x8, 0x20, {0x7ff, 0x1}, 0xe1, 0xd8}}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4d, &(0x7f0000000080)) 21:51:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, &(0x7f0000000080)) 21:51:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b48, 0x0) 21:51:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = dup2(r0, r1) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x1d, 0x8}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x100000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, &(0x7f0000000080)) 21:51:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4e, &(0x7f0000000080)) [ 211.299185][T10829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:31 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r7}, &(0x7f0000000380)=0xc) sendmsg$inet_sctp(r1, &(0x7f0000000540)={&(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="690b4b8eec2d131b3f84e50911a018ddcad0b1ffafd0a84c5b8800ba52718d95ed", 0x21}, {&(0x7f00000000c0)="a6e2bcb0e4a4cc427faf60a4c1bbc2f8aeba", 0x12}, {&(0x7f0000000100)="56bae223c369f4debeac756ba4e66e22f6699949ea5d68e60dcd86f8fbf80e3b45e1b088ad409c9e13677c28262e5291e8dcb38a1008c7d8c03db4131f752488badc54dc4659107c483f19695c4865bf6f0fc9f49b2cd128f90ecb428bb8bfd427a5833c925316662d87e1032ffbce99f2435c2ee0ebb57bb637eb7c91827f327d6217d66d16ee8cbfd7768d961302df848967ab961d75a3e5b3996a189d04222ea70fb9038eeb49", 0xa8}, {&(0x7f00000001c0)="23e4d19b11710b31665598737f36495719d4ee4e4b8417f1ff8d6e28afcf787230bb03a5ba56db8505ff717c1385fad9add1f209e1fd206d8b1da17398b38029e2cc4e390cd76ef43ceb9f000eeba95997d48f7cb77636f93aa716b7e04d3d334e4e6c67ec168b5da7c71680ec67e9bae204c2c1677128fd6694e61434cbadcd7bb7a1480cf4116b63ac00fb2b6955ae0488b5ad6353d25066ffbf0c01fa127036d545f6181400c20e16385ecef8649b19c85727242fa22a3a8753395ad0b1b7142b482c", 0xc4}, {&(0x7f00000002c0)="648044e8a70ae849df393ce59131a4b9edcd1c4be0e66565c3ee66b89eaa06edc7bfe5e519c470688fd6bbc1959d109aae3a95ef6910bca05b221c2d6af786d9b2b92e23d23d1800ca609d3e372003fbf4139ccbb845ea7226aefce40c7463e8895a63440f35555a912b6d02182cd855e74848b1e49bd353565f4388f0819eda87b2287914cdb3f4fa8975e8898a6f43deadaf94057b4ba65577753831b24a3946fe4e809f5e4a2230485d8c17547af993", 0xb1}], 0x5, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0xc, 0xffffffdb, 0x7ae3, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x1, 0x8000, 0x4, 0x8, 0x1, 0x8000, 0x2, r7}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @init={0x18, 0x84, 0x0, {0x75, 0x2, 0x1, 0xbe99}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @sndinfo={0x20, 0x84, 0x2, {0x5bd4, 0x8, 0x4, 0x1}}, @init={0x18, 0x84, 0x0, {0xe1, 0x0, 0x5, 0x1}}], 0x120, 0x50}, 0x8001) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b49, 0x0) 21:51:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, &(0x7f0000000080)) [ 211.459195][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:32 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:32 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b52, &(0x7f0000000080)) 21:51:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4a, 0x0) 21:51:32 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)) 21:51:32 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 21:51:33 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x416000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x112, r2, 0x18670000) socket$packet(0x11, 0x3, 0x300) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x4010, r1, 0x180000000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f00000001c0)={0x6, [[0x7185ce70, 0x4, 0x800, 0x5, 0x5, 0x76a, 0x3ff, 0xa4f], [0x1000, 0x1, 0x8, 0x0, 0x100, 0x3, 0xfff, 0x7], [0x25, 0x7ff, 0x20000000, 0x8, 0x3, 0x1ff, 0xf95b, 0x401]], [], [{0x4, 0x80, 0x0, 0x1, 0x1}, {0x4, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x57, 0xfffffffb, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xf0, 0x1, 0x0, 0x0, 0x1}, {0xfffffffe, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfffffffa}, {0x4, 0x201b, 0x0, 0x1, 0x1, 0x1}, {0x3ff, 0xdc4}, {0x9, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x56, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6, 0xc70d, 0x0, 0x1, 0x1, 0x1}, {0xfffffffc, 0x5, 0x1, 0x1, 0x1}], [], 0x6}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') 21:51:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4b, 0x0) 21:51:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b60, &(0x7f0000000080)) 21:51:33 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x20, 0x7966, 0x2, 0xff}}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:33 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)) 21:51:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:33 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)) 21:51:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, 0x0) 21:51:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b61, &(0x7f0000000080)) 21:51:33 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xcc0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:33 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)) 21:51:33 executing program 0: socket$xdp(0x2c, 0x3, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4d, 0x0) 21:51:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b62, &(0x7f0000000080)) 21:51:33 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x220140, 0x0) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000040)={0x6, 0x4, [0x400, 0x6, 0x1, 0xffb7, 0x9], 0xf01}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:33 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)) 21:51:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4e, 0x0) 21:51:33 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r1, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(0xffffffffffffffff, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r6, &(0x7f0000000900)={0x2c, 0xf, r4, 0x3c}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r9, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = dup3(0xffffffffffffffff, r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r11, &(0x7f0000000900)={0x2c, 0xf, r9, 0x3c}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r13, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r14 = socket$inet_sctp(0x2, 0x1, 0x84) r15 = dup3(0xffffffffffffffff, r14, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r15, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r15, &(0x7f0000000900)={0x2c, 0xf, r13, 0x3c}, 0x10) r16 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r17, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r18 = socket$inet_sctp(0x2, 0x1, 0x84) r19 = dup3(0xffffffffffffffff, r18, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r19, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r19, &(0x7f0000000900)={0x2c, 0xf, r17, 0x3c}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}, @IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @vti_common_policy, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r13}]]}}}]}, 0x58}}, 0x18080) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r0}, 0xa2f9, 0xfffffffffffffff7, 0x7}) 21:51:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b63, &(0x7f0000000080)) 21:51:33 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x2d277b529e558381) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000640)="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", &(0x7f0000000040)=""/241}, 0x20) 21:51:33 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)) 21:51:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b52, 0x0) 21:51:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b64, &(0x7f0000000080)) 21:51:33 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x810, r0, 0x80000000) signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x40]}, 0x8, 0x80000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/116, 0x74}, {&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f00000003c0)=""/42, 0x2a}], 0x6, 0x0, 0x0, 0x2}, 0x10) 21:51:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, 0x0) 21:51:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, &(0x7f0000000080)) 21:51:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b60, 0x0) 21:51:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, 0x0) 21:51:33 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000000c0)={{0x3, 0x0, @identifier="20e17fcec7e63b371c42027f6b236020"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0xfffffff7}}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={r6, 0x1}, &(0x7f0000000240)=0x8) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r7 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) 21:51:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b66, &(0x7f0000000080)) 21:51:34 executing program 4: setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x400080, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2404, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x80000000) io_uring_setup(0xca7, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x307}) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/168) 21:51:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b61, 0x0) 21:51:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, 0x0) 21:51:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b62, 0x0) 21:51:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b67, &(0x7f0000000080)) [ 213.709958][T10979] __nla_validate_parse: 10 callbacks suppressed [ 213.709966][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b68, &(0x7f0000000080)) 21:51:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x400200, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000440)={0x6}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x248ec2, 0x0) fdatasync(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/213, 0x10000, 0x1000, 0x0, 0x1}, 0x20) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f0000000280)="88a66843f98d5ecb55fc655065a7a3b91e9ef6e4ebba8f5bacd3ddf4c8872f7f698a44af26bb6e5de8363b54f9ea925ab0469502202344d6f97f493add907d52d278d7d476561994c6bdd3049aab05de60624ab78a5443bcf0bc622915f32db33af3a5a98f143d", &(0x7f0000000300)=""/174, 0x4}, 0x20) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b52, 0x0) 21:51:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b63, 0x0) 21:51:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b69, &(0x7f0000000080)) 21:51:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b52, 0x0) [ 213.990436][T11003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:34 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000001c0)=""/176) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:51:34 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x141000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x40080, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="5400000010003b0e000000000000200000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) fchdir(r3) connect$x25(r2, &(0x7f0000000300)={0x9, @remote={[], 0x0}}, 0x12) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="640761559cff697d25e59475933fcbc161c95b649044f6dabb7db492f459a38e268c0490bd129665d77d22dd9c26927edc7f3f6521bd570354e70f1e518f608c60fe23b947bfb43139354c964b5a5e2c836055c9056ec6d34d8d7b4ff7e8d53a82976715054ec5b1d4f45f7b4ba8a25afd2708f3fd416b3204625e13dcad244b1b6dff338701b2a0bae16f432331083c81df7e71f1b0f19a0bd0fc69242d31d1f759fe68a663d23c1b7ec0d20395c92d456f69301eef1b241f03d35b7332d8dde38d8f35b28fe16923c9f4bcc9c60e740248a1c8378a12b591e7292c", 0xdc) 21:51:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b64, 0x0) 21:51:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b52, 0x0) 21:51:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, &(0x7f0000000080)) [ 214.172423][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:34 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b52, 0x0) 21:51:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6b, &(0x7f0000000080)) 21:51:34 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b52, 0x0) [ 214.320612][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6c, &(0x7f0000000080)) 21:51:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b66, 0x0) 21:51:35 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) [ 214.478599][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.638907][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 214.808696][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:35 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/192, 0xc0}], 0x5, &(0x7f0000000400)=""/172, 0xac}, 0x3) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x54}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x200, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000940)={0x0, 0x1, 0x6, 0xc, 0x1fd, &(0x7f0000000540)="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"}) fcntl$setpipe(r1, 0x407, 0x66) socket$inet_mptcp(0x2, 0x1, 0x106) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b67, 0x0) 21:51:35 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b52, 0x0) 21:51:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6d, &(0x7f0000000080)) 21:51:35 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf, 0x10012, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b68, 0x0) [ 215.032428][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b70, &(0x7f0000000080)) 21:51:35 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b52, 0x0) 21:51:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b69, 0x0) 21:51:35 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40240, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000640)={&(0x7f0000000040)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="b59f58a78b0afa754ec2fb357ac8530cbe4fdcff9696c8ecefa4ee657cce389bcf300875b69d9f93d0ec88945c97931b2bbee0c23470c147efe3b3b92d3e8f35b519a88067e2daaf66cb6136bef05aa0a6b5e21f63a033bd0e36b2a0d9", 0x5d}, {&(0x7f00000001c0)="ea40ae9e8d4119290b8094d3349f6a621131505622e0b89c3c7ac25f0ec25dd540fcd7b022610a7a557367e3d1f55c3d6385c2c74fd67bcf55a360e1f09c56f8d7689d035d9134625919e550b9216f838c9955b22472396d3c46f42a62f4641eb8987cf12661e744ec53a3f2b153cba7a9aca1b1cfa9d6872657aebbaff682da4ea72b357b24168b0828108e7b623f3d79cb686a90bd789736005ad913fbde5350d523560c5c8ad9f2dd1441d4c92d3fecd0c9cf", 0xb4}, {&(0x7f0000000280)="ebb36db89879e1562f159a8e84465549e53412ead709b6d411679a004aeab44f12672057211e586ccf592bd886d018188c8dff934c37db06be6a6a7911eb20881a679a7d7c0ea09b60825b473e058b4e2504b0f17bf9ea05abbc215da5ae49242c128cb608d24b5f2f3abfbf204c9deb76e4544ad4f796ebec02d32efc390eff77254af5387ba6b456510da3dd4d11ae0b35db8157767f592f3e8a3ed54269365eadfc10c7f8b3224f2c2e06b1e3efeec05bb788381d89b5409262a83f66", 0xbe}, {&(0x7f0000000340)="ccd02e9ded2245346bc92d49a159f3b005b88b5b521dc652eee16940af9d8fb95f1608547fcf918c61b3eb207acfeda37670b86a77738da785bd71dd236891ebbd67032a8ce4cef74770e5541affa889d82cfc5411bc5e01e8bdebfaffa44a7e8339eae904d523ccdb7979db9119033f572104787a93f79c6a7cdaab3fcda3ce0a53c0691c6838bc5ec311041ce596d6dc62cff84461ac59b05f5addd5ce783dcaf2166e493286d4dcc59713434ddcf4199a20139f66678aee1a82f3910de5db5a970e771286cca106aa5396de14bd65438680b429d5465a0c332d067d81cfbc41e77c5b1fd634436fec29cb175c9242df41d045676215", 0xf7}, {&(0x7f0000000100)="8429919c8c2b3a1e1697fa7a5ff53d6912cba0714bc36b34b300924a60a8ba2d907d1f1c28485366997cf7a9169dbb8ce4c7d2e3ffe8d34566c276ee531d26b6661092b33c29ea6a9a1a5edc91464002ae983e0bac7d3e605ab47d588c78a3e822b4fdf187cfe086e7ac4b9497ada914f3661f162f53a793c7664c4312", 0x7d}, {&(0x7f0000000440)="e3099809b0393fb1fa187459e747718dd2e707caa696ac1f95943349a8258d2892c61edad1494395fb49d99b91c2f33fe3a0331eb4ac50b5ca1f251d43ee6fdd1081c792", 0x44}], 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000160000000000000006000000227d0000000000ee370000000000000084000000000000004f7403a6d36d000800c701"], 0x30, 0x40000}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x80000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000002900)={0x28, r2, 0xf591d3ee456bd401, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x190, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17e}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x524a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc080}, 0x4000800) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:35 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b52, 0x0) 21:51:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, &(0x7f0000000080)) 21:51:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, 0x0) [ 215.368727][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.384633][T11110] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:35 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000140)='posix_acl_access\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) r3 = dup(r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0xff}, &(0x7f0000000100)=0x8) 21:51:35 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b52, 0x0) 21:51:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6b, 0x0) 21:51:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b72, &(0x7f0000000080)) 21:51:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, &(0x7f0000000080)) 21:51:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4bfa, &(0x7f0000000080)) 21:51:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6c, 0x0) 21:51:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, &(0x7f0000000080)) 21:51:36 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x404, 0x8, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x36}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'ib'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x7}, @timestamp, @mss={0x2, 0x10001}, @sack_perm, @timestamp, @timestamp, @timestamp, @window={0x3, 0x1ff, 0x6}, @window={0x3, 0x4, 0x2}, @sack_perm], 0xa) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4bfb, &(0x7f0000000080)) 21:51:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6d, 0x0) 21:51:36 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0xa416) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x8040, 0x0) fcntl$getown(r2, 0x9) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, &(0x7f0000000080)) 21:51:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b70, 0x0) 21:51:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4c00, &(0x7f0000000080)) 21:51:36 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)) 21:51:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, 0x0) [ 216.028946][T11150] tipc: Enabling of bearer rejected, illegal name 21:51:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:36 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4, 0x7, 0x18f601c9, 0x3ff, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x800, 0x0, 0x1, 0xa, r2}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000040)=""/138) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000180)={r5, 0xac, "825c940e534cea1f7d6b98ec8c92ad8cf3f754a7e228baae787d26e832b6c05115e5e4362c478783dc242e514de7cf4286fb9f426ca96d9ee85f07323ff9af03733d20b78ba73fe3fde0fb50510a2d299c423eb1b2a8d9595b93c3d3e9390bb21c1ee51b3e6784c1cfba6bb99f147f8da85aa60075d09653e66120887b1a89c657d755a6b879b106ff4f1f853d16754c550ae7cba30a6c6805fe3fff8b8494ca25557970ce99f844c1c8e93d"}, &(0x7f0000000240)=0xb4) 21:51:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4c01, &(0x7f0000000080)) [ 216.110122][T11156] tipc: Enabling of bearer rejected, illegal name 21:51:36 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10040, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x10) 21:51:36 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)) 21:51:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b72, 0x0) 21:51:36 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5409, &(0x7f0000000080)) 21:51:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4bfa, 0x0) 21:51:36 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)) 21:51:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x17e, 0x4) listen(r0, 0x100000000008) listen(r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540b, &(0x7f0000000080)) 21:51:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4bfb, 0x0) 21:51:37 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)) 21:51:37 executing program 0: socket$xdp(0x2c, 0x3, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x9, 0x1) 21:51:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540c, &(0x7f0000000080)) 21:51:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4c00, 0x0) 21:51:37 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)) 21:51:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:37 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0xee65, 0x1, 0x1, 0x3, 0x15d4}, 0xc) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000000)="0a37fc9c39744cb20b0e37d7e31d5d1637f6485468253cde3c987949fd8d0330b02948fcee72852b66b6c0a16bf6bde329d210a7e1c51b667b72a22117a2c123c3f148a5ab011d33c235cb39e2aea2e184f54c2046", 0x55) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:37 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x82000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:lastlog_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0xec}, 0x1, 0x0, 0x0, 0x40810}, 0x8000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4c01, 0x0) 21:51:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540d, &(0x7f0000000080)) 21:51:37 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)) 21:51:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4c04, 0x0) 21:51:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540e, &(0x7f0000000080)) 21:51:37 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x2000813, r0, 0x80000000) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000001c0)=""/172) 21:51:37 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, 0x0) 21:51:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540f, &(0x7f0000000080)) 21:51:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4c05, 0x0) 21:51:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, 0x0) 21:51:37 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0x8080) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5409, 0x0) 21:51:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, 0x0) 21:51:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5410, &(0x7f0000000080)) 21:51:37 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000300)={0x2, 0x1, {0x1, 0x3, 0x800000, 0x2, 0x7}, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r0, 0x80000000) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x12c080, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r6, 0x5016, 0x0) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r3, r4) setregid(r1, r4) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r8 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$sock_ifreq(r8, 0x8993, &(0x7f0000000380)={'bond_slave_1\x00', @ifru_hwaddr}) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0xffffffff, 0x0, "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", 0x22, 0x0, 0x20, 0xff, 0xef, 0x3, 0x7, 0x1}, r10}}, 0x120) syz_init_net_socket$ax25(0x3, 0x2, 0xaeb130a2d1d85b63) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:38 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000000)={{0x9, 0x0, 0x80000000, 0x40, 'syz1\x00', 0x1}, 0x0, [0x4, 0x1, 0x3fffc000000000, 0x20, 0x0, 0x1, 0x8, 0x8, 0xff, 0x9, 0xfffffffffffffffe, 0x6618, 0x5, 0x6, 0x0, 0x3f, 0x6, 0x7, 0x3, 0x5, 0xfffffffffffffff9, 0x4, 0x5, 0x4, 0x80000001, 0x1ff, 0xc5, 0x1f, 0xb9ab, 0x5, 0xffffffffffffffe8, 0xc5e, 0x1, 0x6, 0x4, 0x4, 0xc0f7, 0x6, 0x1, 0x2ab, 0x101, 0xcaa, 0x9, 0xfe, 0x1f, 0x0, 0x9, 0x0, 0x1, 0x6340, 0x8, 0x7, 0x5, 0x67c, 0x0, 0x5, 0x800, 0x60, 0x1ca, 0x8001, 0x1000, 0x1, 0x100000000, 0x2, 0xfffffffffffffe01, 0xfffffffffffffff9, 0x2, 0x4, 0x0, 0xff, 0x8000, 0x3, 0x0, 0x346, 0x7fffffff, 0x0, 0x6056, 0x1, 0x1, 0xd757, 0x8, 0x100000000, 0x8, 0x3, 0x5, 0x6, 0x4, 0x6, 0x3, 0x88, 0x8001, 0x1, 0x8, 0x1000, 0x2, 0x635, 0x8, 0x18, 0x0, 0x3f, 0x4, 0x6, 0x5e, 0x80000000, 0x0, 0x2, 0x362d, 0x6, 0x1, 0x5, 0xffff, 0x3, 0xb1, 0x8001, 0x6, 0x8, 0x6, 0x4, 0x9, 0xd2, 0x10000, 0x50000000000, 0xffffffffffffffff, 0x6, 0x1f, 0x74, 0x3, 0x748d7f7c]}) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5412, &(0x7f0000000080)) 21:51:38 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40240, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000640)={&(0x7f0000000040)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="b59f58a78b0afa754ec2fb357ac8530cbe4fdcff9696c8ecefa4ee657cce389bcf300875b69d9f93d0ec88945c97931b2bbee0c23470c147efe3b3b92d3e8f35b519a88067e2daaf66cb6136bef05aa0a6b5e21f63a033bd0e36b2a0d9", 0x5d}, {&(0x7f00000001c0)="ea40ae9e8d4119290b8094d3349f6a621131505622e0b89c3c7ac25f0ec25dd540fcd7b022610a7a557367e3d1f55c3d6385c2c74fd67bcf55a360e1f09c56f8d7689d035d9134625919e550b9216f838c9955b22472396d3c46f42a62f4641eb8987cf12661e744ec53a3f2b153cba7a9aca1b1cfa9d6872657aebbaff682da4ea72b357b24168b0828108e7b623f3d79cb686a90bd789736005ad913fbde5350d523560c5c8ad9f2dd1441d4c92d3fecd0c9cf", 0xb4}, {&(0x7f0000000280)="ebb36db89879e1562f159a8e84465549e53412ead709b6d411679a004aeab44f12672057211e586ccf592bd886d018188c8dff934c37db06be6a6a7911eb20881a679a7d7c0ea09b60825b473e058b4e2504b0f17bf9ea05abbc215da5ae49242c128cb608d24b5f2f3abfbf204c9deb76e4544ad4f796ebec02d32efc390eff77254af5387ba6b456510da3dd4d11ae0b35db8157767f592f3e8a3ed54269365eadfc10c7f8b3224f2c2e06b1e3efeec05bb788381d89b5409262a83f66", 0xbe}, {&(0x7f0000000340)="ccd02e9ded2245346bc92d49a159f3b005b88b5b521dc652eee16940af9d8fb95f1608547fcf918c61b3eb207acfeda37670b86a77738da785bd71dd236891ebbd67032a8ce4cef74770e5541affa889d82cfc5411bc5e01e8bdebfaffa44a7e8339eae904d523ccdb7979db9119033f572104787a93f79c6a7cdaab3fcda3ce0a53c0691c6838bc5ec311041ce596d6dc62cff84461ac59b05f5addd5ce783dcaf2166e493286d4dcc59713434ddcf4199a20139f66678aee1a82f3910de5db5a970e771286cca106aa5396de14bd65438680b429d5465a0c332d067d81cfbc41e77c5b1fd634436fec29cb175c9242df41d045676215", 0xf7}, {&(0x7f0000000100)="8429919c8c2b3a1e1697fa7a5ff53d6912cba0714bc36b34b300924a60a8ba2d907d1f1c28485366997cf7a9169dbb8ce4c7d2e3ffe8d34566c276ee531d26b6661092b33c29ea6a9a1a5edc91464002ae983e0bac7d3e605ab47d588c78a3e822b4fdf187cfe086e7ac4b9497ada914f3661f162f53a793c7664c4312", 0x7d}, {&(0x7f0000000440)="e3099809b0393fb1fa187459e747718dd2e707caa696ac1f95943349a8258d2892c61edad1494395fb49d99b91c2f33fe3a0331eb4ac50b5ca1f251d43ee6fdd1081c792", 0x44}], 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000160000000000000006000000227d0000000000ee370000000000000084000000000000004f7403a6d36d000800c701"], 0x30, 0x40000}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x80000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000002900)={0x28, r2, 0xf591d3ee456bd401, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x190, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17e}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x524a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc080}, 0x4000800) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540b, 0x0) 21:51:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5413, &(0x7f0000000080)) 21:51:38 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x108000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="111dc944b51e7b7fb9ab0dfb6c548b000000000080e90008000a00feb460587c2fcfd88f1b301150acbcb6516775192e2cf05786d7357771496a2ff5121c873416d04f068c23f73f6626e86efd5d8735987a810c0f217ce14cb8d36cc44d4334ee0dde591b2d75e52d168c40f7e7ae7347e0aa3ee1fb9840eee96c1f42bf78b72d26c961e59fb216b94f5095095c52", @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x8, 0x300, 0x10001, r5}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x40, 0xd, 0x7, 0x926, r6}, 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) 21:51:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540c, 0x0) 21:51:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, 0x0) 21:51:38 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400600, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0xffff}, 0x3, 0x81, 0x2af1, 0x5, 0x9, 'syz0\x00', "66fd439da5a30c5c118c55c9bfa522a03347dec2b273bacded3afbb284b0f1cb", "c7227775d1cd2d21d8ccf20c70a34669dd0bbd8b1b8729d7e68de87071922105", [{0x3, 0x7, {0x1, 0x9e5}}, {0xf32f, 0x100, {0x0, 0x2}}, {0x20, 0x847, {0x0, 0x800}}, {0xdc8a, 0x1, {0x2, 0x59}}, {0x9, 0x9, {0x2, 0xda96}}, {0xffff, 0x2, {0x3, 0x40}}, {0x6, 0xf80, {0x2, 0x9}}, {0x40, 0x0, {0x0, 0x1}}, {0x5, 0x37ed, {0x3, 0x3f}}, {0x400, 0x0, {0x3, 0xe6}}, {0x3, 0x335, {0x3, 0x80000001}}, {0x5, 0x8, {0x1, 0x8000}}, {0x8000, 0x3, {0x3, 0x40}}, {0x7786, 0x1, {0x2, 0x1}}, {0x5, 0x754e, {0x1, 0x32}}, {0x40, 0x6, {0x0, 0x401}}, {0x0, 0xfffd, {0x3, 0x5}}, {0x2, 0x800, {0x3, 0xfffffffc}}, {0x5, 0x1, {0x1, 0x86a}}, {0x7, 0xb3, {0x2, 0x40}}, {0x7ff, 0xffcf, {0x0, 0xfffffffc}}, {0x9, 0x2, {0x1, 0x9}}, {0x7, 0x401, {0x1, 0xe428}}, {0x3e, 0x3, {0x1, 0x1}}, {0x7, 0x8, {0x1, 0x6}}, {0x3, 0x8001, {0x2, 0x6}}, {0xffff, 0xa04, {0x2, 0x9d}}, {0xcf, 0x8, {0x2}}, {0x1, 0x7f, {0x3, 0x7}}, {0x3, 0xff, {0x1, 0x1}}, {0xc451, 0x7fff, {0x2, 0x5}}, {0x8, 0x3f, {0x1, 0x7}}, {0x7ff, 0x2, {0x0, 0x1ff7}}, {0xfff, 0x213, {0x0, 0x6}}, {0x4, 0x9, {0x1, 0x8}}, {0x0, 0x20, {0x1, 0x80000000}}, {0x8, 0x0, {0x3, 0x8}}, {0x4, 0x5, {0x3, 0x1}}, {0x1a, 0x9, {0x0, 0x1f}}, {0x81, 0x764}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x5, 0x1, 0x3, 0x6, 0xc, 'syz0\x00', "56883dec07908d24e7c0ec58a8c388e7d75a1893bd07bb12248b69b8b60369d5", "d3cecb7a83f2938ed2b513463ac714730464ef3eb705488d529ac5fc66e29a6c", [{0x3, 0x401, {0x0, 0x9}}, {0x2c92, 0x8, {0x3, 0x20}}, {0x1, 0x1, {0x1, 0x20}}, {0x200, 0x3ff, {0x3, 0x6}}, {0xff81, 0x2, {0x0, 0x3}}, {0x7, 0x0, {0x1, 0x10000}}, {0x800, 0x5, {0x4, 0x43}}, {0x0, 0x8, {0x3, 0x40}}, {0x2, 0x40, {0x2, 0x1}}, {0x1, 0x7c, {0x1, 0x6}}, {0x4, 0x8000, {0x3}}, {0x7, 0xc0, {0x2, 0x7}}, {0x2, 0x400, {0x0, 0x5}}, {0x8, 0x800, {0x1, 0x7fffffff}}, {0xc4b4, 0x2, {0x0, 0x5}}, {0x1, 0x9, {0x3, 0x6}}, {0x6, 0x1f0c, {0x1, 0x40}}, {0x3, 0x20, {0x0, 0x8}}, {0x9, 0xff, {0x2, 0x7ff}}, {0x8, 0x80, {0x2, 0x200000}}, {0x1, 0x8, {0x2, 0x84159fb8}}, {0x7, 0x0, {0x3, 0x7}}, {0x0, 0x40, {0x1, 0x4}}, {0x101, 0x81, {0x1, 0x2}}, {0x9, 0x4, {0x2, 0x9}}, {0x3, 0x2, {0x0, 0x1}}, {0x400, 0x1b, {0x0, 0x4}}, {0x6, 0x1, {0x2, 0xbea9}}, {0x1, 0xe0, {0x0, 0xfffff57d}}, {0x8, 0x2, {0x2, 0x2}}, {0x1, 0x6, {0x2, 0x2}}, {0x6, 0x4, {0x1, 0x1f}}, {0x4, 0x5, {0x1, 0x5}}, {0x1, 0x4, {0x0, 0x8}}, {0x3, 0x3, {0x3, 0x3}}, {0x5, 0x81, {0x2, 0xfffffff7}}, {0x4d, 0x100, {0x2, 0x2}}, {0x60, 0x1, {0x0, 0x2}}, {0x9d8a, 0x5, {0x1, 0x5}}, {0x2, 0x81, {0x1}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x400c051}, 0xc004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000780)=""/161, 0xa1}, {&(0x7f0000000840)=""/161, 0xa1}], 0x3, 0x3609) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x7, 0x0, {r3}, {r5}, 0x8, 0x2}) 21:51:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, &(0x7f0000000080)) 21:51:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, 0x0) 21:51:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540d, 0x0) 21:51:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, 0x0) 21:51:38 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x24d02, 0x0) 21:51:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540e, 0x0) 21:51:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:38 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5415, &(0x7f0000000080)) 21:51:38 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b6a, 0x0) 21:51:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540f, 0x0) 21:51:38 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x50, r1, 0x1) 21:51:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5416, &(0x7f0000000080)) 21:51:38 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3ff, 0x480000) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x7, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:38 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b6a, 0x0) 21:51:38 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b6a, 0x0) 21:51:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5410, 0x0) 21:51:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:38 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/169) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @ipx={0x4, 0x1, 0x6, "693e576c3816", 0x6}, @hci={0x1f, 0x0, 0x2}, @nfc={0x27, 0x0, 0x2, 0x6}, 0xff, 0x0, 0x0, 0x0, 0x100, &(0x7f00000000c0)='veth1\x00', 0x4, 0x5, 0xff}) 21:51:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5417, &(0x7f0000000080)) 21:51:39 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x234000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)={0x7f, 0x6, 0x4, 0x1000, 0xffffffe1, {}, {0x2, 0x1, 0x8, 0x3, 0x1, 0xff, "4ada95a4"}, 0x7, 0x2, @userptr=0x1, 0x3, 0x0, r3}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x11, 0x7, 0x3, 0x7, 0x116, r1, 0x10001, [], 0x0, r4, 0x2, 0x2, 0x4}, 0x40) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r5, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = dup3(0xffffffffffffffff, r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r9, &(0x7f0000000900)={0x2c, 0xf, r7, 0x3c}, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x0, @random="7d641f332a9e"}, {0xa, 0x0, @random="e3083b3758ab"}, {0xa, 0x0, @local}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x0, @dev={[], 0x18}}, {0xa, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {0xa, 0x0, @remote}, {0xa, 0x0, @remote}, {0xa, 0x0, @broadcast}, {0xa, 0x0, @remote}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc804}, 0x8040) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5412, 0x0) 21:51:39 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b6a, 0x0) 21:51:39 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) 21:51:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5418, &(0x7f0000000080)) 21:51:39 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b6a, 0x0) 21:51:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5413, 0x0) 21:51:39 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x9) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040)) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x401) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541b, &(0x7f0000000080)) [ 218.778949][T11411] __nla_validate_parse: 15 callbacks suppressed [ 218.778958][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:39 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b6a, 0x0) 21:51:39 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000040)) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 21:51:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, &(0x7f0000000080)) 21:51:39 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/175, 0x6000, 0x800, 0x8000, 0x2}, 0x20) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) modify_ldt$read(0x0, &(0x7f0000000240)=""/20, 0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x19) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/179) 21:51:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541c, &(0x7f0000000080)) 21:51:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5415, 0x0) [ 219.012693][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, &(0x7f0000000080)) 21:51:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5416, 0x0) 21:51:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541d, &(0x7f0000000080)) 21:51:39 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x13, r0, 0x0) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000000)=0x368b, 0x4) syncfs(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_virt_wifi\x00'}}, 0x1e) 21:51:39 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0xb29, 0x6, 0x4, 0x2, 0x9, {r1, r2/1000+30000}, {0x1, 0xc, 0x6, 0xff, 0x81, 0x2, "e5b83d12"}, 0xff, 0x4, @fd=r3, 0x4, 0x0, r4}) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r5, 0x80184153, &(0x7f00000009c0)={0x0, &(0x7f0000000980)=[&(0x7f0000000640)="19d4039cad904e4088fedd51d055e253ce9737e4da280878bc71dadfb1f14646a99a0307389787a68cdf9d578b23825ba507db0cd54b25783917031f81c37c4072b972ce4375dcfcaa9122be9699ce68dd0d9017cd81feda0e79d78c7a8be1ec65d4ce1df3840ae95f9487bf3871abf1c702b12e762b135cfab77463c18f1cb70b83a088b2c97bbd889c40ea4407315d31623913527f852e19a373a301f4ac1ff82e5a9a580d6cb6cea3feebbc0d1ce0550ad44144b7622ae6855ec94da40d1393e296c5762d94ee1770a0b85719b0423208c1fe40d22a987543a3ff270ff676927dce73361404db69d1db14145c", &(0x7f0000000740)="ea808a872db3b3f899994d29ef9d825bf4a8833592a94a3831821afb69fca2f803569c28081e8838e5694cafb3e2dfee89aaa3a0c40edf6a2910ba2ed06062e9a4d240cb2f1b805699313dd1e819651a12a38bd4f913f876dbca987bf0b6711cd36eec9a3076bc1cc1d600f70e99410ecd4c415a81a0044c46adb55858b6836670bf07805a7cf562b0328737c255dfda48c27464a3c67768bb64ce1b143fe901868134a4890bebf980f761c184b7370851da139871bfe93d67184c89555ccfeac8c57bfa253b27cca999ff9d49ee3a214f449b18bcd8525f", &(0x7f0000000840)="5a6660551e5c1dd28e", &(0x7f0000000880)="c1e7fd6c74f24b57529e97667d21165b07b643b33a3a8b3b288737ff3d2a12b0b0ba82d0bf3224e7eebe10a3cb37cb92130ff240d639181a928856949f9c24df8a5f4eb91f0aa15e9efc1e54a48520479ebbb8de34e0bfda", &(0x7f0000000900)="985099ec890c8846857c2fff72adcfa217e2faf5a7b29bb472abf4e0bb95549e68965c8581c7c584a45c64ded0451f701c7de971ffbaf912a656d96167d946b2266963f95c7627255f"]}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x2000, 0x4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c95263dfad9cee819e8f751f643a405b2c588486a3b7f92f47390dfb3c03ff7c807be357854eeda0b1ad84ca761d464097fb3cb3a9ac729ce16dbaf79ecc7b09aeccade88df40ff8e4cfe59462d0a13f7251e18736d81a04219e72b9e18633b4f36354091d8514fe6f287f1e5907fb21bfad10b595af98550cfa3f7faea4b0b8cc89c4231f45aa3e87a228ef940dc", @ANYRES32=0x0, @ANYBLOB="00000000000000f89e070009b55598bf891bff8e6bdbe6929855b1a37354c4a98185b67c1c3e8dfa8fec95459969a894974bce6214f392d76b41bac72cc1a3b9e6b900040e9bbc5369d2", @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x9e0000, 0x5, 0x400, r8, 0x0, &(0x7f0000000100)={0x990af6, 0x7, [], @string=&(0x7f00000000c0)=0x7f}}) bind$xdp(r6, &(0x7f0000000180)={0x2c, 0x8, r7, 0x3a, r9}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000001, 0x2, 0x40000) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000003c0)=0xab) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000400)={r11, @in={{0x2, 0x4e22, @empty}}}, 0x84) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541e, &(0x7f0000000080)) 21:51:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5417, 0x0) 21:51:39 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) 21:51:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, &(0x7f0000000080)) [ 219.323358][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5418, 0x0) 21:51:40 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, &(0x7f0000000080)) [ 219.509194][T11497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541e, &(0x7f0000000080)) 21:51:40 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040), 0x2) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x20040, 0x4) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4c0a82, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0x3ff, 0x1, 0x7, 0x8, 0x1b, "bc1933f5ea443d68"}) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x400]}, 0x6) 21:51:40 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, &(0x7f0000000080)) 21:51:40 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000b930a37e0f000000000008000a00", @ANYRESOCT=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x5}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) getsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 219.749145][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5421, &(0x7f0000000080)) 21:51:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541b, 0x0) 21:51:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:40 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, &(0x7f0000000080)) 21:51:40 executing program 0: mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x5800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x82404, 0x0) fremovexattr(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="6f73933e25"]) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="00c30400030000"], 0xc) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x200900) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) 21:51:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5422, &(0x7f0000000080)) [ 220.044298][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:40 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000002900)={0x28, r2, 0xf591d3ee456bd401, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002abd7000fcdbdf250b0000000c00028008000200030000002c000380080002006a030000080001000400000008000200fa00000008000100e4000000080002000d0000002c0002800400040008000200feffffff04000400080001000400000008000100020000000800020008000000"], 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x4080) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x1020010, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541c, 0x0) 21:51:40 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, &(0x7f0000000080)) 21:51:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="54003577aa1d71e6c50000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x5, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5423, &(0x7f0000000080)) 21:51:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541d, 0x0) [ 220.268895][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:51:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:40 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, &(0x7f0000000080)) 21:51:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5424, &(0x7f0000000080)) 21:51:41 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000040)) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000002, 0x30, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) [ 220.453481][T11570] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:41 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="874b0000000000000000050000000800010000000004"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5f6783627e"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x4}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:41 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, &(0x7f0000000080)) 21:51:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541e, 0x0) 21:51:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5425, &(0x7f0000000080)) 21:51:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) setrlimit(0x6, &(0x7f0000000000)={0x4, 0x7ff}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000200)={0x80400000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x5}, &(0x7f0000000100)=""/15, 0xf, &(0x7f0000000140)=""/125, &(0x7f00000001c0)=[r1, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0], 0x6}, 0x50) getpgrp(r3) 21:51:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541e, 0x0) 21:51:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:41 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400d40, 0x0) renameat(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 21:51:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5427, &(0x7f0000000080)) 21:51:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5421, 0x0) 21:51:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000000c0)={0xffffffff, 0x1, 'client0\x00', 0x2, "7992f7acc80808e4", "298d053869ef40b879f85bc29ae269365500e6c887c5c236076814d9f5a54f55", 0xfff, 0xce}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x400080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0xc040000, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14, 0x80000) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="6ce7570edf43"}]}, 0x58}, 0x1, 0x0, 0x0, 0x280000c5}, 0x20000800) 21:51:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{0x80000000, 0x3, 0x0, 0x0, @sint={0x10001, 0x3f}}, {0x2, 0x1, 0x0, 0x0, @irqchip={0x18, 0x200}}]}) 21:51:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5422, 0x0) 21:51:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5428, &(0x7f0000000080)) 21:51:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:41 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x202000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d204d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efaf18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791b455cd49ee21c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004d"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0xf, r3, 0x3c}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', r3}) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) r6 = getpgid(0x0) ptrace$cont(0x7, r6, 0x91, 0x86) socket$can_bcm(0x1d, 0x2, 0x2) 21:51:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5429, &(0x7f0000000080)) 21:51:41 executing program 0: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x113, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5423, 0x0) 21:51:41 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00') mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541d, 0x0) 21:51:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 21:51:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5424, 0x0) 21:51:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5437, &(0x7f0000000080)) 21:51:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541d, 0x0) 21:51:42 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x9, 0x10}, 0xc) 21:51:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 21:51:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5441, &(0x7f0000000080)) 21:51:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5425, 0x0) 21:51:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541d, 0x0) 21:51:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) r1 = dup2(r0, 0xffffffffffffffff) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r1, 0x180000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:42 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb4}}, 0x20000040) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000380)={r2}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000081}, 0x40) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x1, 0x0) [ 221.951159][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5450, &(0x7f0000000080)) 21:51:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 21:51:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5427, 0x0) 21:51:42 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x541d, 0x0) 21:51:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5451, &(0x7f0000000080)) 21:51:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x290c00, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5428, 0x0) 21:51:42 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x541d, 0x0) [ 222.186116][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 21:51:42 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x541d, 0x0) 21:51:42 executing program 4: prctl$PR_GET_SECCOMP(0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x3, {0x0, 0x16}}, 0x20) 21:51:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5429, 0x0) 21:51:42 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x541d, 0x0) 21:51:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5452, &(0x7f0000000080)) 21:51:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 21:51:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5437, 0x0) 21:51:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000000)=""/31, 0x1f, 0x40002000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x545d, &(0x7f0000000080)) 21:51:43 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x541d, 0x0) 21:51:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 21:51:43 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000), 0x4) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) 21:51:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5441, 0x0) 21:51:43 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x541d, 0x0) 21:51:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5460, &(0x7f0000000080)) 21:51:43 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpgrp(r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x202002) keyctl$chown(0x4, r9, r7, r8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="540046060092000010ed3a0e00000000010000ff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000600)={0x8000, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440), {0x3e}, &(0x7f0000000480)=""/46, 0x2e, &(0x7f00000004c0)=""/228, &(0x7f00000005c0)=[r12], 0x1}, 0x50) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r15) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="c7048a3a3b577e376688aa851e7ab4b2ce41273e86870ccbfa9ed9a5bee845a19a7242cb8f4918af859f55c2fcded95cd79766f7cb23a2f323973a9450211736543cfb5d5834ca9545dd1122becbe6c1e663b8705ead64f5c7d13358fe794f7a77f3285ed2e31a90e8c9233862e446e966eb5b38f1f77fc510bda62c058b9506f16198851d69969d01b06848b2a0ee0d7bcfbeca8d4e488d169608f09acc105b0852677caacae3f3124da6d97520d3c9d83aad08a718a07e066f48972848e6b08c8da30ade55ff9895340d8b0acc5a1b4f536a88ed35697f4b24dfee395b2631ab2d6efbd9a27a14a600", 0xea}, {&(0x7f00000001c0)="6743ded145b89809dedf8806ca73f699f7da6533928b35a107361bdfff2d7ed1b23dc6bdfdabdda65f344b462014a78df0212482eb12dcbe24c88362fae24fb4a05a04e82a48f04565340afdabd83afabaf93e23ad573573ad67c60f1dc196c191f6b8044d07250f2e85eb23be98967c5d6c36124434b412013f6c43ce0e06e955a3fda176cbd834bd21a1e48ff3bd90ffb08260ef354d428c209638894d7337bbd9fdcc7b7f2cac4627c88b9719f76df6dd9e78ac4734d540df119b3fd0b271", 0xc0}], 0x2, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r10, @ANYRES32, @ANYRES32=r11, @ANYBLOB="b48f3b87c2d2b2a4989a27a5208a1efaab6318e4f697d945a62ec1afe9670f5215a80a38191c6703281fe9802af8b2329e19711965566bf70fa5c42f5dc1b6faa63dc5828b3fc4386c454965c258dc9b08514bd6da445eeac7280b49040000000000000077443a9ebeecf7afe448e426b823d0b5038c1ac8e8f7c03600b273bddb0a96e6080bfc2572b6761182ee660f06b93a1024f07e65d644e46ac646c2d1973db8e0184bf6d9df39886d1c76e377673c2e766376833edfa75c102cd204a3ca953f9c6b5fe3a38b715a0c3647ecac7cbb79e024aeae1aeed0bd4367358cc0aca0403835c4232e8511f1f24d493b66dd4910a4340d260e3cdebb9e72d2ec31ace0b843615922baf703f7", @ANYRES32=r13, @ANYRES32=r15, @ANYRES32=0xee00, @ANYBLOB="000000004dbf886af32b2c315a77b0d77b31f8b3e69cfad31be8a7d7114d6779a09034fdaf0d2daf9221d62375685de11ff05e9b5699b2ae3aaa8e5504260bb80001e01bc852e9567fb0c89d31543874f2d5991dec636c40e3b0d03495e781c0eeaf1fc5e7065a311dd0a7cc06f7f59e6ecb26aa07038a9fa4beb1c4d79cf4efdf36eee044e9aafcff0cd8da873e926ec23662e659ea"], 0x80}, 0x40) dup(r0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x20010, 0x4) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r16, 0x1, 0x0, 0x0) ioctl$KDFONTOP_SET(r16, 0x4b72, &(0x7f0000000b40)={0x0, 0x0, 0x19, 0xd, 0x13a, &(0x7f0000000740)="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"}) 21:51:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5450, 0x0) 21:51:43 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x21) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000080)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000040)={0x5, 0x1, 0x3}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000001c0)={0x4, [[0x7, 0xfffffffc, 0x8001, 0x6, 0x80, 0x20, 0x3f, 0x4], [0x7, 0x4, 0xed2, 0x10000, 0x9, 0xfff, 0xffffffff, 0xefb6d262], [0x8, 0x2, 0xfffffff9, 0x2, 0x49, 0x0, 0x80000001, 0x5]], [], [{0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, {0xffffffff, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x3b6a1f1a, 0xfffffc00, 0x0, 0x0, 0x1}, {0x113, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, {0x1f, 0x7, 0x0, 0x0, 0x1}, {0xffe, 0x1, 0x1, 0x1}, {0xfff, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x81, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x3f, 0x6, 0x1, 0x0, 0x1}, {0x265, 0x20, 0x0, 0x0, 0x1}, {0xfffffffe, 0x10000, 0x1, 0x0, 0x1}, {0x1ff, 0x81, 0x1, 0x0, 0x1}], [], 0x3}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000580)=""/169) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1f) 21:51:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:51:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5441, &(0x7f0000000080)) 21:51:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5600, &(0x7f0000000080)) 21:51:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5441, &(0x7f0000000080)) 21:51:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5451, 0x0) 21:51:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:51:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5437, &(0x7f0000000080)) 21:51:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5601, &(0x7f0000000080)) 21:51:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5452, 0x0) 21:51:43 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80801, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x1000, "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"}, &(0x7f0000001080)=0x1008) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000001140)="650b7eeb6b938c84ea2633662e2c296187d272237b802c0c92bebcc4b11a75", 0x1f}, {&(0x7f0000001180)="c872149e692e97c4162e879e6f3af5c69c37eead1667fcad1ca20488b5513611e7f3dde2b4c3836df4b472f1bb6df14bac49e6d0158dfe1bd68fa2b68764260a109edb5ee5129fa415ec81a6ec3bfe8e5d881b7f3652bca9ef0117fc59adb7e1c116df87103fe521575a18c4055117e8658ed2588acbb9564b71c4995a2991a4781e090d585c5ce52f629880027d77cc", 0x90}], 0x2, 0xe) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000010c0)={r2, 0x2, 0x2, [0x400, 0x5c3c]}, &(0x7f0000001100)=0xc) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5441, &(0x7f0000000080)) 21:51:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5602, &(0x7f0000000080)) 21:51:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:51:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x545d, 0x0) 21:51:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:44 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:44 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5441, &(0x7f0000000080)) 21:51:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5460, 0x0) 21:51:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5604, &(0x7f0000000080)) 21:51:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5605, &(0x7f0000000080)) 21:51:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:44 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5441, &(0x7f0000000080)) 21:51:44 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x12, 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0xc, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x48010) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)={{0x10b, 0x0, 0x3, 0x17, 0x370, 0x6, 0x2d8, 0x4}, "1bd45c304a79ac149c2b887116e00b5f0b98535d8da73a2eb681b3c741c81cce04b3215afec92bda344c0d1cef7181f8b1037dc591214e0b8cfc159893d6bf2baf933af4f96e4420f9f0715368ad38ff87f667844b575bdbafc3657b2f890cd1c7d90fe60a701ee125178dc1fc653c496d45c0e0495b83a2cd7ddf821798f5de88887214acbbf4721a1eda0538b956e92b751c", [[], [], []]}, 0x3b3) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x7f}, 0xa) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000480)={0x5, 0x102, 0x2, {0x3b, 0x3f, 0x230, 0xfff}}) 21:51:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5600, 0x0) 21:51:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:44 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5441, &(0x7f0000000080)) 21:51:44 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) 21:51:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5606, &(0x7f0000000080)) [ 223.874712][T11871] __nla_validate_parse: 2 callbacks suppressed [ 223.874720][T11871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5601, 0x0) 21:51:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5441, &(0x7f0000000080)) 21:51:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5607, &(0x7f0000000080)) 21:51:44 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) [ 224.092289][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5602, 0x0) 21:51:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:44 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fcntl$addseals(r0, 0x409, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x2a, 0x1d, 0x5, 0x1000, "6cb6e084f8212497c60c7903828a9af804e55b883af0405f6ea6fffbffffd949"}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0xa000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x8, 0x0, 0x80}, 0x10) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x408a03) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 21:51:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5608, &(0x7f0000000080)) 21:51:44 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) 21:51:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5441, &(0x7f0000000080)) 21:51:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5604, 0x0) 21:51:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5609, &(0x7f0000000080)) 21:51:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5605, 0x0) 21:51:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x28, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 21:51:45 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5441, &(0x7f0000000080)) 21:51:45 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) 21:51:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5606, 0x0) 21:51:45 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x1000000e, 0x20, 0x1f9}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000540)={0x3e, &(0x7f0000000500)="113665a5b9922f13e6fe5bc3ae15ed80436be9aef34a50e7595fc366794e050ea6344e599f980ef0189b71ee238c34d38ad8513b3b1eb0ed717a744cf524"}) munlock(&(0x7f0000ff6000/0x8000)=nil, 0x8000) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x6cfa785663c27817) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000480)={r5, 0x9}, 0x8) 21:51:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560a, &(0x7f0000000080)) 21:51:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5441, 0x0) 21:51:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:45 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) 21:51:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5607, 0x0) 21:51:45 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = socket(0xf, 0xa, 0xf3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xffffffffffffffe4) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x5, 0x13, 0x1ff, 0x700, 0x81, 0xa00010, r3}) 21:51:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, &(0x7f0000000080)) 21:51:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:45 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) 21:51:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5608, 0x0) 21:51:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, &(0x7f0000000080)) 21:51:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:45 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6c}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x48054) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x704202, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) write$fb(r3, &(0x7f0000000000)="24c1f41f8562c83a", 0x8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) connect$rose(r4, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560c, &(0x7f0000000080)) 21:51:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, &(0x7f0000000080)) 21:51:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5609, 0x0) 21:51:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, &(0x7f0000000080)) 21:51:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560d, &(0x7f0000000080)) 21:51:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') socket$xdp(0x2c, 0x3, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, &(0x7f0000000080)) 21:51:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560a, 0x0) 21:51:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, &(0x7f0000000080)) 21:51:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560e, &(0x7f0000000080)) 21:51:45 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) 21:51:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:51:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, &(0x7f0000000080)) 21:51:46 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r3}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r3, 0x8}, &(0x7f0000000040)=0x8) r4 = socket$xdp(0x2c, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20100, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:46 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 21:51:46 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) 21:51:46 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x560b, &(0x7f0000000080)) 21:51:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560c, 0x0) 21:51:46 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000006, 0x10, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:46 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) [ 225.715540][T12036] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560d, 0x0) 21:51:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560f, &(0x7f0000000080)) 21:51:46 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x560b, &(0x7f0000000080)) 21:51:46 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x5, "c6770d363f0df1ec44817426b138239ca616da4b7b9313cf62b2a6647693e8c5", 0x4, 0x80, 0xff, 0x7, 0x8, 0x2, 0x4, 0x5}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x3, 0x1ff}, 0xc) write$P9_RXATTRCREATE(r1, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000140)=0x3e39, 0x4) r3 = getpgid(0x0) sched_getparam(r3, &(0x7f0000000180)) 21:51:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) 21:51:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560e, 0x0) 21:51:46 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x400000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r2 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r2, &(0x7f0000002000)='/', 0x1) sendfile(r2, r2, &(0x7f0000000200), 0x87) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x72, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x8, 0x1}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) 21:51:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560f, 0x0) 21:51:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) 21:51:46 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x560b, &(0x7f0000000080)) 21:51:46 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:47 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010003b0e00000000d043000000000000b1a05256fc5b3607267d12b186dbedce669d17c4b15d4927ab2e6ddd2e0f0e8424aa8af742ca9d175cd032c888046e3e2036ff57a8c942c846a5cb6cfb4763080b2c49", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280090001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:51:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x6364, &(0x7f0000000080)) [ 226.521244][T12083] FAULT_INJECTION: forcing a failure. [ 226.521244][T12083] name failslab, interval 1, probability 0, space 0, times 0 21:51:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x6364, 0x0) 21:51:47 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) [ 226.586388][T12083] CPU: 0 PID: 12083 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0 [ 226.593709][T12089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.595198][T12083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.595204][T12083] Call Trace: [ 226.595222][T12083] dump_stack+0x1fb/0x318 [ 226.595242][T12083] should_fail+0x4b8/0x660 21:51:47 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x560b, &(0x7f0000000080)) [ 226.628237][T12083] __should_failslab+0xb9/0xe0 [ 226.628252][T12083] ? tomoyo_realpath_from_path+0xe8/0x6b0 21:51:47 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="baf80c66b80b5e118c66efbafc0cec66b9800000c00f326635001000000f3066b9890000000f326526f30f20000f09b805008ed00fa0670f01c9650faa0f2181", 0x40}], 0x1, 0x3a, &(0x7f0000000680), 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x418082, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x100}], 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r6, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada811c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = dup3(0xffffffffffffffff, r8, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x3, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f00000001c0)={r10, 0xbb}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r9, &(0x7f0000000900)={0x2c, 0xf, r6, 0x3c}, 0x10) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) [ 226.628262][T12083] should_failslab+0x9/0x20 [ 226.628272][T12083] __kmalloc+0x7a/0x340 [ 226.628281][T12083] ? tomoyo_realpath_from_path+0xdb/0x6b0 [ 226.628291][T12083] ? kfree+0x1f/0x220 [ 226.628307][T12083] tomoyo_realpath_from_path+0xe8/0x6b0 [ 226.628338][T12083] tomoyo_path_number_perm+0x18f/0x690 [ 226.628395][T12083] ? smack_file_ioctl+0x225/0x2e0 [ 226.628420][T12083] tomoyo_file_ioctl+0x23/0x30 [ 226.628433][T12083] security_file_ioctl+0x68/0xd0 [ 226.628451][T12083] __se_sys_ioctl+0x4e/0x190 21:51:47 executing program 0 (fault-call:6 fault-nth:0): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 226.628463][T12083] ? do_syscall_64+0x1d/0x1c0 [ 226.628478][T12083] __x64_sys_ioctl+0x7b/0x90 [ 226.628494][T12083] do_syscall_64+0xf7/0x1c0 [ 226.628511][T12083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.628520][T12083] RIP: 0033:0x45c429 [ 226.628531][T12083] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.628537][T12083] RSP: 002b:00007f064f6a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.628546][T12083] RAX: ffffffffffffffda RBX: 00007f064f6a96d4 RCX: 000000000045c429 [ 226.628552][T12083] RDX: 0000000000000000 RSI: 0000000000005414 RDI: 0000000000000003 [ 226.628558][T12083] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.628564][T12083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 21:51:47 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) [ 226.628570][T12083] R13: 0000000000000667 R14: 00000000004c8f7c R15: 0000000000000000 [ 226.668857][T12083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.916274][T12113] FAULT_INJECTION: forcing a failure. [ 226.916274][T12113] name failslab, interval 1, probability 0, space 0, times 0 [ 226.935122][T12113] CPU: 0 PID: 12113 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 21:51:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8907, 0x0) 21:51:47 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) [ 226.943819][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.943829][T12113] Call Trace: [ 226.957172][T12113] dump_stack+0x1fb/0x318 [ 226.961519][T12113] should_fail+0x4b8/0x660 [ 226.965949][T12113] __should_failslab+0xb9/0xe0 [ 226.971126][T12113] should_failslab+0x9/0x20 [ 226.971138][T12113] kmem_cache_alloc_node+0x65/0x280 [ 226.971149][T12113] ? __alloc_skb+0x9f/0x500 [ 226.971168][T12113] __alloc_skb+0x9f/0x500 [ 226.971188][T12113] netlink_sendmsg+0x779/0xd40 [ 226.971212][T12113] ? netlink_getsockopt+0x9f0/0x9f0 [ 226.971228][T12113] ____sys_sendmsg+0x4f7/0x7f0 [ 226.971262][T12113] __sys_sendmsg+0x1ed/0x290 [ 226.971293][T12113] ? check_preemption_disabled+0xb4/0x260 21:51:47 executing program 0 (fault-call:6 fault-nth:1): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 226.971301][T12113] ? debug_smp_processor_id+0x9/0x20 [ 226.971316][T12113] ? debug_smp_processor_id+0x1c/0x20 [ 226.971329][T12113] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 226.971346][T12113] ? prepare_exit_to_usermode+0x221/0x5b0 [ 226.971359][T12113] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 226.971372][T12113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 226.971382][T12113] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 226.971394][T12113] ? do_syscall_64+0x1d/0x1c0 [ 226.971411][T12113] __x64_sys_sendmsg+0x7f/0x90 [ 226.971426][T12113] do_syscall_64+0xf7/0x1c0 [ 226.971443][T12113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.971451][T12113] RIP: 0033:0x45c429 21:51:47 executing program 0 (fault-call:6 fault-nth:2): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 226.971462][T12113] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.971468][T12113] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.971477][T12113] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 [ 226.971483][T12113] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 226.971489][T12113] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.971496][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 226.971502][T12113] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000000 [ 227.141803][T12128] FAULT_INJECTION: forcing a failure. [ 227.141803][T12128] name failslab, interval 1, probability 0, space 0, times 0 21:51:47 executing program 0 (fault-call:6 fault-nth:3): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 227.141819][T12128] CPU: 0 PID: 12128 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 227.141825][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.141829][T12128] Call Trace: [ 227.141847][T12128] dump_stack+0x1fb/0x318 [ 227.141869][T12128] should_fail+0x4b8/0x660 [ 227.141893][T12128] __should_failslab+0xb9/0xe0 [ 227.141906][T12128] should_failslab+0x9/0x20 [ 227.141917][T12128] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 227.141928][T12128] ? __kmalloc_node_track_caller+0x3c/0x60 [ 227.141947][T12128] __kmalloc_node_track_caller+0x3c/0x60 [ 227.141957][T12128] ? netlink_sendmsg+0x779/0xd40 [ 227.141971][T12128] __alloc_skb+0xe8/0x500 [ 227.141994][T12128] netlink_sendmsg+0x779/0xd40 [ 227.142043][T12128] ? netlink_getsockopt+0x9f0/0x9f0 [ 227.142063][T12128] ____sys_sendmsg+0x4f7/0x7f0 [ 227.142097][T12128] __sys_sendmsg+0x1ed/0x290 [ 227.142131][T12128] ? check_preemption_disabled+0xb4/0x260 [ 227.142140][T12128] ? debug_smp_processor_id+0x9/0x20 [ 227.142156][T12128] ? debug_smp_processor_id+0x1c/0x20 [ 227.142169][T12128] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 227.142191][T12128] ? prepare_exit_to_usermode+0x221/0x5b0 [ 227.142205][T12128] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 227.142218][T12128] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 227.142228][T12128] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 227.142241][T12128] ? do_syscall_64+0x1d/0x1c0 [ 227.142258][T12128] __x64_sys_sendmsg+0x7f/0x90 [ 227.142274][T12128] do_syscall_64+0xf7/0x1c0 [ 227.142291][T12128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.142300][T12128] RIP: 0033:0x45c429 [ 227.142310][T12128] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.142316][T12128] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.142327][T12128] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 [ 227.142333][T12128] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 227.142340][T12128] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.142346][T12128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 227.142352][T12128] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000001 [ 227.242879][T12131] FAULT_INJECTION: forcing a failure. [ 227.242879][T12131] name failslab, interval 1, probability 0, space 0, times 0 [ 227.242903][T12131] CPU: 0 PID: 12131 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 227.242913][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.242918][T12131] Call Trace: [ 227.242935][T12131] dump_stack+0x1fb/0x318 [ 227.242955][T12131] should_fail+0x4b8/0x660 [ 227.242978][T12131] __should_failslab+0xb9/0xe0 [ 227.242990][T12131] ? skb_clone+0x1cc/0x380 [ 227.242999][T12131] should_failslab+0x9/0x20 [ 227.243008][T12131] kmem_cache_alloc+0x56/0x2e0 [ 227.243026][T12131] skb_clone+0x1cc/0x380 [ 227.243043][T12131] netlink_deliver_tap+0x49b/0x860 [ 227.243077][T12131] netlink_unicast+0x740/0x920 [ 227.243103][T12131] netlink_sendmsg+0xa2b/0xd40 [ 227.243129][T12131] ? netlink_getsockopt+0x9f0/0x9f0 [ 227.243149][T12131] ____sys_sendmsg+0x4f7/0x7f0 [ 227.243180][T12131] __sys_sendmsg+0x1ed/0x290 [ 227.243212][T12131] ? check_preemption_disabled+0xb4/0x260 [ 227.243219][T12131] ? debug_smp_processor_id+0x9/0x20 [ 227.243234][T12131] ? debug_smp_processor_id+0x1c/0x20 [ 227.243245][T12131] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 227.243261][T12131] ? prepare_exit_to_usermode+0x221/0x5b0 [ 227.243273][T12131] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 227.243284][T12131] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 227.243294][T12131] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 227.243305][T12131] ? do_syscall_64+0x1d/0x1c0 [ 227.243321][T12131] __x64_sys_sendmsg+0x7f/0x90 [ 227.243336][T12131] do_syscall_64+0xf7/0x1c0 [ 227.243351][T12131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.243359][T12131] RIP: 0033:0x45c429 [ 227.243369][T12131] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.243374][T12131] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.243383][T12131] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 [ 227.243390][T12131] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 227.243395][T12131] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.243400][T12131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 227.243406][T12131] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000002 [ 227.381598][T12134] FAULT_INJECTION: forcing a failure. [ 227.381598][T12134] name failslab, interval 1, probability 0, space 0, times 0 21:51:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x890c, &(0x7f0000000080)) [ 227.793184][T12134] CPU: 0 PID: 12134 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 227.793190][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.793195][T12134] Call Trace: [ 227.793216][T12134] dump_stack+0x1fb/0x318 [ 227.793238][T12134] should_fail+0x4b8/0x660 [ 227.793262][T12134] __should_failslab+0xb9/0xe0 [ 227.793280][T12134] ? skb_clone+0x1cc/0x380 [ 227.833333][T12134] should_failslab+0x9/0x20 [ 227.833347][T12134] kmem_cache_alloc+0x56/0x2e0 [ 227.842603][T12134] skb_clone+0x1cc/0x380 21:51:48 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x560b, &(0x7f0000000080)) [ 227.847398][T12134] dev_queue_xmit_nit+0x3e4/0xb40 [ 227.847420][T12134] ? validate_xmit_xfrm+0x58/0xdf0 [ 227.847450][T12134] dev_hard_start_xmit+0x11c/0x3f0 [ 227.847479][T12134] __dev_queue_xmit+0x1e1f/0x2e70 [ 227.847490][T12134] ? __copy_skb_header+0x466/0x5c0 [ 227.847508][T12134] ? __kasan_check_write+0x14/0x20 [ 227.847540][T12134] dev_queue_xmit+0x17/0x20 [ 227.847552][T12134] netlink_deliver_tap+0x5f6/0x860 [ 227.847588][T12134] netlink_unicast+0x740/0x920 [ 227.847619][T12134] netlink_sendmsg+0xa2b/0xd40 [ 227.847649][T12134] ? netlink_getsockopt+0x9f0/0x9f0 21:51:48 executing program 0 (fault-call:6 fault-nth:4): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 227.847666][T12134] ____sys_sendmsg+0x4f7/0x7f0 [ 227.847700][T12134] __sys_sendmsg+0x1ed/0x290 [ 227.847737][T12134] ? check_preemption_disabled+0xb4/0x260 [ 227.847745][T12134] ? debug_smp_processor_id+0x9/0x20 [ 227.847760][T12134] ? debug_smp_processor_id+0x1c/0x20 [ 227.847772][T12134] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 227.847788][T12134] ? prepare_exit_to_usermode+0x221/0x5b0 [ 227.847801][T12134] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 227.847813][T12134] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 227.847824][T12134] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 227.847836][T12134] ? do_syscall_64+0x1d/0x1c0 [ 227.847854][T12134] __x64_sys_sendmsg+0x7f/0x90 [ 227.847870][T12134] do_syscall_64+0xf7/0x1c0 [ 227.847888][T12134] entry_SYSCALL_64_after_hwframe+0x49/0xbe 21:51:48 executing program 0 (fault-call:6 fault-nth:5): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 227.847898][T12134] RIP: 0033:0x45c429 [ 227.847908][T12134] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.847913][T12134] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.847924][T12134] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 [ 227.847930][T12134] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 227.847937][T12134] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.847942][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 227.847948][T12134] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000003 [ 228.033972][T12146] FAULT_INJECTION: forcing a failure. [ 228.033972][T12146] name failslab, interval 1, probability 0, space 0, times 0 [ 228.033987][T12146] CPU: 1 PID: 12146 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 228.033993][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.033998][T12146] Call Trace: [ 228.034019][T12146] dump_stack+0x1fb/0x318 [ 228.034041][T12146] should_fail+0x4b8/0x660 [ 228.034066][T12146] __should_failslab+0xb9/0xe0 [ 228.034080][T12146] should_failslab+0x9/0x20 21:51:48 executing program 0 (fault-call:6 fault-nth:6): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 228.034096][T12146] kmem_cache_alloc_trace+0x5d/0x2f0 [ 228.034107][T12146] ? rtnl_newlink+0x77/0x1c00 [ 228.034119][T12146] ? mark_lock+0x107/0x1650 [ 228.034137][T12146] rtnl_newlink+0x77/0x1c00 [ 228.034168][T12146] ? __kasan_check_read+0x11/0x20 [ 228.034179][T12146] ? mark_lock+0x107/0x1650 [ 228.034205][T12146] ? __lock_acquire+0xc5a/0x1bc0 [ 228.034254][T12146] ? trace_lock_acquire+0x15b/0x1d0 [ 228.034271][T12146] ? lock_acquire+0x154/0x250 [ 228.034282][T12146] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 228.034309][T12146] ? __mutex_lock_common+0x53d/0x2f30 [ 228.034318][T12146] ? _raw_spin_unlock_irq+0x22/0x80 [ 228.034334][T12146] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 228.034369][T12146] ? rtnl_setlink+0x490/0x490 [ 228.034385][T12146] rtnetlink_rcv_msg+0x889/0xd40 [ 228.034418][T12146] ? _raw_spin_unlock_irqrestore+0x72/0xe0 [ 228.034460][T12146] ? _raw_spin_unlock_irqrestore+0xb7/0xe0 [ 228.034516][T12146] ? rcu_lock_release+0x9/0x30 [ 228.034546][T12146] netlink_rcv_skb+0x19e/0x3e0 [ 228.034559][T12146] ? rtnetlink_bind+0x80/0x80 [ 228.034587][T12146] rtnetlink_rcv+0x1c/0x20 [ 228.034600][T12146] netlink_unicast+0x766/0x920 [ 228.034632][T12146] netlink_sendmsg+0xa2b/0xd40 [ 228.034662][T12146] ? netlink_getsockopt+0x9f0/0x9f0 [ 228.034678][T12146] ____sys_sendmsg+0x4f7/0x7f0 [ 228.034710][T12146] __sys_sendmsg+0x1ed/0x290 [ 228.034744][T12146] ? check_preemption_disabled+0xb4/0x260 [ 228.034752][T12146] ? debug_smp_processor_id+0x9/0x20 [ 228.034767][T12146] ? debug_smp_processor_id+0x1c/0x20 [ 228.034782][T12146] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 228.034800][T12146] ? prepare_exit_to_usermode+0x221/0x5b0 [ 228.034815][T12146] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 228.034828][T12146] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 228.034839][T12146] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 228.034852][T12146] ? do_syscall_64+0x1d/0x1c0 [ 228.034869][T12146] __x64_sys_sendmsg+0x7f/0x90 [ 228.034884][T12146] do_syscall_64+0xf7/0x1c0 [ 228.034901][T12146] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.034911][T12146] RIP: 0033:0x45c429 [ 228.034921][T12146] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.034934][T12146] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.034945][T12146] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 [ 228.034951][T12146] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 228.034959][T12146] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 228.034965][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 228.034972][T12146] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000004 [ 228.191866][T12149] FAULT_INJECTION: forcing a failure. [ 228.191866][T12149] name failslab, interval 1, probability 0, space 0, times 0 [ 228.191875][T12149] CPU: 1 PID: 12149 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 228.191879][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.191881][T12149] Call Trace: [ 228.191893][T12149] dump_stack+0x1fb/0x318 [ 228.191904][T12149] should_fail+0x4b8/0x660 [ 228.191917][T12149] __should_failslab+0xb9/0xe0 [ 228.191925][T12149] should_failslab+0x9/0x20 [ 228.191934][T12149] kmem_cache_alloc_node+0x65/0x280 [ 228.191943][T12149] ? __alloc_skb+0x9f/0x500 [ 228.191959][T12149] __alloc_skb+0x9f/0x500 [ 228.191980][T12149] netlink_ack+0x204/0x9c0 [ 228.191989][T12149] ? rcu_lock_release+0x9/0x30 [ 228.192016][T12149] netlink_rcv_skb+0x238/0x3e0 [ 228.192029][T12149] ? rtnetlink_bind+0x80/0x80 [ 228.192055][T12149] rtnetlink_rcv+0x1c/0x20 [ 228.192068][T12149] netlink_unicast+0x766/0x920 [ 228.192098][T12149] netlink_sendmsg+0xa2b/0xd40 [ 228.192123][T12149] ? netlink_getsockopt+0x9f0/0x9f0 [ 228.192132][T12149] ____sys_sendmsg+0x4f7/0x7f0 [ 228.192149][T12149] __sys_sendmsg+0x1ed/0x290 [ 228.192167][T12149] ? check_preemption_disabled+0xb4/0x260 [ 228.192171][T12149] ? debug_smp_processor_id+0x9/0x20 [ 228.192179][T12149] ? debug_smp_processor_id+0x1c/0x20 [ 228.192187][T12149] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 228.192196][T12149] ? prepare_exit_to_usermode+0x221/0x5b0 [ 228.192203][T12149] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 228.192210][T12149] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 228.192216][T12149] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 228.192222][T12149] ? do_syscall_64+0x1d/0x1c0 [ 228.192231][T12149] __x64_sys_sendmsg+0x7f/0x90 [ 228.192239][T12149] do_syscall_64+0xf7/0x1c0 [ 228.192251][T12149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.192259][T12149] RIP: 0033:0x45c429 [ 228.192268][T12149] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.192274][T12149] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.192284][T12149] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 [ 228.192290][T12149] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 228.192297][T12149] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 228.192303][T12149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 228.192309][T12149] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000005 [ 228.335063][T12152] FAULT_INJECTION: forcing a failure. [ 228.335063][T12152] name failslab, interval 1, probability 0, space 0, times 0 [ 228.779069][T12152] CPU: 1 PID: 12152 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 228.787957][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.798349][T12152] Call Trace: [ 228.801780][T12152] dump_stack+0x1fb/0x318 [ 228.806320][T12152] should_fail+0x4b8/0x660 [ 228.810774][T12152] __should_failslab+0xb9/0xe0 [ 228.815641][T12152] should_failslab+0x9/0x20 [ 228.820414][T12152] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 228.820427][T12152] ? __kmalloc_node_track_caller+0x3c/0x60 [ 228.820447][T12152] __kmalloc_node_track_caller+0x3c/0x60 [ 228.820455][T12152] ? netlink_ack+0x204/0x9c0 [ 228.820470][T12152] __alloc_skb+0xe8/0x500 [ 228.847257][T12152] netlink_ack+0x204/0x9c0 [ 228.851852][T12152] ? rcu_lock_release+0x9/0x30 [ 228.856654][T12152] netlink_rcv_skb+0x238/0x3e0 [ 228.861559][T12152] ? rtnetlink_bind+0x80/0x80 [ 228.866259][T12152] rtnetlink_rcv+0x1c/0x20 [ 228.870692][T12152] netlink_unicast+0x766/0x920 [ 228.875570][T12152] netlink_sendmsg+0xa2b/0xd40 [ 228.880383][T12152] ? netlink_getsockopt+0x9f0/0x9f0 [ 228.885606][T12152] ____sys_sendmsg+0x4f7/0x7f0 [ 228.890460][T12152] __sys_sendmsg+0x1ed/0x290 [ 228.895180][T12152] ? check_preemption_disabled+0xb4/0x260 [ 228.901249][T12152] ? debug_smp_processor_id+0x9/0x20 [ 228.906685][T12152] ? debug_smp_processor_id+0x1c/0x20 21:51:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8912, 0x0) [ 228.912183][T12152] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 228.918830][T12152] ? prepare_exit_to_usermode+0x221/0x5b0 [ 228.924563][T12152] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 228.930527][T12152] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 228.936198][T12152] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 228.941933][T12152] ? do_syscall_64+0x1d/0x1c0 [ 228.946747][T12152] __x64_sys_sendmsg+0x7f/0x90 [ 228.952000][T12152] do_syscall_64+0xf7/0x1c0 [ 228.952016][T12152] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.952025][T12152] RIP: 0033:0x45c429 [ 228.952034][T12152] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.952040][T12152] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.952048][T12152] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 21:51:49 executing program 0 (fault-call:6 fault-nth:7): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:49 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x560b, &(0x7f0000000080)) [ 228.952053][T12152] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 228.952058][T12152] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 228.952063][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 228.952068][T12152] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000006 21:51:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8912, &(0x7f0000000080)) 21:51:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) [ 229.106255][T12168] FAULT_INJECTION: forcing a failure. [ 229.106255][T12168] name failslab, interval 1, probability 0, space 0, times 0 21:51:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/42) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'bridge_slave_1\x00', {}, 0x7fff}) 21:51:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8914, 0x0) [ 229.163065][T12168] CPU: 0 PID: 12168 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 229.172210][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.183094][T12168] Call Trace: [ 229.183114][T12168] dump_stack+0x1fb/0x318 [ 229.183137][T12168] should_fail+0x4b8/0x660 [ 229.183162][T12168] __should_failslab+0xb9/0xe0 [ 229.183175][T12168] ? skb_clone+0x1cc/0x380 21:51:49 executing program 0 (fault-call:6 fault-nth:8): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 229.183187][T12168] should_failslab+0x9/0x20 [ 229.183197][T12168] kmem_cache_alloc+0x56/0x2e0 [ 229.183216][T12168] skb_clone+0x1cc/0x380 [ 229.183236][T12168] netlink_deliver_tap+0x49b/0x860 [ 229.183250][T12168] ? __kasan_check_write+0x14/0x20 [ 229.183279][T12168] netlink_sendskb+0x61/0x140 [ 229.183296][T12168] netlink_unicast+0x5af/0x920 [ 229.183325][T12168] netlink_ack+0x6ed/0x9c0 [ 229.183366][T12168] netlink_rcv_skb+0x238/0x3e0 [ 229.183381][T12168] ? rtnetlink_bind+0x80/0x80 [ 229.183409][T12168] rtnetlink_rcv+0x1c/0x20 [ 229.183422][T12168] netlink_unicast+0x766/0x920 [ 229.183453][T12168] netlink_sendmsg+0xa2b/0xd40 21:51:49 executing program 0 (fault-call:6 fault-nth:9): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 229.183484][T12168] ? netlink_getsockopt+0x9f0/0x9f0 [ 229.183499][T12168] ____sys_sendmsg+0x4f7/0x7f0 [ 229.183534][T12168] __sys_sendmsg+0x1ed/0x290 [ 229.183569][T12168] ? check_preemption_disabled+0xb4/0x260 [ 229.183578][T12168] ? debug_smp_processor_id+0x9/0x20 [ 229.183594][T12168] ? debug_smp_processor_id+0x1c/0x20 [ 229.183606][T12168] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 229.183623][T12168] ? prepare_exit_to_usermode+0x221/0x5b0 [ 229.183636][T12168] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 229.183649][T12168] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.183660][T12168] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 229.183672][T12168] ? do_syscall_64+0x1d/0x1c0 [ 229.183689][T12168] __x64_sys_sendmsg+0x7f/0x90 [ 229.183705][T12168] do_syscall_64+0xf7/0x1c0 [ 229.183723][T12168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.183733][T12168] RIP: 0033:0x45c429 [ 229.183743][T12168] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.183749][T12168] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.183760][T12168] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 [ 229.183767][T12168] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 229.183774][T12168] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 229.183780][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 229.183787][T12168] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000007 [ 229.354757][T12191] FAULT_INJECTION: forcing a failure. [ 229.354757][T12191] name failslab, interval 1, probability 0, space 0, times 0 [ 229.354771][T12191] CPU: 1 PID: 12191 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 21:51:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 229.354776][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.354781][T12191] Call Trace: [ 229.354798][T12191] dump_stack+0x1fb/0x318 [ 229.354819][T12191] should_fail+0x4b8/0x660 [ 229.354852][T12191] __should_failslab+0xb9/0xe0 [ 229.354864][T12191] ? skb_clone+0x1cc/0x380 [ 229.354874][T12191] should_failslab+0x9/0x20 [ 229.354884][T12191] kmem_cache_alloc+0x56/0x2e0 [ 229.354901][T12191] skb_clone+0x1cc/0x380 [ 229.354923][T12191] dev_queue_xmit_nit+0x3e4/0xb40 [ 229.354943][T12191] ? validate_xmit_xfrm+0x58/0xdf0 [ 229.354963][T12191] dev_hard_start_xmit+0x11c/0x3f0 [ 229.354992][T12191] __dev_queue_xmit+0x1e1f/0x2e70 [ 229.355002][T12191] ? __copy_skb_header+0x466/0x5c0 [ 229.355019][T12191] ? __kasan_check_write+0x14/0x20 [ 229.355053][T12191] dev_queue_xmit+0x17/0x20 [ 229.355064][T12191] netlink_deliver_tap+0x5f6/0x860 [ 229.355077][T12191] ? __kasan_check_write+0x14/0x20 [ 229.355109][T12191] netlink_sendskb+0x61/0x140 [ 229.355127][T12191] netlink_unicast+0x5af/0x920 [ 229.355155][T12191] netlink_ack+0x6ed/0x9c0 [ 229.355185][T12191] netlink_rcv_skb+0x238/0x3e0 [ 229.355198][T12191] ? rtnetlink_bind+0x80/0x80 [ 229.355232][T12191] rtnetlink_rcv+0x1c/0x20 [ 229.355245][T12191] netlink_unicast+0x766/0x920 [ 229.355275][T12191] netlink_sendmsg+0xa2b/0xd40 [ 229.355302][T12191] ? netlink_getsockopt+0x9f0/0x9f0 21:51:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 229.355319][T12191] ____sys_sendmsg+0x4f7/0x7f0 [ 229.355350][T12191] __sys_sendmsg+0x1ed/0x290 [ 229.355384][T12191] ? check_preemption_disabled+0xb4/0x260 [ 229.355393][T12191] ? debug_smp_processor_id+0x9/0x20 [ 229.355409][T12191] ? debug_smp_processor_id+0x1c/0x20 [ 229.355421][T12191] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 229.355438][T12191] ? prepare_exit_to_usermode+0x221/0x5b0 [ 229.355451][T12191] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 229.355464][T12191] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.355473][T12191] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 229.355485][T12191] ? do_syscall_64+0x1d/0x1c0 [ 229.355501][T12191] __x64_sys_sendmsg+0x7f/0x90 [ 229.355516][T12191] do_syscall_64+0xf7/0x1c0 [ 229.355532][T12191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.355541][T12191] RIP: 0033:0x45c429 [ 229.355553][T12191] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.355559][T12191] RSP: 002b:00007f023982ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.355570][T12191] RAX: ffffffffffffffda RBX: 00007f023982f6d4 RCX: 000000000045c429 [ 229.355576][T12191] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 229.355582][T12191] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 229.355588][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 229.355595][T12191] R13: 00000000000009f9 R14: 00000000004cc6da R15: 0000000000000008 21:51:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8933, &(0x7f0000000080)) 21:51:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7, 0x501e00) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @rand_addr="b070a70ddc6976c22c614ad870bf5b6d", 0x5}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8, 0x10}, &(0x7f0000000040)=0xc) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r4, 0x1}, 0x8) 21:51:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:51:50 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x408180, 0x1da) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x20, 0x9, 0x6, 0x2}) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x4b65, 0x0) 21:51:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8933, 0x0) 21:51:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xae01, &(0x7f0000000080)) 21:51:50 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:51:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000140)={0xfffffff, 0x2, 0x401, r3, 0x0, &(0x7f0000000100)={0x980913, 0x3, [], @string=&(0x7f00000000c0)=0x7}}) r5 = semget(0x0, 0x1, 0x0) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/146) getsockname$netlink(r4, &(0x7f0000000180), &(0x7f00000001c0)=0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x8, 0x18}, 0xc) 21:51:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x50}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8983, 0x0) 21:51:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x400454ca, &(0x7f0000000080)) [ 230.282505][T12230] FAULT_INJECTION: forcing a failure. [ 230.282505][T12230] name failslab, interval 1, probability 0, space 0, times 0 [ 230.328863][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 230.341756][T12230] CPU: 0 PID: 12230 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 230.350697][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.360760][T12230] Call Trace: [ 230.364066][T12230] dump_stack+0x1fb/0x318 [ 230.368425][T12230] should_fail+0x4b8/0x660 [ 230.373057][T12230] __should_failslab+0xb9/0xe0 21:51:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x89e2, 0x0) 21:51:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c00028008000200000000000800010000000000080001000000000067fae80cc9024399f43cac447acd129f3ffcc3"], 0x54}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xffff}) [ 230.378037][T12230] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 230.383777][T12230] should_failslab+0x9/0x20 [ 230.388412][T12230] __kmalloc+0x7a/0x340 [ 230.392798][T12230] ? tomoyo_realpath_from_path+0xdb/0x6b0 [ 230.398736][T12230] ? kfree+0x1f/0x220 [ 230.402739][T12230] tomoyo_realpath_from_path+0xe8/0x6b0 [ 230.408416][T12230] tomoyo_path_number_perm+0x18f/0x690 [ 230.414063][T12230] ? smack_file_ioctl+0x225/0x2e0 [ 230.414091][T12230] tomoyo_file_ioctl+0x23/0x30 21:51:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 230.414106][T12230] security_file_ioctl+0x68/0xd0 [ 230.414125][T12230] __se_sys_ioctl+0x4e/0x190 [ 230.414138][T12230] ? do_syscall_64+0x1d/0x1c0 [ 230.414155][T12230] __x64_sys_ioctl+0x7b/0x90 [ 230.414171][T12230] do_syscall_64+0xf7/0x1c0 [ 230.414190][T12230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.414200][T12230] RIP: 0033:0x45c429 [ 230.414211][T12230] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.414217][T12230] RSP: 002b:00007f170cf52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.414229][T12230] RAX: ffffffffffffffda RBX: 00007f170cf536d4 RCX: 000000000045c429 [ 230.414235][T12230] RDX: 0000000000000000 RSI: 000000000000560b RDI: 0000000000000003 21:51:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40044590, 0x0) 21:51:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40045532, &(0x7f0000000080)) [ 230.414274][T12230] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 230.414280][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 230.414286][T12230] R13: 0000000000000667 R14: 00000000004c8f7c R15: 0000000000000000 [ 230.448697][T12230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.584794][T12248] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:51 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) [ 230.740797][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 230.760868][T12264] FAULT_INJECTION: forcing a failure. [ 230.760868][T12264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.774592][T12264] CPU: 0 PID: 12264 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 21:51:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x400454ca, 0x0) 21:51:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40049409, &(0x7f0000000080)) [ 230.783274][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.793338][T12264] Call Trace: [ 230.796777][T12264] dump_stack+0x1fb/0x318 [ 230.801128][T12264] should_fail+0x4b8/0x660 [ 230.805797][T12264] ? __kasan_check_read+0x11/0x20 [ 230.811064][T12264] should_fail_alloc_page+0x4f/0x60 [ 230.816276][T12264] prepare_alloc_pages+0x283/0x460 [ 230.821621][T12264] __alloc_pages_nodemask+0xb2/0x5d0 [ 230.821658][T12264] kmem_getpages+0x4c/0x930 [ 230.821680][T12264] cache_grow_begin+0x7e/0x2e0 [ 230.821690][T12264] ? cache_alloc_pfmemalloc+0x1e/0x1a0 [ 230.821709][T12264] cache_alloc_refill+0x328/0x400 [ 230.821723][T12264] ? debug_smp_processor_id+0x9/0x20 [ 230.821741][T12264] __kmalloc+0x318/0x340 [ 230.821881][T12264] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 230.821911][T12264] tomoyo_realpath_from_path+0xe8/0x6b0 [ 230.821945][T12264] tomoyo_path_number_perm+0x18f/0x690 [ 230.822002][T12264] ? smack_file_ioctl+0x225/0x2e0 [ 230.822028][T12264] tomoyo_file_ioctl+0x23/0x30 [ 230.822041][T12264] security_file_ioctl+0x68/0xd0 [ 230.822059][T12264] __se_sys_ioctl+0x4e/0x190 [ 230.822071][T12264] ? do_syscall_64+0x1d/0x1c0 [ 230.822087][T12264] __x64_sys_ioctl+0x7b/0x90 [ 230.822104][T12264] do_syscall_64+0xf7/0x1c0 [ 230.822121][T12264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.822132][T12264] RIP: 0033:0x45c429 [ 230.822144][T12264] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.822151][T12264] RSP: 002b:00007f170cf52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.822162][T12264] RAX: ffffffffffffffda RBX: 00007f170cf536d4 RCX: 000000000045c429 21:51:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x18000, 0x0) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x81}) [ 230.822169][T12264] RDX: 0000000000000000 RSI: 000000000000560b RDI: 0000000000000003 [ 230.822175][T12264] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 230.822182][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 230.822187][T12264] R13: 0000000000000667 R14: 00000000004c8f7c R15: 0000000000000001 [ 231.008825][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:51 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:51:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40186366, &(0x7f0000000080)) 21:51:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x400454d8, 0x0) 21:51:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x3, "7eedaa12804ad4fe5ceb9dd71044d2ed47ea9ed10b13f215d26512230c8bb386", 0x0, 0x8000, 0xfe, 0xfff, 0x704a, 0xffffffc0, 0x8, 0x1, [0x5, 0x0, 0x10001, 0x5f9]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x1ff}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000040)={0x800, 0xf215, 0x1000, 0x9, 0xffffff8f, 0x80000000}) 21:51:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40049409, 0x0) 21:51:51 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20a41) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) 21:51:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:51:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4020940d, &(0x7f0000000080)) 21:51:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4008ae8a, 0x0) [ 231.381230][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4020ae46, &(0x7f0000000080)) 21:51:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x2, 0x0) 21:51:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40186366, 0x0) 21:51:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40345632, &(0x7f0000000080)) 21:51:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x10, 0x0) 21:51:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4020940d, 0x0) 21:51:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4610, 0x0) 21:51:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4038564f, &(0x7f0000000080)) 21:51:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_extract_tcp_res(&(0x7f00000004c0), 0x3, 0xc) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x8, 0x1b, 0x193, &(0x7f0000000000)="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"}) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000480)={0x0, 0xff, 0x19b56ef9, [], &(0x7f0000000440)=0x1f}) 21:51:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40305828, 0x0) 21:51:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b2f, 0x0) 21:51:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4080aebf, &(0x7f0000000080)) 21:51:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:52 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f0000000000)="c32b6beedc853e01168235baffb3c6bdaa89347c4accf00819bd653d9d60c281a6ba3d85c614ae6885efb00b5c4d0f6ac04cb9aeba344f13870589cac7376f225de8045a4f308f41411b0fa801dee277326b1c4baf4d42f7e298354b2c55c3cde34fbe7310b04622214e8daa071ec3cf2cf853f5f7e108210b2430ab75df0ec827a781e5832a3b5e35922e643e494c8000cf0d3faee3a87dd1685ca0489411a4d7f20736f39538c1b3a8e444f824b75ad232180f16f612a7d53f583a996328d912e8b851f61f1134b6a55bf9e38b0aa92f122fbb023280187235692831709a335761ae9b8ee36db4452e60c0dbb0a8ad52c85cd6eb", 0xf5) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) 21:51:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b30, 0x0) 21:51:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80045432, 0x0) 21:51:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80044944, &(0x7f0000000080)) 21:51:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x10000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000040)=""/127, &(0x7f00000000c0)=0x7f) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000000)={0xfffffeff, 0x7fff, 0x7fff, 0x3, 0x3, 0x6, 0x8}) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)=""/48) 21:51:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80045440, 0x0) 21:51:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b31, 0x0) 21:51:52 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x6) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/capi/capi20ncci\x00', 0x201, 0x0) ppoll(&(0x7f0000000cc0)=[{r0, 0x5111}, {r1}, {r2}, {}, {r3, 0x40}], 0x5, &(0x7f0000000d00)={0x77359400}, &(0x7f0000000d40)={[0x39]}, 0x8) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r4, 0x4b65, 0x0) 21:51:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80044dfb, &(0x7f0000000080)) 21:51:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b32, 0x0) 21:51:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80086301, 0x0) 21:51:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r1, 0x16, 0x0, 0xffff2fa1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) 21:51:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x494a00, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)) tgkill(r0, r1, 0x3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r4, 0x5414, 0x0) 21:51:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80045432, &(0x7f0000000080)) 21:51:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b33, 0x0) 21:51:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0045878, 0x0) 21:51:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x719}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={r2, @in={{0x2, 0x4e23, @multicast1}}, [0x2ec9, 0x80000001, 0x3cb5, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x5, 0x2, 0x1, 0x9, 0x1f, 0x800, 0x200]}, &(0x7f0000000180)=0x100) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x193182, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x7ff, 0x9, 0x0, 0x6}, 0x8) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80045440, &(0x7f0000000080)) 21:51:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b34, 0x0) 21:51:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x40) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000100)={@initdev, @multicast1, @dev}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r0, r1, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000400)={@multicast1, @dev}, &(0x7f0000000440)=0xc) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000000)=""/159) 21:51:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0045878, 0x0) 21:51:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80086301, &(0x7f0000000080)) 21:51:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x5, 0x2) 21:51:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b35, 0x0) [ 233.070245][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0189436, 0x0) 21:51:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x800c5012, &(0x7f0000000080)) 21:51:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) ioctl$TIOCSSERIAL(r0, 0x541e, &(0x7f0000000040)={0x1, 0x100, 0x952, 0x8000, 0x3f, 0x3, 0x6, 0xfff, 0x0, 0x4, 0x1f, 0x800, 0x61b1, 0x4, &(0x7f0000000000), 0x1000, 0x20, 0x5}) 21:51:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b36, 0x0) 21:51:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc020660b, 0x0) [ 233.321114][T12456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0045878, &(0x7f0000000080)) 21:51:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x4, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", ""]}, 0x72}, 0x1, 0x0, 0x0, 0x24048040}, 0x40000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x100, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="02000700d7f0526c5c6501ff400002000700"], &(0x7f00000001c0)=0x16) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r6, @in={{0x2, 0x4e21, @local}}, 0x800, 0x81}, 0x90) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x8001000, 0x63, 0x2}) 21:51:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, 0x0) 21:51:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0502100, 0x0) 21:51:54 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240080, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r3, 0x5414, 0x0) 21:51:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0045878, &(0x7f0000000080)) 21:51:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3a, 0x0) 21:51:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0189436, &(0x7f0000000080)) 21:51:54 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0xa0, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8a}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x11a}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr="f92db485ad8374281da2cf807b2bf701"}}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48014}, 0x4004881) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000003c0)=0x2, 0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000200)=@phonet={0x23, 0x5, 0xff}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="0a9ad1c2bcec71f2fef8b175f22a276d0ecea9aaf2acf6f254905482d1cfb32d9e15696bc589f47da0b2405bbc26d2a23defe17c614d2e04aa12b63593bb67d29e6d8b1c97dfd61bb0263d4063bebcdc5c35c6b7f8c62acd8455a9e9e43324f41df7ad333659bda843e206c3676b", 0x6e}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000003a00000000000000ff1c2b88319e0000067d050a081b9b7ab1666d8fc72db4eae2889478b8b8a75d7f9881bee50400000019c4a4e83c37733c69ed090aac513f8840b5bebe03a5489ad59a800411e68ad011a595e09f9d614d6259d3a7a7fa2812207a5befd44731c6d93c4bb5d2adb961b04b5c7d2aa18b7adf1d1c4d1c7be4a85cc87c0e9d264f85a5c7495fd3001578e2ad9317be46c4776369253a8f91f17fa4ef32b03d88a78d8ca79b067dc9424c5a5f728d1a92e9bdd6a4a1bb6219814153a23b38c6ba51e5eb0d8adb"], 0x18}, 0x8000) ioctl$VT_GETSTATE(r2, 0x4b65, 0x0) 21:51:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3b, 0x0) 21:51:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x2b68b8d9, 0x6, 0x4, 0x0, 0x1, {}, {0x1, 0x0, 0x7f, 0xb1, 0x0, 0x9, "cc8ee86f"}, 0x9, 0x2, @userptr=0x7fffffff, 0x5, 0x0, r0}) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$KDDISABIO(r2, 0x4b37) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc020660b, &(0x7f0000000080)) 21:51:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x8}}, 0x18) 21:51:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3c, 0x0) 21:51:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:51:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x2, {0xffffffffffffffff}, {r3}, 0x800, 0x60e}) sched_getattr(r4, &(0x7f0000000080)={0x38}, 0x38, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 21:51:54 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 21:51:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b3d, 0x0) 21:51:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2}) 21:51:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc00, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x4b65, 0x0) 21:51:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b40, 0x0) 21:51:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x3}) 21:51:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b41, 0x0) 21:51:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x20, {{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd8}}, 0x0, 0x3, [{{0xa, 0x4e22, 0xe9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, {{0xa, 0x4e21, 0x1, @empty, 0x8}}, {{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x2e}, 0x5}}]}, 0x210) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) 21:51:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x4}) 21:51:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000000)={0x2, 0x1ff, 0x5, 0x3f, 0x5000000, 0xffffffff, 0x2, 0x76a, 0x400}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b44, 0x0) 21:51:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0xfff, 0x9, 0x3, 0x4, 0x6}) 21:51:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x5}) 21:51:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b45, 0x0) 21:51:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x684940, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x2d4}) 21:51:55 executing program 2: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 21:51:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x6}) 21:51:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b46, 0x0) 21:51:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0)=0x1c, 0x4) 21:51:55 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r2}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @multicast2}}, 0x2, 0x3f, 0x1, 0x9, 0x5e}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x31ac1de4, @rand_addr="58504a4b3e32a076fe059878a9ca6f5b", 0x80006}}, 0x9, 0xffa4, 0x6, 0x3, 0xb, 0x200, 0x88}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) readahead(r4, 0x6, 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r5, 0x4b65, 0x0) 21:51:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x7}) 21:51:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b47, 0x0) 21:51:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x220000, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x200c8007) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:55 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 235.229539][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b48, 0x0) 21:51:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x8}) [ 235.381968][T12643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x9}) 21:51:55 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b49, 0x0) 21:51:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4a, 0x0) 21:51:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xa}) 21:51:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000040)={0x964, 0x0, 0x5, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x8}, 0x8, 0x8, 0x1f, 0x7, 0xa, 'syz0\x00', "21b0deb3a146dc1c74f63cf0c88ffdd31b6be804f445750436b25c51d6ba631b", "a2b4682f8827abf4e35d1ab65875bb7033f3802e7b24de3c953c29f2bc9f20d7", [{0x9, 0x9, {0x2, 0x7f}}, {0x8, 0x0, {0x3, 0x2000000}}, {0x5272, 0x5413, {0x3, 0x800}}, {0x1f, 0xfffe, {0x0, 0xffff931b}}, {0x20, 0xee, {0x0, 0x9}}, {0x6, 0x8001, {0x2, 0x20}}, {0x1, 0x7ff, {0x2, 0x6}}, {0x5, 0x82, {0x3, 0x100}}, {0x0, 0x1ff, {0x2, 0x80000000}}, {0xfff9, 0x20, {0x0, 0x3}}, {0x9, 0x7fff, {0x3, 0x7}}, {0x800, 0x6, {0x2, 0xc0}}, {0x1, 0x6, {0x3, 0x1}}, {0x7f, 0x2, {0x2, 0x200}}, {0x5, 0x7e1c, {0x3, 0x2}}, {0x3, 0x8, {0x2, 0x1000}}, {0x1, 0x3, {0x2, 0x81}}, {0x8000, 0x9, {0x2, 0x8}}, {0x5, 0x3, {0x1, 0xfffffffa}}, {0x606, 0xfff, {0x3, 0x1}}, {0x5, 0x8, {0x3, 0x1}}, {0xfffa, 0x2, {0x0, 0x4}}, {0x1, 0x6, {0x1, 0x7}}, {0x7, 0x5, {0x0, 0xad}}, {0x4, 0xa2f6, {0x0, 0xffff8347}}, {0x200, 0xfff, {0x3, 0x10000}}, {0x0, 0x1, {0x1, 0x1}}, {0x6, 0x2, {0x1, 0x1}}, {0xffe1, 0xb2, {0x3, 0x1}}, {0x5, 0x20, {0x1}}, {0xecb4, 0x3f, {0x0, 0x9}}, {0x1, 0x80, {0x0, 0x6}}, {0x2, 0x4}, {0x9, 0x7f, {0x2, 0x3}}, {0xfff, 0xfffd, {0x2, 0x3f}}, {0x7, 0x81, {0x0, 0x4}}, {0x9, 0xfff, {0x2, 0x2361}}, {0x5, 0x6, {0x1, 0x8000}}, {0x4069, 0x8000, {0x0, 0x80000000}}, {0x0, 0x5, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x0, 0xc1, 0x4, 0x400, 0x2, 'syz1\x00', "f17d55deb541eb93dbc87e4e1da711b545451786b371d1f166c92b181ee04cef", "fb75cf741bd85f163245eb6cd05a6c1605164dd355d8d89cfe7c9934222069b1", [{0x8fa, 0x200, {0x0, 0x2}}, {0x1, 0x98, {0x2, 0x400}}, {0x66b, 0x9, {0x0, 0xfffffffb}}, {0xc672, 0xb6a, {0x0, 0x8}}, {0x78d3, 0x2, {0x3, 0xda0}}, {0xa0, 0x1000, {0x0, 0x5495}}, {0x2437, 0x9, {0x0, 0x8fd}}, {0x603, 0x5, {0x2}}, {0x7, 0x5, {0x0, 0x7fffffff}}, {0x8001, 0x5, {0x2, 0x8001}}, {0x3, 0x100, {0x2, 0x4}}, {0x80, 0x2, {0x1, 0x4}}, {0xff, 0x65, {0x1, 0xfffffffb}}, {0x1, 0x9, {0x2, 0x1}}, {0x5, 0x9, {0x2, 0x515}}, {0x8, 0xc179, {0x0, 0xfffffff7}}, {0x7, 0x1, {0x0, 0x1}}, {0x0, 0x9, {0x0, 0xb8}}, {0xfffd, 0x9, {0x2, 0x401}}, {0x6, 0xff, {0x1, 0x80000000}}, {0x81, 0x0, {0x0, 0x1}}, {0x6, 0x401, {0x0, 0x9c8}}, {0x6a8, 0x8, {0x3, 0x6}}, {0x200, 0xaa, {0x2, 0x3}}, {0x9, 0x0, {0x0, 0x10000}}, {0x0, 0x4, {0x3, 0x7}}, {0xff, 0x200, {0x2}}, {0x9, 0x3, {0x0, 0x9}}, {0x3, 0x920b, {0x2, 0x3}}, {0x200, 0xdc3, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x5}}, {0xffff, 0x3, {0x0, 0xffffffff}}, {0x26, 0x4, {0x2, 0x8001}}, {0x2, 0x2, {0x1, 0x6}}, {0x6, 0x5, {0x3, 0x5}}, {0x1ff, 0x8, {0x0, 0x2d}}, {0x8, 0x8, {0x2, 0x43c}}, {0x2, 0x8, {0x1, 0x7}}, {0x2, 0x1e, {0x3, 0xfffff916}}, {0x1, 0x7fff, {0x1, 0x1f}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x1f, 0x80, 0x3ff, 0xf0, 0x10, 'syz0\x00', "a058794bd8a10b722c890ae782889eaf3fc0351cd8b93dab99abd5cd20e38ffc", "2feda7a01b131facfd0138705acd44d154969bc05d3ea5e8a6fbdfe664638188", [{0x0, 0x2, {0x1, 0x2}}, {0x6, 0x9, {0x1, 0x4b7}}, {0x3, 0x101, {0x3, 0x1}}, {0x7, 0x7, {0x5, 0x3f}}, {0xfffb, 0x3, {0x1, 0x4}}, {0x8, 0x4, {0x3, 0x9}}, {0x2, 0xfeff, {0x2, 0x5}}, {0x8, 0x0, {0x1, 0x45}}, {0xfffd, 0x0, {0x0, 0x8}}, {0x1, 0x1, {0x1, 0xdd9}}, {0x80, 0x1, {0x1, 0x1109}}, {0x1, 0xad, {0x2, 0x200}}, {0xffe1, 0x5, {0x3}}, {0x310, 0x9, {0x2, 0x4}}, {0x0, 0x1, {0x3, 0x7}}, {0x8001, 0x1ff, {0x1, 0x4}}, {0x6, 0x100, {0x1, 0x1}}, {0x2, 0x3f, {0x2, 0x9}}, {0x80, 0x8, {0x2, 0x6}}, {0xcfc9, 0x0, {0x1}}, {0x401, 0xfd, {0x3, 0x50f9}}, {0x5, 0x0, {0x2, 0x7}}, {0x4, 0x3, {0x0, 0x6}}, {0x2, 0x1, {0x3, 0x4}}, {0x40, 0xffff, {0x3}}, {0x7, 0x7f8, {0x0, 0x7f}}, {0x9, 0x4, {0x1}}, {0x6, 0xc, {0x1, 0xffffffff}}, {0x6944, 0xfc8b, {0x1, 0x2}}, {0x200, 0x20, {0x3, 0x3ff}}, {0x100, 0x371, {0x3, 0x1}}, {0x4, 0x40, {0x1, 0x7f4d4561}}, {0x40, 0xfff8}, {0x800, 0x8c, {0x3, 0x1}}, {0xff, 0x5, {0x3, 0x8}}, {0x343, 0x8, {0x1, 0x1b7}}, {0xff, 0xf85e, {0x3, 0x9}}, {0xec, 0x7, {0x0, 0x8}}, {0x20, 0x6e8, {0x0, 0x7fffffff}}, {0x5, 0x5, {0x3, 0x1000}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x55, 0x5, 0xff, 0x81, 0x25, 'syz0\x00', "8e61d6eff2084ef4de5ee271936f0b5a318ba8f8ca38d2f72bc10dbb2c837677", "591f1fbc1db8be1d3cda15f38d0f3be5262d6df095940fae9fde3ecb0f89faa6", [{0x4, 0x6bd4, {0x1, 0x200}}, {0x9, 0x0, {0x3, 0x8f4}}, {0x0, 0x4, {0x3, 0x4}}, {0xb758, 0xffff, {0x1, 0x14f0b3a}}, {0x101, 0x5, {0x0, 0x1}}, {0xfe00, 0xffff, {0x0, 0x3}}, {0x6, 0x1ff, {0x1, 0x5}}, {0x4, 0xa6, {0x2, 0x5260c7d0}}, {0x8000, 0x9, {0x2, 0x9}}, {0x8, 0x3, {0x3, 0x6d47}}, {0x8000, 0x2a, {0x2, 0x3ff}}, {0xe04, 0x200, {0x3, 0x401}}, {0xfffc, 0x0, {0x3, 0x58}}, {0x400, 0x65, {0x2, 0x8}}, {0x1, 0x7, {0x0, 0x21c5}}, {0x7f, 0x2, {0x2, 0x3ff}}, {0x0, 0x0, {0x0, 0x5}}, {0x3, 0x9, {0x3, 0x8}}, {0x70f6, 0xeebd, {0x1, 0x2}}, {0x2, 0x7fff, {0x1, 0x7e0e}}, {0x4, 0x6, {0x2, 0x7ff}}, {0x8, 0x8000, {0x3, 0x6}}, {0xc329, 0x6, {0x3, 0xfffff000}}, {0x0, 0x4, {0x0, 0x1f}}, {0x2, 0x3, {0x0, 0x6}}, {0x6, 0x2, {0x2, 0x6}}, {0xffff, 0x1, {0x3, 0x3407}}, {0x1, 0x2, {0x0, 0x6}}, {0x3, 0x8, {0x0, 0x2}}, {0x0, 0x8000, {0x2, 0x6}}, {0x0, 0x17e7, {0x3, 0x1}}, {0x4, 0xc1b7, {0x0, 0x4}}, {0x0, 0x7f7, {0x1, 0x6}}, {0x101, 0xe7c4, {0x0, 0x80000001}}, {0xa8, 0x7ff, {0x1, 0x200}}, {0x3, 0x100, {0x3, 0x8}}, {0x8, 0x7, {0x1}}, {0x5, 0x2008, {0x1, 0x4}}, {0x1, 0x7f, {0x0, 0xc0}}, {0x8000, 0x6, {0x3}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40040}, 0x800) 21:51:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x741080, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xb}) 21:51:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x4, 0xb, 0x4, 0x0, 0x0, {r2, r3/1000+10000}, {0x2, 0xc, 0x84, 0x2, 0x3, 0x7, "c9e09bdc"}, 0x3, 0x4, @userptr=0x1ff, 0x2}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0xfffffe8e}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x1015, 0x1, 0x3, "71daf32ad4d5bccaa3357281e5f315d5", "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"}, 0x1015, 0x3) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000001080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) write$FUSE_OPEN(r2, &(0x7f00000010c0)={0x20, 0x0, 0x8, {0x0, 0x14}}, 0x20) 21:51:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4b, 0x0) 21:51:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xc}) 21:51:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 235.934925][T12700] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 21:51:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='vmnet1&,cgroup\x00', 0xfffffffffffffff9) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000280)={{0x2, 0x0, @identifier="4d6d22c2982360fbddfa27c193499496"}}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/31}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000001c0)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/71) 21:51:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4c, 0x0) 21:51:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xd}) 21:51:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 236.163995][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4d, 0x0) 21:51:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xe}) 21:51:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b4e, 0x0) 21:51:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0xf, r3, 0x3c}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = dup3(0xffffffffffffffff, r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r9, &(0x7f0000000900)={0x2c, 0xf, r7, 0x3c}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="64069331e196bc913a39824070c7b2fd28cb973275e9422b905ec523ac39b39311bbdfebbbcdff1c894c02988b240924ec54fa752b88aded9ee23976dfded494aaaa28d7aaca6c750e3368905b4c4faa327b4a5a629770ccc546b87c3e523e376fb276e31375e32b2558f5096d4d95636b357be261288f84de8b99df8fa52c910b1aca5332305209e36ccf3f8ee0446fee7fd6073e98532c77c836dd3fc6d9a5725e25b7165403081e5c134d6c50d27409832d2c1e01898a26a2b23a59a31895ab0dda6027f4b79e76306ca2be69979d465e0d8493398911230f745cff405c9fb4f0124807674526b58cff62", @ANYRES32=r11, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) r13 = dup3(0xffffffffffffffff, r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r13, &(0x7f0000000900)={0x2c, 0xf, r11, 0x3c}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x114, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xc8, 0x12, 0x0, 0x1, @ip6vti={{0xb, 0x1, 'ip6vti\x00'}, {0xb8, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x800}, @IFLA_VTI_LINK={0x8, 0x1, r3}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}], @IFLA_VTI_REMOTE={0x14, 0x5, @mcast1}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfff}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x8}, @IFLA_VTI_LINK={0x8, 0x1, r11}, @IFLA_VTI_OKEY={0x8, 0x3, 0xc68f}, @IFLA_VTI_OKEY={0x8, 0x3, 0x20}], @IFLA_VTI_LOCAL={0x14, 0x4, @local}]}}}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x114}}, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)="a573662d340b40cb11d7690e85f33dd02e86572316b1138585cc7c3c192661bb015b4825a2722e95a1c39ac84aafd986f88822ffe3863a8f5c6daff65225d90b65e730b1bd0669f8779ddafd", 0x4c}, {&(0x7f00000000c0)="ba2727e1a99ce34ff283ef8abc7ee84d7f2731daab94927ed9744d03312230ab3dd2004ea76725f478da164496db80d77893b2379f25a7850a82b1c983cc42d32e11747a42352310e805bab16849d8bd4636863f150e9ab40480ef985122f8d1bd3562543c57bdb48e8fb38ed4e25834bc93f13b28144fdabaa9bae6ae6fa8ad8dfb40b2cf2d1dca86cfe556f1863e4f00ebbea04f46b9cae2efc1a568bd4b4a3ed79670235ecc7da6153b97afcf68641f135cc03c709785ecc25666683df088f2335fad70c35d7cf815d68487df68b116f0fd171a", 0xd5}, {&(0x7f00000001c0)="43adf5837c37bb87af3f8f5dd22d22de0369d663921673471e465f9c770e97e0b6142ed1c93449b205137f2ee4c3fc65fb5f7d00f878b0c855a1d8f14a623dd73f7f2d527aad2d4fbba7e690b4fedb59c1f7ad6fe650e31d0a4a56b075147d28787afee4f0576c338831b0d22e4432d900fca097", 0x74}, {&(0x7f0000000240)="b4197a6b00b2668f9213ba8d7d59331419b0c3894d1c5174cdea592cae8c0073", 0x20}, {&(0x7f0000000280)="741701597dd2f3582ebd359dd405546b3347f03086b14c41f2ad7aef06ad", 0x1e}, {&(0x7f00000002c0)="35b7ff0219ea48d30edd380d969116560b5633453b08e574dd0a8973c0d6de2465e739928a24ccfd8af2ffe192e85e39c3e7aae10d1eadfc89049656f07ddc420eb1b7f896f86d18479fdc606a850766125b01e60e888d1264cd51b8335fefca51a7aa3a59c93a2b0a52", 0x6a}], 0x6, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}], 0x18}, 0x80891) 21:51:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x10}) [ 236.377745][T12721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b52, 0x0) 21:51:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x11}) 21:51:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b60, 0x0) 21:51:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x1000, 0x9, 0x3, 0x8, 0x3}) 21:51:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x1c00, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x12}) 21:51:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b61, 0x0) 21:51:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 21:51:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x25}) 21:51:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b62, 0x0) 21:51:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2fa4, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x5c}) 21:51:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b63, 0x0) 21:51:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x300}) 21:51:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x5, 0x10, 0x4, 0x3, 0x1, 0x7fff}) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b64, 0x0) 21:51:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x3000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x500}) 21:51:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000000)=0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x4b65, 0x0) 21:51:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x600}) 21:51:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b66, 0x0) [ 237.533047][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b67, 0x0) 21:51:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x700}) 21:51:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b68, 0x0) 21:51:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0x9e0000, 0x20, 0x6, r0, 0x0, &(0x7f0000000280)={0x990a63, 0x8, [], @ptr=0x8}}) write$P9_RXATTRCREATE(r2, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000000), &(0x7f0000000040)) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x52060, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000540)={&(0x7f0000000300)=@can, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/209, 0xd1}], 0x1, &(0x7f00000004c0)=""/90, 0x5a}, 0x10041) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r6, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'ib'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8, 0x0, 0x9, 0x7}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:51:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x900}) [ 237.757369][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:51:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b69, 0x0) 21:51:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xa00}) [ 237.962722][T12835] tipc: Enabling of bearer rejected, illegal name 21:51:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x408200, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x4000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6a, 0x0) [ 238.007272][T12840] tipc: Enabling of bearer rejected, illegal name 21:51:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x81, 0x7, 0xff, 0x7ff, 0x3}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000200)={0x0, 0x8000, 0x5, 0xab, 0xa14, 0xff, 0x9, 0x12, 0x2, 0x3, 0x5, 0x4}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x5, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r6, 0x0, 0x7}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={r6, 0x3, 0x7, 0x1, 0x3, 0x7fffffff}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0xfffffffc}]}}}]}, 0x54}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x80, 0x800, r2, 0x0, &(0x7f0000000040)={0x9c0908, 0x8, [], @p_u16=&(0x7f0000000000)=0x7c}}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f00000001c0)) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r9, 0x81204101, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x5c, r10, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x6b9f38f57c135557}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'keyring\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44844}, 0x60000) sendmsg$NLBL_MGMT_C_REMOVE(r9, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r10, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x2080) getpeername$ax25(r7, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @remote, @null, @null, @rose, @netrom, @bcast]}, &(0x7f0000000140)=0x48) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000180)={0x2, 0x492, 0x2, 0x2, 0xc0000000, 0x2}) write$smack_current(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="9f62fe78ec4b2faed099b983b9c903e097e6c039d4"], 0x6) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xb00}) 21:51:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6b, 0x0) 21:51:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 21:51:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x4788, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x0, 0x6, 0x2}) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$RTC_AIE_OFF(r1, 0x7002) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r5, 0x80000001}, 0x8) 21:51:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xc00}) 21:51:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6c, 0x0) 21:51:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) accept$ax25(r4, &(0x7f0000000000)={{}, [@rose, @bcast, @bcast, @default, @null, @null, @remote, @netrom]}, &(0x7f0000000080)=0x48) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x40000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x6) ioctl$VT_GETSTATE(r3, 0x5603, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000100)={0x6, {{0xa, 0x4e22, 0x401, @local, 0xffffff73}}}, 0x88) 21:51:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xd00}) 21:51:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x4888, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x40000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e20, 0x200, @mcast1, 0xce}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000f00)="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", 0x1000}], 0x1}, 0x80) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x201040, 0x0, {}, {0x1, 0x8, 0x60, 0x7, 0xac, 0x2, "14bc3dfb"}, 0x9, 0x2, @userptr, 0x7, 0x0, r3}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) 21:51:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b6d, 0x0) 21:51:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xe00}) 21:51:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x23) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x759002, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x40, 0x800) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) bind$x25(r2, &(0x7f00000000c0)={0x9, @remote={[], 0x0}}, 0x12) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000100)=""/203) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) socket$phonet(0x23, 0x2, 0x1) [ 238.816812][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b70, 0x0) 21:51:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x1100}) 21:51:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b71, 0x0) [ 239.003694][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:51:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x1200}) 21:51:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x0, 0x8200, 0x4, 0x101, 0x1000, 0x9, 0x0, r4}, 0x20) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b72, 0x0) 21:51:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x40040, 0x40) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000500)=""/193) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010003a0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x5}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x100000, 0x8, {r4, r5/1000+10000}, {0x3, 0xc, 0x25, 0xff, 0x84, 0x20, "e5bf2967"}, 0x8, 0x1, @offset=0x8, 0x40000000, 0x0, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x80, @null, @bpq0='bpq0\x00', 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) pidfd_getfd(0xffffffffffffffff, r3, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x12c, 0x7, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x65, 0x7, 0x1, 0x0, "725728c94e706d7e81eebe00ea9960aa417883ba2ec191c76ab76186172c92ffe05dde32f82d8e0dc6a04c617f9de4305e23b82c98b47a91f38fdfc44490ea5f4e87ce146ae8cce5d3960d7070cf66b12caf01f011e88bca9b1b18bae95537991c"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x45, 0x7, 0x1, 0x0, "f7b375e107eb945bd8cda3ee22bab02cab72a933d6f1f9b5feae2a30c18388162fa2c12c764d99fbd513204575ffb13eb52cd64200503c7c633cd0c46592a1e55a"}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xe909}]}, @NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "f7f789d1ceb1af6b05cc5ec237338e82800bafbc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8141, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000600)={0x1, 0x5, 0x1, 0x8, 0x619, 0x0, 0xa}) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:51:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101002, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x104) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000015}, 0x4000) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:51:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:51:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2500}) 21:51:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x762a, 0x1, 0x7d, 0x5, 0xfd, "c32927b5250341aecb553c75b67232555e9f4c", 0x7, 0xadc6}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:51:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4bfa, 0x0) 21:52:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x80000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r5, 0x1ff, 0x1, [0x2]}, 0xa) 21:52:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x5c00}) 21:52:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4bfb, 0x0) 21:52:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r3}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3, 0x80000000, 0x6, 0x81}, &(0x7f0000000040)=0x10) 21:52:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6558, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000000c0)) close(r1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) prctl$PR_SET_FP_MODE(0x2d, 0x0) fremovexattr(r1, &(0x7f0000000080)=@random={'trusted.', '\x00'}) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r4, 0xfffffff7}}, 0x10) 21:52:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0)=0x1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/209}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000280)={0x9a0000, 0x7ff, 0x5, r2, 0x0, &(0x7f0000000180)={0x980918, 0xb72, [], @p_u32=&(0x7f0000000140)=0x101}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, &(0x7f00000002c0)={0x1}) 21:52:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4c01, 0x0) [ 239.775865][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5409, 0x0) 21:52:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x2}) 21:52:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540b, 0x0) 21:52:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540c, 0x0) 21:52:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:00 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vcsu\x00', 0x202, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001480), &(0x7f00000014c0)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) [ 240.040399][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540d, 0x0) 21:52:00 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x414002, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) accept4$llc(r1, 0x0, &(0x7f0000000040), 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x2) 21:52:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x3}) 21:52:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:00 executing program 2: syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x840) r0 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x501841) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x3f}) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x50, 0x3, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x6d}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1ade}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004011) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x40402, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000600)={0xc0, 0x4, 0x0, 0x7e, 0x40, 0x20, 0x81, 0x3f, 0xfa, 0x0, 0xfe, 0x3, 0x3a, 0x3}, 0xe) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000540)={0x627, 0x8, 0xb6e00b94, 0x6, 0x90, "06b9045802ff3d0bd425aec22b187091eab660", 0x1000, 0x80000001}) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000001c0)={0x9, 0xffffffff, 0x2, 0x5, 0x9, 0x2}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r7 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000003c0)="344574e447d083ea1e9a159ccdc796816df9c8be45be82ad4fb4157240473db8fde959df118492c7f86c9833eb055bbd771db7a0fa50744a5fad6e56607d0d83665f43e15e57fd18c196f8b62c0c82154cb93297e0887af7a5e0dc4c4c4f1bff82370cea82e6332c7052d376fa4966d3dace4ec5b9819567fcfe46908e5ae6546ec2", 0x82, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r7, &(0x7f0000000340)=[{&(0x7f0000000280)="fd2e62256ec3c00ff8f9c6747f13eab93fb3af3ed7aeef0ea73e7079e0c81d1158cb27a5a4d7512f814423404469fde9d0597ddf607d4d22581c251e681a559f92b9f2de209b00a9390f4a570cf44cacdb0989cdad371b2a28d1463341672301896d804ad71140ba387ef89390eef62a94d0de7ce8ec8d698782ee6e8a42be9673bde60b1de6a0aeb658d3ace2b1e14aa575e3", 0x93}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000380)) 21:52:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540e, 0x0) 21:52:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x9, 0x9a94e2a9}) 21:52:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x4}) 21:52:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x540f, 0x0) 21:52:01 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xffff, 0x7f, 0x37, 0x2, 0x11, "64e7fa7d3006eaf9"}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10040, 0x28) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x48a00, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWNSID={0x5c, 0x58, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8, 0x1, 0xffffffff}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x5c}}, 0x0) r8 = dup2(0xffffffffffffffff, r3) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, 0x1407, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xfd}]}, 0x48}}, 0x14) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) 21:52:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8847, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000280)={0x20012400, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x28}, &(0x7f0000000140)=""/48, 0x30, &(0x7f0000000180)=""/161, &(0x7f0000000240)=[0x0, 0x0, 0x0, r2, r3, r4], 0x6}, 0x50) ptrace$getregs(0xc, r5, 0x0, &(0x7f0000000300)=""/101) ioctl$TCXONC(r1, 0x540a, 0x2) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000040)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xfffffffe, 0x6, 0x800, 0x2, 0x14, "e03b5b20716cca17eb1a3a525d0f393f8a6793"}) 21:52:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x5}) 21:52:01 executing program 5: add_key(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, 0x59, 0xfffffffffffffffd) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2, 0x3}, 0x18) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)=@can, 0x80, 0x0}}, {{&(0x7f0000000480)=@caif, 0x80, 0x0}}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000140)={0x60, 0x0, 0x2, {{0xdc51, 0x1, 0x2, 0x6eb, 0x40, 0x8, 0x1, 0x49}}}, 0x60) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000340)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r8}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r8, 0x4000008}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r10, @in6={{0xa, 0x4e22, 0x1f, @local, 0x9}}, 0x8d4, 0x7, 0x9, 0x81, 0x26, 0x106, 0x1}, 0x9c) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r12, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r12, 0x40184150, &(0x7f00000001c0)={0x0, &(0x7f0000000280)="5686ecc1da08b74a7f48e8dff4fb4711e34a89c822462561d13b8a329878b00f369d8ef6981ae2453492ebce2b96a1a9e0f7e3c4282ec3b669f858a867d9c7e09ffb55c2165afafb17e8349edbd3f9dd43aac74adfa7639ce89ef642a1376fd81d1202c5df43a9ee0beb62d0425b9de5db0ee618784e7ec32ff67cf4f6c5ee930e3c38", 0x83}) ioctl$VT_GETSTATE(r11, 0x5414, 0x0) 21:52:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5410, 0x0) [ 240.697578][T13076] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x22902, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5412, 0x0) 21:52:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x6}) 21:52:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000540)={0xb7, 0x1c, &(0x7f00000005c0)}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000580)={0x1, 0x7, 0xc5, &(0x7f0000000000)="f13c0aa780f1887100be0c746b7f132a4562060093975a095ad391f596a36cb64f2fed835c881f87f62eaf395f97eecdc0cf658bf6fc0fb91bd85b718daff576df32bc771e6f1528a2d53bc854f0f45a3b684da6ddc29a52c6e48f21751fb11290eeb406ff599e5da5e76b1722c19cafa905b88eafe05e2e0347e68141f6c66aa17c196f95f394e515e288360c58abee286fb220220f789e67592ab31331019f208d2fad996416809686533c4bf3ab67317a73c157d7a58f121866650d02f33fa18b4abe6f"}) 21:52:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/vcsa\x00', 0x80000, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) 21:52:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5413, 0x0) 21:52:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8848, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:01 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x8, 0x5, 0x4, 0x100000, 0x10001, {0x77359400}, {0x5, 0x2, 0x41, 0x3, 0x1f, 0x5, "449249e1"}, 0x6, 0x2, @offset=0x2, 0xfffff45b, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r3}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={r3, 0x86, "cab612132167a79096a093cebfa852474cf349e37e47b2bce528b28024eeb0eb6e5d5099e54187e0a8349593d6b6445ba2495b3544b306b9c7c1f37ee56660fe2e4f7f544b953223703e1b1b49f051d28ef883369721fe5c0423923091510d00c8a8a9713a6d308eeb80916dfd5ee75fb93d1f4e16eb739ee497b94e7679b470c80c99b15b75"}, &(0x7f0000000140)=0x8e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r4, 0x1000, "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"}, &(0x7f00000011c0)=0x1008) 21:52:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, "947130647b7284c59dc798812da67ca00e1ee518b10b2e2e9c035b100432f0fe847040f419bbde6e7e72a3a93d92861d542363009cf0d9669bba8798b209c96ec2b9715ea246220a114dd8cd15ec02d7596092fb1b91a55297498491c113d031abbeb9adb99cf638172b08bac9d2af60fed8c17ef0e22e7d4f3777417b690e5e77f92445c66c0e78b215f2"}, 0x8c) 21:52:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x7}) 21:52:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000020fe00828c82fe001204ecb0300e00", @ANYRES32=0x0, @ANYBLOB="2c001280140001009666726d000000001c0002800800020000000500080001000000f2ff0700012000000000"], 0x54}}, 0x0) dup3(r1, r0, 0x0) 21:52:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xa42f, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x8}) 21:52:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) [ 241.263440][T13133] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 21:52:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5415, 0x0) [ 241.340839][T13133] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 21:52:01 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x50100) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000100)=0xa00, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000040)={0x1, 0xe, 0x2e, "ecb3c9d7119260319bd0e5a694db5d879c14d5a618402571dd13212c4e2b5dfc320bccca3491ff2b433a6dfa6b01ad51f55ca11c8e334881da97ffe4", 0x1, "4a3701581e6b006d40367ef945806e4a636d0d891c88528291e7316ca81533cc7a2094ad9a3f4a3d3a17116bc8cf4112e6f6ee174dbdb813a20c10eb", 0xe8}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5414, 0x0) 21:52:01 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x33c, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe7a8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfdfa}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf5dd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0ef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x346, @remote, 0x8000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast1, 0xe50c}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @remote, 0x6}}}}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x85}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x1080}, 0x4004040) syz_open_dev$tty20(0xc, 0x4, 0x1) 21:52:02 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) 21:52:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x9}) 21:52:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5416, 0x0) 21:52:02 executing program 2: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x1, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 21:52:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xa}) 21:52:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410080, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xfc33) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x8, 0x8, 0x400, 0x9, r4}, &(0x7f0000000340)=0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x3072c0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000041}, 0x4800) io_setup(0x3ff, &(0x7f0000000100)=0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) r10 = dup2(0xffffffffffffffff, r0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x50}) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x5, r5, &(0x7f0000000140)="f370b424a6283eda5ff13df188eeca8917b6bf4619ba4f5a602211730fc9d4a55a96ac76091fb7094076fba25684babd1e506cf5584c475be71f2242e6f49246ae2ebb812f7857a2f2f015263e3f4a478ff45df1758645bdcf29153f3e2fcbb6d6e69f7fbaef6df8653a062f9268c385582979a65e810ebb97f3adb7cf383540182f49cdf73b52cfa534db65998217c4e6583c48d2e887e8c103b68e559d107bf12d432715956d2bce3d2a24b04421cf08c0212bba8cbec6bc314df7594ac86d273c0b0796d747b3ef0bc4b160a8501280f595a5ec9a1306e678fdfb759d06dd4a4660ef9663cea1018f5b997400aa6ce8b0125535", 0xf5, 0x6, 0x0, 0x0, r9}]) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r11, 0x1, 0x0, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r12, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r12, 0x500e, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) 21:52:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5417, 0x0) 21:52:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x9}) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xb}) 21:52:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x50101, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsu\x00', 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet(0x2, 0x80001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x4e21, @multicast2}}) 21:52:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5418, 0x0) 21:52:02 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/16, 0x10, 0x40000102, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000200)={&(0x7f0000000100)=""/237, 0xed}) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541b, 0x0) 21:52:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) 21:52:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xc}) 21:52:02 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="6f73322e236465762f7663716100d0398e4c807b46677bdd8f7a095a3e61eedc5a0efb0869fe1157a8c6c39d73ac5a0dbbfb16245633c930eaae082ca527f139e78a95d569e1032a82117aa37bfba72f7edfcf620e92c66a37114aa50d8da1a843430432b46af7953972762ec4f4e8cc338958d90755271883a750b18661d9eb3bb34cd806d6be0f12095533ca066877b76d38e2299ce255a286ff776ed6f97bf3d8ff643a5991ac67d6fe"], &(0x7f0000000140)='/dev/vcsa\x00', 0xa, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)={0xfee, 0x1, 0x4, 0x80000, 0xff, {0x0, 0x2710}, {0x2, 0x1, 0xfd, 0x1, 0xe3, 0x3a, "738d052d"}, 0x549, 0x3, @userptr=0x100000001, 0x4, 0x0, r2}) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000200)={"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"}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x6b0000, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) bind$pptp(r5, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x410000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000840)={0x63, &(0x7f00000007c0)=""/99}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000006c0)={0xffffff7f, 0x3, 0x0, 'queue0\x00', 0x9}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r7, 0x5414, 0x0) 21:52:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f00000001c0)={{0x3, 0x0, @identifier="710562771628d707faf5262e864a24a4"}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000180)=0x3) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd2f, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 21:52:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541c, 0x0) 21:52:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xd}) [ 242.311613][T13231] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:02 executing program 2: msgget(0x0, 0x31) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x119440, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x5, 0x2, 0x3, 0x11, "6274ad44f522ce8ec25839c4310a3b251ce893e7d2a26f9fa953d3a6f24dcdad58f361fe22ee9322c61cc964a92d865ec7370bc56aaf1444f6f91066a5ec9a2d", "1f6b9c97e519ba97db72cff491c22ad0eb0eeb98bcd254cfb4059b08c987e66a", [0x6, 0x2df]}) 21:52:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xe}) 21:52:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541d, 0x0) 21:52:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000019c0)={&(0x7f0000001580)="e06719a740eb304093749d5fc84b2877ec574e4016411c7d7e10415c3f3eaf28759c078123e1ed167ca70e3487a7766d987ead963088d4f1d08d2ab480fd763e1a21b039b40ee6b183adcfac20be0ab0484bfb7441142d49af51975e15cbfbd5cebc807d82484c77865fd3bd2edbe0961e2352907a1e99a4a54c3a1454317b258f0c9f0e0a2ff9edfb3da3d84386c702160c09e450aaf12156d553cd7e1c43c90bfd2e8cba9e32936a18c9109485add4cf98dfe8212b93da2af78d009343c9a46627", &(0x7f0000001680)=""/142, &(0x7f0000001940)="509385e56ed38a5fb18c098abfa3d1186cf3a26c8f959778fae1a3d3a5305c7c6de837811413373466dbe5f35c6fb5d1b3a33dc9252f62e2714c1d2ed9bd5f1bc01383655491", &(0x7f00000017c0)="d03bff03e3dad4d0aafff057e8b1e7ea79ed856f469f635a929f2f8c402b61f834bbafacb982c9319b931d1cfc52c723f853e0b0a0705dd4cb2bdf31554b0d3303d0b862f36402e273281470450828eb84e2f2264c04e3b72bfe73476f250c5aa9a22104b6300f0eaa737b8d6eaa8b0194fbd4941f71d49df603f840541c63b869d91f51ebc04692f4aaa316db56b26b1f56931d82f3cfafd0d914499c1a5f3eeb66138f9d58d6c85123149268a812092323ab34bfd96cceebd9fa6d97c696cf5d88d44fec0098a12bab9c4420e4af6fdd144b66c22a0b7975", 0x7, r1}, 0x38) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000001900)={0x9, @dev={[], 0x2d}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x400, 0x7, &(0x7f0000001400)=[{&(0x7f00000000c0)="dbc6e695240ce4dc0d6c6c53b510df8645c9fde403d761610c79777e426b8d26c9f3849fff9e4d3539b3accc1c76a5ec1057067aeb608ec0c1c4c0d1503f8f674fc92d6ee70de9c140afe9a56b89389dfd32cb8f2305e7ba961dfa3eb8ee6f226f834fdc9d8b49f3f0cff3d45e5a9cdc189eaf245b497280e0924470fe4e7629aa6587986141a67ff47482563e2af301624936352e5d48ae815a999aa3f7257f3d265f5740324e5e014db9183234dfd8dbe5b5b6ab1a38118bc883ee24f5c3d33bd91c94a73f153720a5a1d28fe13505fe08083fa91144bbfcaf5a4c9a800e4e56681392aa4603cf43f45ba453b8c714a5877cdc8c", 0xf5, 0xdb}, {&(0x7f00000001c0)="f119e15e7fb9794ac0eba0b8dd037d25404887aaec4d7d78246aec0a2310895d524518326e5021d0eab19af65a6a5826227acd5f121616d9f2c86dbde6d0793685ed5ce71eefb32aee7fd2833c10cd4e", 0x50}, {&(0x7f0000000240)="3be52131572721c43473b72d03d17d530c1cdfdf0eea9dd38f2c8ea08f0feaf7feaa5efc2399761432e1cf56964ba709c8859c248fedfab02886c8f3f8e10a23053456ee322e605f7afa72c5816bb265c2d19f6c3e74bbb6086a62f1b0093aaa00e5eb4238cdaf3640bcc0e1f509d9bb40a312ad991083e1ee9166aec0a2ab0e1a28084c718b467e887b86f623b05703a29d4396cca8ff4891f8a630875c70110b87bb24c4d94f17f05e4830d2d69c2337a05ef7ff3b6c3dda141b8ae6c1f7cfa222c8e596de0b8ac74ae56a652ec28bc394b1a3639ba9b085995e0e51ae0e26e16e3371c580ceda21292b3e5ca375c4da36379f811aa5dfa3afefc39422048b2efbaba0618637ba39448c37cd4424803f17f28d9eaadd31a4bab8812be8d554b56e2859578d2d0860b6f582252e0e884434e312a8f0b5ecb91ef2275c10360798894660e4613e393f8fd6912167c9170dc77505d7d89aea9718f7a490118eb74c7d68bc667c2caa262bdae6408ca6c5f4f4d6ba350d2b0ad21cd55f911a65222dc084a5f1090ed158183bcb355903ecb59a1d7dcfc8ca707189ddcf2d59dfb54b501e9d2f674cf66d1136cd90df9ca25f698809dddd0b83f7c9392ee68981b65b482b267bee5f6201ad50f4a77b6837e4da436d87696eecc0cc48ed72a5d7d3cf7f9061fdb03629bfd4efc721e458552ab0b128cd6ad487a236cfb3ba3930cd04e6c219071550f5d1bd904d434d9c4e4c199c647d65035dfb82cc37231ac19da5aa04fdb1af333a83ead3eaef7b0aa63f66081fb3c2e5532bdb8355943c45e77b0ca2a1f97969ec71a67bd9454cc461f6185cc99df52e8cebb076849295c204fd2ff9cd2df89dce5d4e46fb760e659bd42c5c77a70350bcd6b5cc69f52b83a56f52f0f954ab215eeba2726bab38242ea7c9e51393ecba3658200b34ad407d09210b8850ac3027456be34f5f3bdfbfa286eabc5c12eb1d5461cf02e6d6ca8a9d884aabc0d68c134b3fb8aa2f38bf44c2596ef6c537fecf4ef3675c1197528a8260ed26b5f9cee7f66847c36c9dcaa8797013155d09fcf8c7226605772491f564dce5d476011c81c5e6eb66a189565c686e63dec25574522a0aec48760e3b1d3f7114ff324389f0caa7e0ec3165e5a58432564d67985a5fb8d4e2f82498fda2eb1473d8cea0829d077d5719dff90a01201eb2ac23bb9e580d9b606a10fb49d7f25da1b8bd4fd4b068d178e843c8b716021cefbd97770a2a418816cf71e44c631a09fd85b404d40cb072cc37f29803b3c8d9536599ea0998da7cddc9cf7be140bdb7ee2aca74d125fac52eb22c9c76588bd097116028461abf5d6388e070ca970b1feea723d93e9543803bb543727d907e925e05e1cd0297e66715183b4a9ee27283de14e8cf46d028662f32916a9a3f3f1c7d6af67dc33e59804617f1c67d7ff4ca8fb045c456f366d858339557c13355cd64efb2540ca0798e1f194d2a0a0db8b1998a59b0b5d654d85ae0eff277720119b482879cb276b097f0ce5fd73db97504c3b84b17cf841e8dc4a91909f152cc9cc69ba538740a3f3d4c0ad41929d80507e0ccb3390c9429ca2baeae5d9898230cf90636235332aceb9daf0b5d8954bbad20ed6e46aa45ae2b5c01bfeceef2a280121c3976ea27378cf521cb2eddeb2fd57bf55e1254f60981f8b60e1b404336d513b7c7c0a35e11aa3bb344c25e7a55bbc9643e58c614780da35effeed5666b377c664e2729fb6bf84ca5ab6ef62200d18258598def608289da80c3736ecd893b68f1a8d4897c28487264dfd2e8a4614ba5cd1727a508a93dd0a652d0851f06de86ebc230e2aa5536db3e095fe15ebba07925c53f6858e032384f520c6fcd6627a75fc1578004cabb346c78417cf9d3ee40697b5584a8def85a5d6b297fb72a881920c2480f96a684923cceaaff552fb2713d9cc2b939f02aa4ee932a75924669e5a322278c379e1512a2bde97ad70a380c2c49bf131eda8cd8cf15f1030e8712fa8786c9a563199124819abd8fda061558e0bcbb13f1a58ea6d51ad630fe09e2819fb1fd6a61916aec08b258f233a0d88dd1079c700b3089927f7cfcd86097457861dc4983089d8fdd15434b51f06f69bd306a2333da6e37303e3eaf22befc53361b426325cadd5f52a9fca5b42b85786532667afa834257fb9e00552a7475f85c05f65d4164650cc6b0161c68913ff586a9c401c6252a90ec1fb187ef5ff11aa65bf3c7d64fc0f54a7399f1efe150443b8f2e0727a86afaedc6d71380bb16505936e73f94de29250f4b23e9a97381b9395fe5183b766ffeb827938fde542393a12391a96233c71044f1189e372d43e0f33e53d8fee00ff9f60294345c7cf0beba94c9fb35c4b5ca5a37a652ab78134acb469f554dc4f0dd3b3d8a8b0f5b76cdb1fe1831c5522ff1997aee44ae3505eaae35d8bd91942cbd189a664bf1163f9adec4f45ace1cf7ce399edc0550940eb732e7a7868e3233fa909c01313df4708285f6a7554b6b666458fb6d1c9a51937749952e975a2f4bd51661c43ce8ea01992f2df209d80b2e7e0a3f605fd0802f3f5d9b5ebc72ba72096bc59eec83d4c9bb5bd5d0edfd311e7736978da8a9ef31737200e9e22858d89a750de708bf791db836e464b88450f1dc5fcd98bfb7e207bc1e705d8c473e1bf9cb611ca908af5207a4fb90c7c390ac4b3dc18675ee9af59db96762f9014265005f96fe886c9e54eb3fb495d3dcc89b43656e43102e2f6b302836e94da414bc1028c661260ad5012d6b8e8eafebf449821909e889e13e0ee70a4ec0d26ab57cd3df2da464d6f59fea8dd15d64f430aa3f60d684e122fb4e4cc728830878a8a9cf9d4e8fdf14d7a7093fb8b04de9a7c3577b2a5a900c440ac96341b1bb46f0fa0c3973d29d1aa4331517fa9298f9eb9938dec9b9b76f89c28f6b36c962150894c1fd873b39c068c5a7a039e4e2c410494f1eae10f0dcf23d86ecc5f804c86b694eb67446b066a543678fb4640eac05b82a4372b39c3344f183eb9d5e5e3cc7a7ec7b5f23c3332cda63c114ce9ff0ad4ae1aae27e853a48a4d8b169fd56edee21986aef4976d5dfb49cf9ac2e3948c138b074f988ed69bce3907b6ebcbd7c46c389093c81c4cc4580c4670f757e2bce3acb5c4cb00a998b8f3a8c50a6c9255bf301aaad98c7de05d2af0a9bf7230632c5c1c4f8cbdc921ad59228e0a95b450329a141f40ae15d13ba09e09124b9cc2e73040644a13b582822724fdf0efd12da85ff9505b669ec8211bbc77c72770d75e2938628b780d31f8ee24aefb7232d25a9b2d24514aacdaf24a0535f91977f0cd6cd5fda8d8ccece20f88e47c07314f80ad9ec20e04ee54d75c27c941a446f2ed0c24a2390e102fa1d8dfcbd4cbe3df8dbcf8b08ae9b8635dd20b0dda636696a46b22cdbbff443626b38ff1fd1405962b7b6a749cf01590304ffae8257fa880b665730f897f2660653269ce28f5692205cadbd5c01476686751974df27410d6e232256a2fc39a6d3019f35c49cbcbc47c8052c78f5b8b9eb9334361d176a5ad1a730c330228761d4a28b166d95f9666b332557c280377ae7061547beb48524e0478f1085053911c944e23fcadec8ce883e9bca676aab1059558d00dd8efaf25b5d9e087d8f97a8fa6a1b0a884edd2d8a49c2c02b8d8d7572091cb4a754ac54d7650988572636a61cfbecc9d7680a3f28db741cefbaa16475d760b13f94a91bd850860446b1ed92ef16d8042e4f61346a3b0a351cc1aa86361034878e5645aad730b99845bf1e2548c448577940bc3ffe2c443968157f5c090a0c72e4019651a3b2d665b739acf49689f0c5a7861f66f2591ccb77a9fe98a96de2db01f03c5c4a4b9f2070f8358c570960b6d23d6309b55a9e827a6530668137c3b403648c6a072972e8abfe2f015dc4449d337304587c6a12200ca7f76616709b3845a6debb9e1ba71fe0b0eaf45e778184047b31cce76a51cc9249d27e928dabf2b4490a9708549ae77a7104379f93e1dda7a7b355e55d074ca1446d9d7baa74b701ac5510f34b0dba8c071fa84b0532fd5d0399b07e78a6fe9239844a6025dc7ded903438b32ce2b9bd2a12c986e7263fbf3da784a0d7e68bbab09e6fa3abdd5577a55dd716fdc232ec9d94c914195b243fb2836a548903ffacf08dcd4ae917a8e910bfc916cc8b1ec6f5e34d7c0199533257168f5c7d9ff746061ff96a590685e0ebf64e36b4a43f5c58abf9b6366aa027bf2e34371ad6a7ce0c7e6a6978b93d5d09a7ce4f67877a416ea993d2b937e28544beef21bdd0bbb7ad5733055d73c7f42efc10bed39a0ab7ff0dfdba3c0d7ec79c38ff174cd904202816706977ec61ab45889fef09c1f3c9cbf0a57f31c3708e7005525f0e8013dc332bf0cad4cafef5110185fd1521386e28a6423f07c1e24cfb12c14318a3d03bc48206ae604cf0b2e3277af70d882c04cb4a4e8e4264a75cb65fbd764ef74924693b6b1f13e803cdb92f02e13fdf641b525999d9bfb566a354d2e720d8beedbf7a1207d331cd0278ec075bd05d115b26e396a9c936b2ee11f450e8a58ae87bd868595925ddb2d8e8dc72eee0e281e5a833980f0f435d34d4411f608940e9c00106dee109ebbef9f76c6a0665f0b21c67ed32c72eb2d0337e1a49a5fb94a1ef90c1cbb29dde2c1be41c9661a2f72288f563a1edbdf6221a4e1494ee6adb9f11b3b598b76b9d180e6e03f8834ab76c4afd56b46e7ac92ebf9f0f4e3dfa8e8c3b59f93171dd42e5c7d41bda0c7bd1f62c110c3589b40f71fd72fa6a7ef00f352edf658fbcb2db3f07892ab6b1ddeb38848125b8e07e30e5506be3af0fe448da1b75d64adcdc393519f0664d6811113572bb28a0dbff00f18fab810e1460e88b81a989efd4434e76b712f964c5332e934af5df225e0c052e2a06129c85d3775ca494aa2df6cfa5b4a07f452c03158744a6a5eb32df414b1c72168f6013c6c66d3b9647a23cbaed98d4d93119365e4b73d55d95d0f3fa640ffdac7ad7be8f68ef5f0cf4ba7cb1465bb9443ee35f7186b268e4740e48b437325e73fbabf2de41ee688e145d0c47c37b03054562cba20e1bfb6a5fae4eeed53d40ce9d382f9d215e3b577bc11de634078cc946de9ea58109cdaa028d042b14256a0c930bfcca4c8daed968403ae628d6662c6e0a29518b19ed2eec6349f9c05907a3c229cefeb6f059ac979621586b929096f4829f19a53ca3e6667cca0d9fa9c389f5b8ad76922412a6e7186aafc9ffe6a1ad070b2a8120faa94fcb2fdc0531c2b324baa8ded7ffcf0e77e5d1be58f5e00d2e8c94925ca36170def8bb39344d1056df03a3520dd1680fe15651f3294fe92b45924152a62a898eefe07cfb70533b29ab193a0f1c393350709da324c76788e9b3d5a71ca1c31543a29e84b364356cad952688ea59018bd13ecd342567101a3ae6ea8bd45f26979c27236d4fa4f7504525a5eb0c8cce1c024940b739accf34ad38a39d20503dc5288a43f0d0b76785a712ecd9324770998e75b52be257300a87a2f4adf3ecd583127b56fd300942257ac05d7404f19ccda2c6a4cfe612cec80a9c4673856b01edaf600610ea872a31a0e5317c2da5e1959d18d85a0df3677edf6402347f6dbe351fdb71cd7a20c772e10c2bf71b60b0ff5f380c7e0b1b0cbaec6ad69794165b80f5c6586301a4a960c3bd3d71dd6c781838babbd5f56e4d3d77a34714b4887f8d90b0bc5652e4b9fa6b3a59f22ade27d3127ec424cb712865358e714d69a3662f1272cea9a952", 0x1000, 0x48b}, {&(0x7f0000001240)="c070986d2a6704b4b2da983c102e00a776031d0e7f41d926aa9afab052429bbdde3e63de5ae779d1815e5c04377f612cb1d23c3b1c49aa7baf84f6330610b049bae307f5362c70abc38a725d60e5b0550d9dbd696214b6a4", 0x58, 0xde88}, {&(0x7f00000012c0)="9dc1ac0c476adc8cff831fed072c511592a524529c6643cbe495e4a65969717eed44f214f4787f83d7fe36738b982a1c036f335e7311ea61cc800c1b989e5f1558f55187f3e1eb357d82344ddeecc382063e6423b07d1638d44e846f07188be7b0ce93343f55465c561619105e7fb585c9749f32d7323050bda6d89b2575a91b6c2052cb5aa772", 0x87, 0x43e4}, {&(0x7f0000001380)="fc33dc8aef364f24687275a7f7448d029e33009b271acb06c1d9b636b92cd1a177785a93b57deb49e197", 0x2a, 0x100000001}, {&(0x7f00000013c0)="6b3cdc4d", 0x4, 0x7ff}], 0x2000, &(0x7f00000014c0)={[{@usrjquota='usrjquota'}, {@nolargeio='nolargeio'}, {@barrier_none='barrier=none'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@usrjquota='usrjquota'}, {@acl='acl'}], [{@fowner_lt={'fowner<', r3}}, {@permit_directio='permit_directio'}]}) 21:52:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x10}) 21:52:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x169f}, @NL80211_ATTR_BSSID={0xa, 0xf5, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @multicast}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0xb, 0x0, [0x0, 0x19, 0x14, 0x18, 0x1a, 0x1d, 0x20]}, {0x6, 0x0, [0xa, 0x1]}, {0x6, 0x0, [0x18, 0x15]}, {0x8, 0x0, [0x1b, 0xd, 0x1b, 0x12]}, {0x8, 0x0, [0x1d, 0x19, 0x1a, 0x0]}, {0x4}, {0x7, 0x0, [0xd, 0xb, 0x6]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180)=0x4, 0x4) 21:52:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541e, 0x0) 21:52:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x11}) 21:52:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x314, 0x98f566df94ce7284) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x2f, 0xffffffff, 0x10001, "d67ebb3a3a859e5ed4a98286e05c63899995d5990cfbac03077fed3f1c6e73bb9da4798c56f0ff730ba0fb4d2c30bf"}) 21:52:03 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0x80) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x1, 0x7, 0x4458378cfc5f560f, 0x0, 0x0, {0x7}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x905e}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x24000040) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) 21:52:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x541e, 0x0) 21:52:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x12}) 21:52:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc0980, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000040)={{0x3, 0x5, 0x100, 0x1f, 'syz1\x00', 0x7ff}, 0x1, [0x1f, 0x1ff, 0xfffffffffffffffd, 0x6, 0x1e, 0x1f, 0x1445, 0x80, 0x101, 0x1981, 0x1f, 0x79951d5c, 0x8, 0x7f, 0x2, 0x81, 0x279, 0x0, 0x8, 0x2000000000000000, 0x5, 0x2, 0x800, 0x80000000, 0x2, 0xffffffff, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x9aa, 0x3, 0x3f, 0x8, 0x3, 0x8, 0x401, 0xabc, 0x8, 0x100000000, 0xe521, 0x7, 0x5272, 0x80, 0x1, 0xc2, 0x1f, 0x6, 0x1, 0x2, 0x5, 0x1, 0x124, 0x9, 0x3, 0x3, 0x6, 0x7ff, 0x9, 0x0, 0x3, 0x8001, 0x3, 0x81, 0x3, 0x3, 0x1, 0x2060, 0x8, 0xffffffff, 0x62c, 0x4, 0x3, 0x5, 0x5, 0x5, 0x6e94b112, 0x1000, 0xb607, 0x8001, 0x6, 0x9, 0x3, 0x3, 0x9, 0x0, 0x5, 0x0, 0x5, 0x7, 0x0, 0x6, 0x7, 0x2a6, 0x8, 0x7a41, 0x3, 0x8001, 0x7ff, 0x9, 0x13, 0x0, 0x124a, 0x8, 0x38, 0x3, 0x7, 0xa000000000000, 0x3f, 0x2000000000000, 0x40, 0xfffffffffffffffb, 0xff, 0x6, 0x0, 0x10001, 0x7fffffff, 0x1, 0xfffffffffffffffc, 0xd8, 0x81, 0x1f, 0x100000001, 0x20, 0x8000000000000, 0x9, 0x3ff]}) ioctl$KDADDIO(r1, 0x4b34, 0xb4f7) 21:52:03 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x153c42) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x185, 0x7, &(0x7f0000000040)="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"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000540)={0x15, 0x9a, &(0x7f0000000480)="f32276049d4bbc180c95ea8b6a7603e02b71bef3d524e7bb99554e5ad1ab5ce2a7aa2c306b271dd4f587ac7f2327ce2697583a11fcd970f65a2c53808f053cdc6236e411199fea1bec785575f2e8b509d9ce4f663b19342e9bd75b385b2d0a1987b5b7709102abb72a4ad835749f21b0120403b9299b6a0a41d8fc16b898375da71a8b9b5932eb14611294145a7292e6f9688b3db42f175ff814"}) 21:52:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000040)) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x3, 0x4, 0x3, 0x1, 0x0, 0x0, 0x9, 0x5d, 0x0, 0x8, 0x20, 0x2, 0x3}, 0xe) 21:52:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5421, 0x0) 21:52:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x25}) 21:52:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:03 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x4, 0xe9, 0x8}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) 21:52:03 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(0xffffffffffffffff, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r4, &(0x7f0000000900)={0x2c, 0xf, r2, 0x3c}, 0x10) recvfrom$packet(r0, &(0x7f0000000000)=""/200, 0xc8, 0x40000000, &(0x7f0000000100)={0x11, 0x8, r2, 0x1, 0x6, 0x6, @dev={[], 0x17}}, 0x14) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r5, 0x4b65, 0x0) 21:52:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5422, 0x0) 21:52:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x5c}) 21:52:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:03 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2db60a9d01610dd9, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x300}) 21:52:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5423, 0x0) 21:52:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) io_uring_setup(0xa0b, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2, 0xdc}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r3 = fcntl$getown(r2, 0x9) sendmsg$AUDIT_SET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3e9, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0xade1ee066e616a89, r3, 0x6000000, 0xfff, 0x0, 0x0, 0x4}}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x4030) 21:52:04 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8, 0x12) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) exit(0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000080)=""/26, 0x1a}], 0x1, 0x0) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) getpeername$ax25(r4, &(0x7f0000000180)={{0x3, @default}, [@bcast, @rose, @netrom, @bcast, @default, @default, @bcast, @rose]}, &(0x7f0000000100)=0x48) 21:52:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r3, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'ib'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 21:52:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x500}) 21:52:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5424, 0x0) [ 243.709538][T13356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x600}) 21:52:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5425, 0x0) 21:52:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x700}) 21:52:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5427, 0x0) [ 243.899136][T13360] tipc: Enabling of bearer rejected, illegal name 21:52:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="ffad40eb94a63f002b5c10d3b1a3e8ed3fe9560f4e73592bfc67f6929d7e472d6c0c8fba7eb84631d22067396d91a36485fbd6ff15684b372fa5fe36f752713687b7ea586349d9255205a232dc9ba49113185850181a013677d64276c731a1ebb2982f37eb1dee49f40b0d83e22f67a3bca5f6844d76d5e2d2521dc755984b434e5c8bdf5ac017d0e20292c8607a4896d526bba589ff8c21ded500b1ab39d8c998f35b93586c1622a861231ffd5a792ff6b4d167f2851cb32e771a7b4c8844d8f2ff27b76853bf1423eab3887dbaecbcf66f7e4518a03817d7b2fd5c5a94b664aeffb6c549f56dab7d8f6ca6af", 0xed, 0x800, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x0, {0xa, 0x4e24, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, 0x24) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x0, 0x0) fcntl$getown(r1, 0x9) 21:52:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x900}) 21:52:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) 21:52:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x908c0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x8, {0x0, 0xa}}, 0x20) 21:52:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5428, 0x0) 21:52:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xa00}) 21:52:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14030000", @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) 21:52:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 21:52:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xb1, 0x10000) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xb00}) 21:52:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5429, 0x0) 21:52:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xc00}) 21:52:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5437, 0x0) 21:52:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xd00}) 21:52:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5441, 0x0) 21:52:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xe00}) 21:52:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x40080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r4 = add_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="02002bbd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24000045) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r15 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r15, 0x202002) keyctl$chown(0x4, r15, r13, r14) write$P9_RGETATTR(r5, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x5a2, {0x20, 0x1, 0x2}, 0x1, r11, r14, 0x80000001, 0x1000, 0x6, 0x7, 0x101, 0xb41, 0x1, 0x7, 0x7, 0x800, 0x3, 0x8000, 0xe2, 0x10001, 0x8}}, 0xa0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="b0000000000000000008006421a20c5437a04bc96f0658d10db512a45b9cf6b42ac0034cebeabb7f14cb3b83abdd90db64ec51a0cb0e3a640109c5b43da0409c", @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64=r16, @ANYRESHEX=r17, @ANYRES16=r9, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR, @ANYRES32, @ANYRESDEC=r2, @ANYRES64=r5, @ANYRESOCT=r18, @ANYRES64=r19, @ANYBLOB="3ed5a84f82c54a383108261fb03366a9d5d41d6744832eff1b7d43f90fd9c2e1d6dcd7fca0a1b0f0f1eca2ec0ee6b3969b4d261632f40cd56b771363b3ea0870c9d849ee9ed78dc76f89dd5ad0db54cf56699fa0d0dcee73bb8532d33072825d6d2eb46fb39c39d9e8c37e3e257c9ae75819359127664139964445c76a5bd4bd95"], @ANYRESDEC=0x0], @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x5}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000340)={'vxcan1\x00', r20}) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$NBD_DISCONNECT(r7, 0xab08) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x3) 21:52:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5450, 0x0) [ 245.219359][T13461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x1100}) 21:52:05 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x20001, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0xc00, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000140)={0x8001, 0x3e88, 0x2, 0x0, 0x100, 0x8}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10200, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "4cb1c740a53408c1", "f86bfe71f37e54558a6fa378440fadae", "91ca508d", "c53e36fdca849a5a"}, 0x28) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x4b65, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)={0x12c, r7, 0x500, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xbc}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="afa512ec5c1e1ca35b1d103e4b5e4205"}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf49c}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @broadcast}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20040854}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r4}, 0x10) 21:52:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5451, 0x0) 21:52:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x1200}) [ 245.418847][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x2500}) 21:52:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5452, 0x0) 21:52:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x9, 0x2, {0x2, 0x2, 0x8, 0x0, 0x2}, 0x9a8}) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000000)={0x3ff, 0x100000001, 0x8}) ioprio_set$pid(0x1, r2, 0x1) 21:52:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x5c00}) [ 245.602365][T13461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.794812][T13496] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.830043][T13500] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) bind$x25(r1, &(0x7f0000000000)={0x9, @remote={[], 0x0}}, 0x12) 21:52:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x545d, 0x0) 21:52:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:06 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) 21:52:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x1c000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x2}) 21:52:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5460, 0x0) 21:52:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) 21:52:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x30000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5600, 0x0) 21:52:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x3}) 21:52:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5601, 0x0) 21:52:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 21:52:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x4}) 21:52:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5602, 0x0) 21:52:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4600, 0x0) r2 = open(&(0x7f0000001140)='./file0\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x23}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2800024}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x54}}, 0x4000090) 21:52:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x8001, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="04191ac2ecd567537d6834ee191c901706940fc4816b0f7c2bc82aaa3dfb319249dcef9c9045c7ef5a18b1d34211202b26e7cccf7a04dc68b26092bc58", 0x3d}, {&(0x7f00000000c0)="cc593c5fcd74fb79a3542e4aed7663b689776bfb68f1faff2cc77b3d7c4b8e6a7509854ed59f42a7dce945fe0809284bc2079b5f198f076be46c1f14377650f80eee8dccc8c9e0b8b33f4ec9504286f30f95e04efa966446b86e257f328dbe0fb997aa4b285d0e619d1ccb6db804ab7282366577eed11fafbae522f2588e3b03a94749ca76b961231fe8dfed817ce4171a5e8f4e10dad451179a8c6e33672afa1eb7917ce580f2e8368cd4", 0xab, 0xfffffffffffffffc}], 0x1120428, 0x0) 21:52:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x5}) 21:52:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x40000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x4, "19838d1216878839ae934d3156714243bdfce3efcd954552423be279ceed8560", 0x2, 0x1}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x6}) 21:52:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5605, 0x0) 21:52:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x7}) 21:52:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x2010) 21:52:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:07 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xfffffffd}, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={0xffffffffffffffff, r1, 0x0, 0xffffffffffffff62, 0x0, r0}, 0xfffffffffffffda3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000040)='posix_acl_accessem1([\'\'!\x00', r0}, 0x30) ptrace$setregs(0xd, r2, 0x2800000000000000, &(0x7f00000000c0)="fc7e8f98dd8f5d514f5751317213e8e2288e65ff3e2bbd76ca255c48e909da97cc44bcb51fb78f92406e2941cf82e050ce95da41db4aa292d6497773bfbbd105452d0327c3b99023d4cb33091352028ac4d263e68cc2ba6994b2a8639da452c9e5cd79b91fc75830492c814cf60fda3aff961508b62cb3d8095b89f51437b262564fa9ecc756e72f67b61016fb154866ce87") openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x4b65, 0x0) 21:52:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5606, 0x0) 21:52:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x8}) 21:52:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5607, 0x0) 21:52:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40080, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffb, 0x7, 0x4, @buffer={0x0, 0xde, &(0x7f0000000040)=""/222}, &(0x7f0000000140)="f7917fb7b8581a", &(0x7f0000000180)=""/224, 0x400, 0x40, 0xffffffffffffffff, &(0x7f0000000280)}) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r2 = dup(r1) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000180)=0x88) write$FUSE_ATTR(r2, &(0x7f0000000040)={0xffffffffffffff09}, 0xfddf) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) getpeername$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read(r1, &(0x7f00000000c0)=""/108, 0x6c) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='cpuset@{\x00', &(0x7f0000000040)='])keyringem0md5sum\'/wlan1securityeth0trusted@\x00', 0x0) 21:52:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5608, 0x0) 21:52:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x9}) 21:52:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xa}) 21:52:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:08 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0), 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x60240, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x100, 0x695, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004004}, 0x4004) 21:52:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5609, 0x0) 21:52:08 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={r4, 0x7}, 0x8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) r6 = accept4$phonet_pipe(r5, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r7, 0x5414, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000100)={0x120, 0x0, 0x4, [{0x2, 0xff, 0xb, 0xfffffffa, '/dev/hwrng\x00'}, {0x3, 0x1, 0x29, 0x1, 'posix_acl_accesseth1)&]GPLem0cpuset!#/&@-'}, {0x2, 0x6, 0xb, 0x0, '/dev/hwrng\x00'}, {0x4, 0x3a6, 0x0, 0xfffffffd}, {0x3, 0x4, 0xb, 0x7, '/dev/hwrng\x00'}, {0x0, 0xffffffffffff0000, 0x1c, 0x33, 'procmime_type@cpuset$keyring'}]}, 0x120) 21:52:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xb}) 21:52:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x200) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5, 0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = dup3(0xffffffffffffffff, r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r9, &(0x7f0000000900)={0x2c, 0xf, r7, 0x3c}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', r7}) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r12, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e952cd42e3510b5dead57a0dd3a58bc7d66010001005b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d845afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) r14 = dup3(0xffffffffffffffff, r13, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r14, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r14, &(0x7f0000000900)={0x2c, 0xf, r12, 0x3c}, 0x10) r15 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r16, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r17 = socket$inet_sctp(0x2, 0x1, 0x84) r18 = dup3(0xffffffffffffffff, r17, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r18, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r18, &(0x7f0000000900)={0x2c, 0xf, r16, 0x3c}, 0x10) r19 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r21 = socket$inet_sctp(0x2, 0x1, 0x84) r22 = dup3(0xffffffffffffffff, r21, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r22, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r22, &(0x7f0000000900)={0x2c, 0xf, r20, 0x3c}, 0x10) r23 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r23, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r23, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r25 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r25, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r26, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r27 = socket$inet_sctp(0x2, 0x1, 0x84) r28 = dup3(0xffffffffffffffff, r27, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r28, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r28, &(0x7f0000000900)={0x2c, 0xf, r26, 0x3c}, 0x10) r29 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r29, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r30, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r31 = socket$inet_sctp(0x2, 0x1, 0x84) r32 = dup3(0xffffffffffffffff, r31, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r32, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r32, &(0x7f0000000900)={0x2c, 0xf, r30, 0x3c}, 0x10) r33 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r33, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r34, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r35 = socket$inet_sctp(0x2, 0x1, 0x84) r36 = dup3(0xffffffffffffffff, r35, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r36, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r36, &(0x7f0000000900)={0x2c, 0xf, r34, 0x3c}, 0x10) r37 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r37, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r38, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r39 = socket$inet_sctp(0x2, 0x1, 0x84) r40 = dup3(0xffffffffffffffff, r39, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r40, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r40, &(0x7f0000000900)={0x2c, 0xf, r38, 0x3c}, 0x10) r41 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r41, 0x1, 0x0, 0x0) getsockopt$inet_pktinfo(r41, 0x0, 0x8, &(0x7f0000002700)={0x0, @multicast1, @remote}, &(0x7f0000002740)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000027c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002800)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000002900)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002e00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa2281}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002940)={0x44c, r4, 0x301, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r34}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xcb}}, {0x8, 0x6, r38}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r42}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r43}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r44}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x5}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x88470000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560a, 0x0) 21:52:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2842, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="3aec71a79873"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) [ 248.142030][T13663] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xc}) 21:52:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560c, 0x0) 21:52:08 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r3, 0xa3, "f251fd", "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"}}, 0x110) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$TIOCSBRK(r4, 0x5427) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r5, 0x4b65, 0x0) 21:52:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560d, 0x0) [ 248.334169][T13663] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xd}) 21:52:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4800, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000140)=0x3) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000000)) 21:52:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x88480000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xe}) 21:52:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560e, 0x0) 21:52:09 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x40, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x100000000, 0x10080) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) 21:52:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) fallocate(r2, 0x3f, 0xda8, 0x8000) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x10}) 21:52:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560f, 0x0) 21:52:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 248.910623][T13728] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffe01) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8800, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x1) 21:52:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x11}) 21:52:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x6364, 0x0) [ 249.086798][T13728] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x12}) 21:52:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8912, 0x0) 21:52:09 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80043, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x6a400, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)={0x9, 0xa, 0x4, 0x40000000, 0x800, {0x77359400}, {0x6, 0x1, 0x7, 0x65, 0x7, 0xff, ' \x00'}, 0x10000, 0x167cdfbb36b7c74c, @userptr=0x2, 0x200, 0x0, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) setsockopt$inet_dccp_int(r5, 0x21, 0x4, &(0x7f0000000040)=0xd4c0, 0x4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000140)) 21:52:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, r5}}, 0x18) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x37}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x48e}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff801}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffeff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40010}, 0x14) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x25}) 21:52:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8933, 0x0) 21:52:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(0xffffffffffffffff, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r6, &(0x7f0000000900)={0x2c, 0xf, r4, 0x3c}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r8, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = dup3(0xffffffffffffffff, r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r10, &(0x7f0000000900)={0x2c, 0xf, r8, 0x3c}, 0x10) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r11, 0x1, 0x0, 0x0) getsockopt$inet6_mreq(r11, 0x29, 0x14, &(0x7f0000000180)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r15, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r16 = socket$inet_sctp(0x2, 0x1, 0x84) r17 = dup3(0xffffffffffffffff, r16, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r17, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r17, &(0x7f0000000900)={0x2c, 0xf, r15, 0x3c}, 0x10) r18 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r19, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r20 = socket$inet_sctp(0x2, 0x1, 0x84) r21 = dup3(0xffffffffffffffff, r20, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r21, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r21, &(0x7f0000000900)={0x2c, 0xf, r19, 0x3c}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @xdp={0x2c, 0x2, r19, 0x17}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0xccf, 0x0, 0x0, 0x0, 0x9b1, &(0x7f0000000480)='rose0\x00', 0x0, 0x5, 0x5}) r23 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r24, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r25 = socket$inet_sctp(0x2, 0x1, 0x84) r26 = dup3(0xffffffffffffffff, r25, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r26, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r26, &(0x7f0000000900)={0x2c, 0xf, r24, 0x3c}, 0x10) r27 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r27, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r28, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r29 = socket$inet_sctp(0x2, 0x1, 0x84) r30 = dup3(0xffffffffffffffff, r29, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r30, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r30, &(0x7f0000000900)={0x2c, 0xf, r28, 0x3c}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) r32 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r32, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r33, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r34, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r35 = socket$inet_sctp(0x2, 0x1, 0x84) r36 = dup3(0xffffffffffffffff, r35, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r36, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r36, &(0x7f0000000900)={0x2c, 0xf, r34, 0x3c}, 0x10) ioctl$sock_SIOCGIFINDEX(r32, 0x8933, &(0x7f0000000740)={'nr0\x00', r34}) r38 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r38, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r39, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r40 = socket$inet_sctp(0x2, 0x1, 0x84) r41 = dup3(0xffffffffffffffff, r40, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r41, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r41, &(0x7f0000000900)={0x2c, 0xf, r39, 0x3c}, 0x10) r42 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r42, 0x8933, &(0x7f0000000780)={'wg1\x00', 0x0}) r44 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r44, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r45, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r46 = socket$inet_sctp(0x2, 0x1, 0x84) r47 = dup3(0xffffffffffffffff, r46, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r47, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r47, &(0x7f0000000900)={0x2c, 0xf, r45, 0x3c}, 0x10) r48 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r48, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r48, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r50 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r50, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r51, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r52 = socket$inet_sctp(0x2, 0x1, 0x84) r53 = dup3(0xffffffffffffffff, r52, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r53, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r53, &(0x7f0000000900)={0x2c, 0xf, r51, 0x3c}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f0000000a00)={0x838, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xcf7c}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x0, 0x0, 0x7, 0x7f}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x9, 0x9, 0x8, 0x7}, {0x4, 0x0, 0x8, 0x9}, {0x2, 0x81, 0x3, 0x9}, {0x2, 0x7, 0x0, 0xdd}, {0x8, 0x80, 0x1, 0x9}, {0x6, 0x7f, 0x80, 0x1}, {0x44dd, 0x8, 0x3, 0x3}, {0x6, 0x0, 0x3, 0x2}, {0x5, 0x97, 0xde, 0x8000}, {0x81, 0x40, 0x8, 0x101}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4d27}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xcb}}}]}}, {{0x8, 0x1, r13}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r31}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x9, 0xce, 0xd, 0x100}, {0x3f80, 0xff, 0x3f, 0x8}, {0x4, 0xff, 0x4, 0x4}]}}}]}}, {{0x8, 0x1, r37}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r39}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r43}}, {0x8}}}]}}, {{0x8, 0x1, r45}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r49}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r51}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r54}}}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x8000}, 0x8804) 21:52:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) 21:52:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x5c}) [ 249.581512][T13769] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:52:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x89e2, 0x0) 21:52:10 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4c0242, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x1e, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r2, 0x5414, 0x0) 21:52:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x300}) 21:52:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x89ea, 0x0) [ 249.779466][T13783] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:52:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xa42f0000, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x581) 21:52:10 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x82, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) 21:52:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x500}) 21:52:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x89eb, 0x0) [ 249.985595][T13769] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.201986][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:52:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000080)=0x8) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x400454ca, 0x0) 21:52:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x600}) 21:52:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xefffffff, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40049409, 0x0) 21:52:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x700}) 21:52:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x401) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={[], 0x1d}}, 0x10) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:11 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x5d3442, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x1, r2}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) read$midi(r3, &(0x7f0000000040)=""/62, 0x3e) 21:52:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='trusted.overlay.upper\x00', &(0x7f0000000900)={0x0, 0xfb, 0x83, 0x5, 0x0, "1fb865a945ecc78e97e9271ea7a657b0", "643c29e644b6a08f955a172b72937aba86262014e9f1b578280f87cbf1347bdd8aeeae2a47e8a8c30fe74c44aefcc9f81356bc2f86e09562016cd5ff627d9d92a9e37efad53d0862010624ed8ae5d8c33fb5354bed9bedd99eba391728fa448fa3ad2ef7ddb448437caa88c31fb3"}, 0x83, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000800)='security.capability\x00', &(0x7f0000000840)=@v2={0x2000000, [{0xffffffc0, 0x8}, {0x7fffffff, 0x81}]}, 0x14, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_elf64(r2, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x7f8) lsetxattr$trusted_overlay_origin(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='trusted.overlay.origin\x00', &(0x7f0000000a40)='y\x00', 0x2, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) write$vhost_msg(r3, &(0x7f00000000c0)={0x1, {&(0x7f0000000000)=""/85, 0x55, &(0x7f0000001740)=""/4096, 0x1, 0x2}}, 0x48) syz_mount_image$cifs(&(0x7f0000000140)='cifs\x00', &(0x7f00000001c0)='./file0\x00', 0x8aa, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="d41d0487047ac077f94157f15a74959a8ba03a6904bc37a9228af53c2ae6c3982e294753a6bf3a09ba43ac0378e8662c2e99303fa8009a9a0a1dc336dcff85c6f5ab777077019cb26a37c687f4af0426e84b64a8c6fb73254efdf80c199a0d7c2470580bc1831d778768ffdf20b53874ad2084a14c817333c4f003abfef63df05d67e66bcf322d68efea7449b06c101e1e3325d52e29754c3564101623c5633a3d98899f98105bd7a575e6ee4b551747f285bd373cf6d54ea3ccbca8984823ea7d9f", 0xc2, 0x7}, {&(0x7f0000000300)="b91383d3d0b119ee39d02f2f9a0bd662bb49660391b53442665a8b52b224dae4936533f140d7a1ca0649e6578c692fc582a6e491111655fa4694d771bd76db5ad1920c51b5d828652558e3b21251b0f35f0f501243a9a0c57d59551ce78da080862c54ffecf766bcf9607a9466cf74dc525434c2273cc7fef90491b3394e9c18f5d1270a", 0x84, 0x9}, {&(0x7f00000003c0)="3a71651e695088257b330d0a7d0da0e6aab9ac43a8a96f584e15b819ffddbda6a90fa78376393f1ac7e780ec269237f791990043", 0x34, 0x8}, {&(0x7f0000000400)="66f6c384bd5bc111c367eacf988182f85fdaf689ebb2dcf6fafb6c16c03aa30c1cdd5fb5ff0483664eadeeca6161db3a5e2b4d1bee62b85c4dd18c73b6f16acb3ec96ed4871edcdddc4a3f0d7b9da9af1fd9a1228a5549249eb592502fc938928a1b3712ca484891997d841a9ed9bf9b5d646191996e42de84e2fc4753e34b38d57a3c344ad86e1a3b0d6b3161ef54323e4c", 0x92, 0x5a1}, {&(0x7f00000004c0)="4c6b7b4751d309f2ddd2a0d1b07afedca6e9022c32caa6e1fdb432cbaf1292aba75988adec354909bb6c81532344d6977ddfc96b0bd666ce51affbe95e60c042e39911ce98abb877a5a3e162cfcd9ee6993e11ade74246316466e41962c6223cb8022d13af8557d2e0f72c330b6121296c61242888116e34fcbf", 0x7a, 0x1ff}], 0x1344804, &(0x7f00000005c0)='nodevppp0mime_typelooem1rwlan1@\x00') ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40084149, 0x0) 21:52:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x900}) 21:52:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40186366, 0x0) [ 250.811963][T13862] __nla_validate_parse: 1 callbacks suppressed [ 250.811971][T13862] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xa00}) 21:52:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4020940d, 0x0) 21:52:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xb00}) 21:52:11 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1a1100, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x3f) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x70bd28, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0xfffffffffffffd8c, 0x1, 0x20000}]}}}]}, 0x54}}, 0x0) r3 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000080)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r4, 0x5414, 0x0) 21:52:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffa888, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:11 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/32, 0x20}], 0x2, &(0x7f0000000240)=""/25, 0x19}, 0x80000020) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r4}) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10200) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r5, 0x4b65, 0x0) 21:52:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x40505331, 0x0) [ 251.125016][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xc00}) 21:52:11 executing program 2: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4188aea7, 0x0) 21:52:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xd00}) [ 251.339257][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80045432, 0x0) 21:52:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x3f, 0x5, 0x7, 0x80, 0x10, "1c43aa2393402ece"}) 21:52:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xe00}) [ 251.564275][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 251.759492][T13919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xc9, "c4e06ea82514b23581e54c5f1f6a438197d68b5e9e7f5730f32014695d94fde3262886aa8388bc494f29f36db5de1939a2368fcfaba6588dfc76a0890c0c57627d98466ec5b6d37831da6f1906e96f8883760f4f2000582f2caa225fc7e6a469add08daec167c1c945c2dd558e7659afd62e5549808ddf30b2d98fc8b638a012b4b89263609281aaa78d7724d6687c86b5c72628c9d72792ddbb8024443f2a80d83a52ad9c01484d63cb6891b49f1a3cd5ac578d4e33fbc598ebf29db260217611d574cbaa6c34c6ad"}, &(0x7f0000000180)=0xd1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x44d, @remote, 0x2}}, 0x3, 0xae86}, 0x90) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x258001, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000040)={0x3, 0xa55}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$VT_GETSTATE(r4, 0x5414, 0x0) 21:52:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x1100}) 21:52:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80045440, 0x0) 21:52:12 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x440, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:12 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) 21:52:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) [ 251.991416][T13959] Unknown ioctl 22019 21:52:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x4, {{0x2, 0x4e20, @broadcast}}, 0x1, 0x1, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x110) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc00, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000240)=0x8000, &(0x7f0000000280)=0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x1000, 0x7, 0x4, 0x2000, 0x3, {0x0, 0x7530}, {0x2, 0x1, 0x4e, 0x0, 0x7, 0x5, "9fef94b6"}, 0x42e, 0x4, @offset=0x9, 0x81, 0x0, r3}) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x80086301, 0x0) [ 252.017947][T13961] Unknown ioctl 22019 21:52:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x1200}) 21:52:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="5200000010003b1e000000000000080000a10a00", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e00030000002c001280090001007866726d000000001c000280080001000300000008000200040000000800010000000000"], 0x54}}, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) write$P9_RSTATFS(r2, &(0x7f0000000100)={0x43, 0x9, 0x1, {0xc6, 0x8000, 0xfffffffffffffff7, 0x6ef, 0x3, 0x1c00000000, 0x401, 0x4, 0xff}}, 0x43) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x280, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x3, 0x3f], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0xcccccccc}) 21:52:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001f40)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x24, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}}, 0x48800) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8008700d, 0x0) 21:52:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x2500}) 21:52:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x23, 0x7, {0xffffffffffffffff}, {r3}, 0x5, 0x9}) sendmsg$AUDIT_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbff, {0x9, 0x1, 0x1, r4, 0x6, 0xffffffff, 0xb6e, 0x0, 0xdd5}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24080853) [ 252.270195][T13982] netlink: 42 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.310301][T13989] netlink: 42 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x8040451b, 0x0) 21:52:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x121001) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000000c0)={0x5c, &(0x7f0000000040)=""/92}) 21:52:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0x5c00}) 21:52:12 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) 21:52:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffffef, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10802) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000180)={0x7, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @link_local}]}) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000080)={0x1001}) epoll_create1(0x0) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000240)={[0x1000]}, 0x8) 21:52:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7f, 0x155140) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x96, 0x13, 0x3, 0x8}, 0x8) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) 21:52:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0045878, 0x0) 21:52:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/135, 0xfffffeec) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x0, 0x7f, 0x0, 0x3, 0x1}) 21:52:13 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0xfffffffd, 0xc, 0x4, 0x200000, 0x7fffffff, {r1, r2/1000+10000}, {0x4, 0x8, 0x5, 0x3, 0xcc, 0x70, "aa7a8b6b"}, 0x9, 0x2, @userptr=0x40674454, 0xffffffe1, 0x0, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000000c0)=0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r4, 0x4b65, 0x0) 21:52:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0045878, 0x0) 21:52:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x89, 0x811c0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0xfffc, 0xfffd}) 21:52:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) flistxattr(r0, &(0x7f0000000080)=""/83, 0x53) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x160, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x17, 0x202) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x200000, 0x0) 21:52:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0106418, 0x0) 21:52:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r3}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r3, @in={{0x2, 0x4e22, @loopback}}, [0x1, 0x518, 0x3ff, 0x9, 0x0, 0x0, 0x20, 0x8, 0x9, 0x4356e7c3, 0x400, 0x2, 0x1, 0x2]}, &(0x7f0000000100)=0x100) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r4, 0x5414, 0x0) 21:52:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x81800) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001800)=""/192, &(0x7f00000018c0)=0xc0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x3, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:13 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getpeername$unix(r2, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)) 21:52:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0189436, 0x0) 21:52:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e20, 0x6, @rand_addr="8fd1479536eedf8c18e194bba13c1a99", 0x8000}}, [0x3c, 0xe4f, 0x1f, 0x61, 0x1000, 0x6, 0x0, 0xdb2d, 0x8000, 0x6, 0x2, 0x7, 0x7f, 0x5, 0x9]}, &(0x7f0000000140)=0x100) 21:52:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$P9_RSTAT(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4b) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:13 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x4, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:13 executing program 1: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc020660b, 0x0) 21:52:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xade, 0x101041) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:52:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) ioctl$KDMKTONE(r1, 0x4b30, 0x5a1) 21:52:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x0, 0xbbf9}) r2 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b65329509626699071a860", 0x10) keyctl$describe(0x6, r2, &(0x7f0000000000)=""/91, 0x5b) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/98, 0x62) ioctl$VT_WAITACTIVE(r0, 0x5607) 21:52:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0xc0585609, 0x0) 21:52:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0xfffffffd, 0x8001, 0x8, 0x5, [], [], [], 0x2, 0x3, 0x9, 0x9, "4a9eb0ec68fcc74f18b945320fe9fff9"}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x808200, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f00000001c0)={0x200, "594573ef840449fc69b509537aa97c2868eb640771395cbdce454493996d8db2", 0x1000, 0x1f, 0x400, 0x10, 0x2}) 21:52:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x10, 0x10, 0xe3b}, 0x20}}, 0x0) [ 253.567624][T14109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:14 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x23603) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/77) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000000c0)=0x2, 0x4) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000001c0)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000081c0ae8", @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x32, 0x1, 0x7f, "46a8589bd3c9f49469e3ad06ec7a680a", "65ebddb5445228638f80cdc1fc91d253a16024687bd672caa1d3ea3642"}, 0x32, 0x3) 21:52:14 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0xffffffff, 0x1, 0x1}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) tkill(r1, 0x23) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x560b, 0x0) 21:52:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) read$usbfs(r1, &(0x7f0000000040)=""/38, 0x26) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 253.788939][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x7de1d962, 0x746, 0x40, 0x463c5629, 0x10, "3717c548bb65c5342ae5605c66e66c35282cc1"}) [ 253.975112][T14133] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 21:52:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000000)={0x5, 0x4, [0x3, 0x1ff, 0x7, 0x0, 0x3], 0x7}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) 21:52:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x6c8100, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x2, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000050) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0xd5200ede4068df31, 0xc2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x5, 0x0, 0x77bf, 0xab52, 0x3]}, &(0x7f0000000100)=0xe) r4 = socket$inet(0x2, 0x4, 0x3) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000240)) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000200)="5b26270984f9195592622006e67e38a96f61a0f83defc689190a749dc6c32736d9c1a9093494433b0148ac44d63e213d21", 0x31) 21:52:14 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7f, 0x10000) read$midi(r0, &(0x7f0000000040)=""/103, 0x67) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x560b, 0x0) 21:52:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:14 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) set_mempolicy(0x0, &(0x7f0000000040)=0x7, 0x400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0xc0, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) prctl$PR_SET_FPEXC(0xc, 0x10000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x800) 21:52:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{}, {}, {}, {}, {}]}) 21:52:14 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x46d) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)) 21:52:14 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40, 0x0) 21:52:14 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x140f, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000001}, 0x40800) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) 21:52:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0xec0, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="795ccc01e3e364443fc3aca8065a77efa960c66900"/46, @ANYRES16=r2, @ANYBLOB="180026bd7000fbdbdf2504000000080004000400000008000400000200000800040058f9ffff08000400ff7f00002000038014000600fe8000000000000000000000000000bb08000100020000000800060003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x45}, 0x20000811) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x9389, 'syz0\x00', @bcast, 0x1, 0x7, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x84, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x402}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr='m\x00'}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x84}}, 0x0) fsetxattr$security_smack_transmute(r3, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x2) sendmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x21, 0x2, 0x0, 0x0, "e7e3e741164fb9f4329457bc33202cc006340fd7a9c53f9169d901c1f108b1c1b96d984484201b033096c9e414cd534c00219727d66a9f181d27b0e58a6fbbf6"}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 21:52:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x5, 0x0, 0x5c, 0x5, 0x2, "c035f0946769c6d276a4efeaedcb63b8be40f3", 0x200, 0x9}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@dev}, &(0x7f0000000080)=0x14) 21:52:15 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400800, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x22200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delrule={0x44, 0x21, 0x400, 0x70bd29, 0x25dfdbfb, {0x2, 0x14, 0x110, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10}, [@FRA_FLOW={0x8, 0xb, 0xbbd}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_FLOW={0x8, 0xb, 0xfffffffb}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x44001) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) 21:52:15 executing program 5: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') 21:52:15 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x72a443, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) ioctl$TIOCCONS(r0, 0x541d) 21:52:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = getpid() r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x82102, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000600)) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000200)=0x1, 0x4) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000540)={0x7f, 0xff, 0x5, 0x4, 0x4}) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$KDSKBLED(r0, 0x4b65, 0x1000) process_vm_readv(r1, &(0x7f0000000140), 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/77, 0x4d}], 0x3, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010003b000086f18d05639d615589210000eeffffff0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000fdff07000a00199e1b476acf09", @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000300)={0x6}, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x1, 0x9}) ftruncate(r5, 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BLKBSZGET(r7, 0x80081270, &(0x7f0000000080)) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0xffffffff84e165b9, 0x20000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000700), &(0x7f00000006c0)) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f00000000c0)={0x8680, 0x6, 0x3, 0x20, 0x80, 0x7, 0x1f, "909fafc9e518fa53d5498f0c693beb24d42a6d70", "49cc83fc530eeecf7924cba9033262a8627e8dcc"}) 21:52:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x101, 0x92040) recvfrom$x25(r1, &(0x7f0000000040)=""/16, 0x10, 0x1, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2040080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'veth1_macvtap\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:15 executing program 3: delete_module(&(0x7f0000000080)='/dev/hwrng\x00', 0x200) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000100)=0x7fff) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000200)="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", 0x1000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x0, 0x8}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x9f0000, 0x80, 0x8, r0, 0x0, &(0x7f00000000c0)={0x9a090e, 0x6, [], @p_u16=&(0x7f0000000180)=0x978}}) ioctl$RTC_AIE_ON(r2, 0x7001) 21:52:15 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) connect$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x5, 0x0, 0x1f, "88c5dd35397be8f7e71204377b8ddbb40fac89fe8e8de1545fa15220c76e2701815795b28adce5b1ba6bbb7632cbf0ade05fba802a920831cbd279542791fb", 0x3b}, 0x60) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x5) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x5414, 0x0) 21:52:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x41b1, 0x10400) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r2, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xaa, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x4004810) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0x100000001, 0x7fff, 0x5}) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:15 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x88, @multicast1, 0x4e20, 0x2, 'rr\x00', 0x20, 0x3, 0x6d}, 0x2c) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) 21:52:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={@none, 0x8000, 0x0, 0x1, 0x80, 0x7, "00541f53f689eb029056f0713affe2d6eb3695f634a4fa206acd5126272412683c523b6fbc271271231b456e98e5f967f35592f21cd56f33f8643abbd87bf675e6e42728d8bb293ebc27ae3e1f292d15da4f691440513c60dbd9da106419b9e71c596fb325e505b738e14bbd10ff52ff4a6e9207a636b34a44ec3a4435735b8f"}) 21:52:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000000)={0x2, 0x160c, [0xfff, 0xf000, 0x4, 0x1ff, 0xfff7], 0x9b2}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x3, 0x5}) 21:52:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x33fe0, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:15 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@rfm={0x25, 0x5, "87fae2337f81fe72d4a79adae67f40d0"}, 0x18) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) 21:52:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x7, 0x5, 0x0, "559e3376d151bab56cb069632136b19ebd0d8c7efd4ef7af3ce0ce8f627a801cdea7faa015466c75b7955299cd382901d2b6a68ec068afe79217987702c0a8", 0x200000000006}, 0x60, &(0x7f0000001380)=[{&(0x7f00000000c0)="88d3826b07743f867ed0edf11482a7f9c89a7268342cc3de703b4e8f19fcb22e13f5b66c3555f651ffb7b1aaf819d55b049d75f00fd8a8260a92e2863ed09b2ad93b38d06b678dcd89eb75cc11305d59cb7577ad8740e523a2ade9bfd96ba3acac90476248fbfab08ecdc9fab7c87f6a9f4f15f19427972b60e3bc49d941adcd1e4c7d6d5a5e0fa0299038eaba6f8b5cf28591eb929c6912c0ab13b78a440aeb0e193d90e12484f542fed45aede9c551862e5c925b6385baeb001a014a56c7a3227ddfa83a19923f5c5cce6555e0cdc6f92a2bb8e6b040fe1b44d273618459e9f03e1a975c9755ce944690f591c94ba3d786d3b87a", 0xf5}, {&(0x7f00000001c0)="779de64e96b336e25f74b88f05c03e333094a914a7da49187e4695b63f16d56c94f99876b275fdaf657625a3e59e0c606fbc29ffcd0839f1b696825a7aea4eb27a8b0c4f96ea957b2ce12204a2eaf4732842757c1ff18d7e1e6786bf35c14d379fa5160f14377dd54f525657ebfb899d28cee35120b23d52e0f907296f460d090443b0da0c3a8cb1e782b3f9ce7e1b7232123ae8e20f7a2cbc6243b00c59d8b1a638ec45a520a3386f3bef380c742bb0983645916d180d12e89e7cd32924acc09be01155c42061a1a090858ba0aa03060815f98c27ae27c54fbfa380133a76cd9200bf676feb80985e5bdbcdd099c4f48b3234b2773699529c24fdf481b8a89730a122e3329c2bd3d3ef0362ac1a7e1fc9b6e8be32d65a4b4068f30d2d38370f84ea4915c4103e6a4f30e452c3cb94d2bb8ca9d5578105602ae592044adf3e22a7db31e1951fa20729df97541021790f1a29729e662f61973bd514792253b9cb4ee48bc60e30e71652a0d28d337548cb088d962a92bb304670c1bb8b83aed9f9d9765dfd4ed2e0514896663c7f65970cc0b6eea9f4e295904e5c72c3d176a52604149979b97e3a5467f432ae189926629c1b04fe75037a6eaee7e87679f297cd5d82f51ffc11c4b9a23001c5ce24d43b8e64dbc81d438b00f0b58119b337d664eac55ed3cdd57b4511cc2dfedf22db9f5dcaea79d6fa48721eef466e6a39ab849f9fe9bff68222a76bd9b5df1906aeeb9605fc10cdf7edb20130825ec532d5691fe4b73314fa7a7dc920112e26c078936c53509ff691d637957be8cb0204cab0178d000a59b16af69e457cee9b9fadd36938d1c2aae1c3798dfd981258bf6df0ad007709529d11c10cf4641a396186ea5ff7f832a05749655ce75612a308e1ddc4a10349a0906a96bc9565a02a8f0f49b502762b0687c396e7caf0e027cd181298cc058493895dc272716115adc6e9cd687a91b96a46fc58bbeeb4687065d1c507b22a1835f3d8c9c1053ed472028fc09c41d316d13963a5b3a959700bdc2dd97e3f3fe703a9f57283a4af4f98cea9097724ad41e3480137a7557c3957b8d481d749108f9a7a33b8ae0d2852e296ea44bbe53057d703940b46e7adde03c5c74acba75ac0312f998d4286bb2309c938dd7e1970dee13bbfc93d6ca124699d8d0a932bbbbf8b762934927149b964c7f855e24b3f7841f303071b9c39fea74437de758b1b045ed6b49669915f452dd6df36a795bfaae0ade851290002925270700bd4a90dbc43dec29896413a1ade38db9d696e765bcaa5f0957b4f9ab08068b2b724e6e30c4aa88eed767e1f0102a0dc333b0b6b6bb3f521999787ea8468679238b2f4409fe9525d4ef88e7be7ddb830d9529edcbdd4663a498b7c91c1834bfc6937f93e21e9b18aab3b19e6d8d6a3e8ee8f6ce833c9993a44cff56781c63df4ae1e119e66c01d9c692cda0495d37d1a709cdb47869315e9e29f9784a1457a6448c6b1042c689cbd363b47ac7b03d70155afa7707804bc2f8a43c4a06e5ae02e23a2ddec3db35d81d0956a6a8047443cebd57ea592bad4e94724d8dfb4f2104b98f5cc0a36fa649a6ee1d07b5304562fcee3719ce8fb4c88b5c6ecf02577023ffe1a5fc8d3a45a2bb2713a2f2953ca04dc5f2548034e191657147e0c3d1ea8e8f22a6a79cf0c359b8fdaf83e35502d3c1beff6a98ded0e211cea0e9177c16f918934b314bd08c4b72e8efca124e5ef52f22fab26e1f732b8ba364fa01fefbf95f57a56e77d4d3ffdf6dff11dbb519394b16bae2444a9ac4872762cfa0da6eeb580ba94f17cbd275badb5300b1547b00a5c28afca09adbc765857e04274faa4432222c7f47d796bdfaae7de6bf6a3d53b00899ac7d666cb4171e095b7b85831b17f94ee8f7322fa2fb32ff214383d04eaa547501fcf86b595292612a3c1381bc61435e50e400cee8c98554c2bc14add54077e2523e23a8e6fe1568eaf7f18cba0fb763e32cd1895dacb3c820ff9efafdfbe188b3eaa0f6324681f135e98c6e1d597081ae5d47a784ea9c85e37710417fecb3e6ae2bac20f3cb72c14f6e679880cb1a70bfa0863a2a48bad4a53be4ea0a6381ff35ef46bf116e02e908ef49555fb279b3d6869c0b9cb4efb70697e58cb5cff64f0b1b2223ed4784679a19d24044ab9984fba6fec389abff0952efdae8322f18b2500a471dfc1f235a0b4747dd9e8bd50684fb35b0b0b6fe6d3c81f2c2b7d96c1ff84c8e4b4b56a27799fee419f3e72fac8bcb088f1777d8bc76d8e5c401f40ec7d22590c5d3efea99674da7531b208b7e6b7dfed231ec1032aa8763f538b63f07d6ba155f6d02b2fd9ed703caf251bb883528c7ff8c5ab29030ab25719214fa2e6b6368a471f1e8fdcf16ada1dd2829b04c8f2079034bad28993a6dd03cdaa16adad9fa864c07282a7122a8150aff39849a1dd1f5d7d1e87a867fb3ca856f02243f4f654ec576b779d6fcac08e9fc097e8c6024f96a3881b5dbae1bf99325a4ce441b683d611e0cd08ae872740bd8669ddc0bee8becdaf7084aff2cb611f39af42dda87e0e5485cd810def6c400c56a5a0e30869290d50efd7c49a63cfcc1868774a46e613c541be87f2b8dfc221f8eca97cd207e1aa955b4434f181d651aa211f0c655dd163eda986d5147c12c1dad5def9df80670bf42fb4acbc8a808edab881ef649c647b75a2459ea31a8275ae2be4fbe50d34a0b80a9acf914677afafb57f59b857c069a640e1bb62e40899b63e3159d930b9fa4e11a3142e6ec4c31ad3bbd44fa79cba5acd754bccc1a317028f24edb98d34fc15bfad695d08d6572d19bc2bdb6c8e3ed3ac362780c7dda3cc2e54110c8b2fb893ee87975e7aa04db74cd592d66673fec29b7af680c295313a7531b8bb2ed17fd93e0579b29f260cfcf14c9883cd2575f9c3676a287ad712c745a94a414a229a02cf21405b8f12782c4903944efa80093ce07dcc5aef5ef66755d0e10affb162c1b228064a833bc185e99e5b9f10dc5af10ffde159f5cc8feaf9db8ff99df7905483d88383979e034d00d5836bbe425a4094e3292996733ddf4307354a6fa7d462486a65cbce981836aeafade099c39ec831aa89113184eaa9777130e1aacf3df56dae6f17a203498633608a66366eb7a4e5857e8a6021cd7a018a9ac272c55ebd8575ec8b1f4d070780fbc643b05e602ceeac1ea50c2ef110b06b48abd4323a67d6b6e87e9ae82d46b2e58b9b54ab4d4770dff1727b4d23e9bc15c89a669a2ed04c2f20d3848f3f47e822d16020ee4402815030fb034e19a545922ab7e04b43fca12b62a6d1d0c7350b399f9f2da18e11a03eec00ea2ed310141005e4e49e09249a9b5f8bf322b9434b968764e111912fc960af2d8b41c22a63a95c435edd8bca75beefadba15063f2cd7830d08f27c5dd690c7efc3a4f5a9ede4deec94cc924918597d8df9628ba6578e4e1b5e35e992e93b22448df09105e02b82b5c24458fa0d669b0be7822f0bc884d78db30dbce77b42c2ec2a64de1e642c400bce4163e7589241080beffc85fbf0ef3627ed3b01032418070d95fc32ec7ce0d47751166ac6bd3e641dbcdda6900a24a06b3ed87a489218cc87339f6b770cbebc554ffa5feb840e60363f68f6a491646f3720f5fb4698fbe2779c92cf6cd6dc5f951d0303afebad38d15b7c3361716e96461f1eef33c9ab2983759df58a1c452bcee5357d99379d67a137e61fe6a7e66c57e360a49f901c2220255d2e740452b53661eacf3443134f53983db477fb2c2a68d3d74f32dfe76984cddd4be97618ce30a2f44b7f16ec57023cd03eac8132d86d9e0873c7e4b36decf0c9e17638984ecdc0f69bbaef86a6804e767aa43bca92911c3567f8eec091d7776d28e6587e758443623fbffec6598a2db1dff3e797fe4e2982f7ca81bcd77c49ce3f8d303b5edefb4f836c69efe79f26ccaae2995d7a971619481450ce6fe907655518c0ecce6fa9334628b8aabbd0d0bad3cc0273f52b0df3e0e4690f6e8204b969803e54d63496de7b7033231b2f7ea313ca33198cbdf549f2b0ce91ba66c26b2d9faa1c42c88087f5a61b474612b1bb50db15b899d71c2da55c8ba919b4c420a234ae414d0686b4add4bf64a0b1606c4551466573a47b636c20653f179d6d3d8246a1b20d75abd0797a9486b83a4b02e88489164670beb4948a6c17d685d64de54fb266177676c2a20e2670a78fa5331577fd9d795f5ef0c0fc6a1d12e74379d924017f28701de7aa26e79c7ba7ddb699ff6a65866701a138d087ee8afd80d79ec3d2d42ccbe0739a51480fb53907ef25cddb4c9a94c78e39bf8fad7cd7312cacd6644e1fbeef1126aeb05bb6f218122ed9f04d9fdc2c91af89eaa4d41fafee1eff0c0d41368ef44b7226721b5d7e8ab55a6f757bc46f97e19f883a31b02cb1908fab0791ddd4600fb0ef33ae764469fc37c44b8780a1facf88bfe8cf7ab21c335d99d10de8d27c182a6aece0581dbac433991d796efc81fa46cfa1db3c4430d91c2da5fa90a87f1257ce9d10721aa19ff3b438f82c949b034226be0a2ed8418d04cab4e52ca53b4dcc28d3b80d6cf6338c361ebefad71b61332b4890ccedd4a81acab3d4da4a2e250410b971aa24f7f1d4512be8fc486c198a0d51204884289f10183895295c4d204fbcdef1c7cebe8320f6ab42cad3543b7e04b6fba603e8665e662a195b8b63492845352ecb4eabd0e8a0f7e03cf45709156e42322d6041f9865865d2e23f6c50ae4f442f02d18ee206970b5c6bb985becd2ffeee642cbe17e695ce537713f3044a8e6fda577cd79329ec259ea7f71c75607e5f1cb6dc9982bc2493bb31b4e72387327bb99f3485e835d08efc1adbb261823ad96ee412863b03876f520f4d77f22e6aead15ae057fb0c35ba62f0d99a2fe1e98804d3de47404910f70079b38a411f8a6cd1bbe9291ca2bc638c01594b98d87641887d2e0e2be1ce832544ae85ef2197cbfaf1393325ee7f3d58503eb64f8a432757dee7a63d92875ea194ccc1e6ae10c68c6c4b6dad28265ea854ddf1d88c679264c814b30e35860d21b88d766361eeac46a0d9196063fce089774b4b5fb446571c714527d0d267c967fd249f7df0b1e9ea0fe3f94163ecdfcdd483783cd89dda41afd96f52b4dbc3d63cde54d607dce538f653528cf3322f631a054db393f80b470b8428adf8780ce48eb81dca25bb345134c80b73720ac36fe7c263700d2c079a698d5385f54312c58b0e272587f55537ed6ec7e1ab780333c2a72e167b689b9bfd0b70e7a613c7983650e94a1f1497ff493dda7f04949878a1738312010859e683d81c86b674ca4c5e7e727603c5569aa538f342c4ff47f221c5a9cbbfc273083f22124f539379ce00cf500e1d28549a727f869af2ca7f8a352fd0040d6d1bf465aed87277dd0b8a4e8f2abd006020a0d0be473f44534408f9d4efaa8eaa7f79337582332b17d1bbd3a67150706eb702406936fc21fe4fc5af6a3e298a42d2326f38830a599c81082921a4c7f8b68ea10f6d5c8f485f1d8ea99119d3dbbed78b3bdebab1f21d4b8aee7d4f75f9c827d795b754104eef5948d8e5c2333968ed62b176c192ccd7dca6ae531311c0525b096cf8705a1c009f7d7f10cdf45485e3b964ab86ad7679cb7a47b6ab79a5ea43f317d49f9ad4ccb26e8f53c549c97e304edbe2bf97a4974fc92c89970b457cc2f81a08c052574571e42710dff5b0dd333bad2c73f6ca3451563f99b8d835aa93cee9971d1f850ef669a79bff32f7a62c2878babfd0", 0x1000}, {&(0x7f00000011c0)="f93ebf71f08f793ed6dd8ecb7b2fdb690de49a28033342e89dcfdfe9290ec77888b67fc4104159a571b2669a70b2696f21f98af5fb9497c695eae7a7c9837f9fe4927151ed3a50ce3e7ddce5ab31b845d5e51afa312f8b1b56b5c37b92165581d61b20f47bc188047865553f1dadd3a7c3d639dd03bc51e4981cbd8727781757576d7763b3e52252fd45abb7257eaba4b1292690ebae9a930ae3db4a2535e0d6dc5cd3e7d5d139bed90db6387ae0a5dce68094693e72b1324e773f819813e0b04027ad1deb04fed06516e6", 0xcb}, {&(0x7f00000012c0)="6707378b8ffaa5374c172b866e8eb6956a0afcf24f3666ea061421aa740d1f6ecd6714fd6eb03340d14591da597ec4324ca62dba90e61e468fa57566533ac46443626d6cc2d272f8e85fc2aefa1481eff927c78b57102bc88add8dd5c221ad2855ba9a4e604b83d3b562e593c5b5ee042c376ff04a981324e932381570829994030ad41363755e5a554433ec564f5c883d4394650fd8fb914f2ceb15fd03bfe65a", 0xa1}], 0x4, &(0x7f00000013c0)={0x1010, 0x111, 0xfffff166, "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"}, 0x1010, 0x4004}, {&(0x7f0000002400)={0x27, 0x1, 0x1, 0x5, 0x6, 0x0, "a4fa98c1025bcfaa5562245f28c981cb973b16bd079b8565065080e242bf04cdfbd83c9265cc918789c72586529b832ef63602915fe2f105ab5babe6b8f23d", 0x2f}, 0x60, &(0x7f00000027c0)=[{&(0x7f00000028c0)="75d40d48a78b5b50f0860f88c4a7abb2a46f62c0baf04269b409f7a1bf3bd7bde0c5ed4f6169ec7258c72d2f07b187d69e52101b8c014d644e711da45fb37b9757c4353ed7106f18a7bfabf27db39c00000000ea604087450e1f7d47aab605b13bb496b4c34dd2f4dff21cac7d5f1035af744f641d2b423fd3d13d74c54b541338e6758e12dc94e5c63884aa008fc99a099e7c9e5571a521e9075e1e872ab8efa5dc5cee28defa62ac11dbf2745988129be1229be4b2ea3437281140cd4a0d1720c73eae5ba44e11f9ba842d57d207cb5ecdd384672b72935d78186486bb0a85c4c15e8846dc2389f75a657870ab1bb9d50afa", 0xf3}, {&(0x7f00000024c0)="f89461f0c3d819e737fb92128b3014d813f2023e5a3f58990ff5778cd1865de5ff506b45ef6e7c6c7e3525202218c56e10aa880901555afc94d4199ee22da0da013e8305b935e6441dcb8401e6ad5b846bdf08a9ac9758091575347cbd45c1a54927b31d3d42d3eefc52f2cb4bb5792238d3aa77f50329753f15be04f6781e95c0ca06b60b226d9821cd71a393aae2bcf639d2f8a52c5c96dcb2f0e50e2563b35334db0f653dc6c39a53670cad2a21cfaf84b64c0b07c15a035aa4440b3e6d47bf7075e92441b76243f321accaa1", 0xce}, {&(0x7f00000029c0)="fb7d5a756b6b077ea54db5ed7c189ac411f2c6c93f73918187b3e66931db15c6748d2b98a273669c39cdc4bbcda2d9d70abdeef293830ca0a80b3a21718ae179d1c5399dc0f8604dc880ce5653f380bd42af0e9f75a725ce1dd15588f7b3952f51604377f525909496", 0x69}, {&(0x7f0000002640)="ee05c5fc844538b7d7a4d36d250f38a7c425688cbadb9a286bb15638b80200f0200d3c3720d075ec29935deb0df015c52b1b3c950774e0f4b0262a8e5a753efec72d2c8765175165af5da999fe5c8146aee921bc828cd9383929de3104cb8e581248e345294747991296072b937769b3a91af678240190fd4f78725889c8826c53563e311cefc20e0f6bebd1c4a3917fe7de8a6bee16c699c6fdbab9145bfafa9ff7ef0b02bc80b54415c169a304767e6f47afd6dacffa624ea57ae20169f5a66efed7ed0206", 0xc6}, {&(0x7f0000002a40)="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", 0x1b1}, {&(0x7f0000000000)="3336f4c598a282f0ea64051e07004bd180c240b848b2a3", 0x17}], 0x6, 0x0, 0x0, 0x80}], 0x2, 0x1040) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 21:52:15 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200801, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb8, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0501ffc0e7c79c4d80f8a69176"}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3c19bd12e7"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "84afbc8063294b8675fdac0709"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x7, 0x4, "cb090a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d6c2476e48"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "8214bbd81a11d4"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) write$cgroup_type(r2, &(0x7f00000001c0)='threaded\x00', 0x9) 21:52:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) accept$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:52:16 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x4b65, 0x0) 21:52:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20000ea0, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:16 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x5) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x3ff, 0x101002) r3 = accept4$phonet_pipe(r2, &(0x7f0000000200), &(0x7f0000000180)=0x10, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f0000000240), 0x80000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/33, &(0x7f0000000100)=0x21) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x10001, 0x151441) 21:52:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/224, 0xe0}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/137, 0x89}], 0x7, &(0x7f00000004c0)=""/134, 0x86}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000700)=""/59, 0x3b}, {&(0x7f0000000740)=""/38, 0x26}, {&(0x7f0000000780)=""/166, 0xa6}, {&(0x7f0000000840)=""/7, 0x7}, {&(0x7f0000000880)=""/180, 0xb4}, {&(0x7f0000000940)=""/150, 0x96}], 0x7}, 0x1}, {{&(0x7f0000000a80)=@isdn, 0x80, &(0x7f0000001140)=[{&(0x7f0000000b00)=""/249, 0xf9}, {&(0x7f0000000c00)=""/113, 0x71}, {&(0x7f0000000c80)=""/139, 0x8b}, {&(0x7f0000000d40)=""/16, 0x10}, {&(0x7f0000000d80)=""/175, 0xaf}, {&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/192, 0xc0}, {&(0x7f0000001000)=""/249, 0xf9}, {&(0x7f0000001100)=""/20, 0x14}], 0x9, &(0x7f0000001200)=""/236, 0xec}, 0x5}, {{&(0x7f0000001300)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001380)=""/135, 0x87}, {&(0x7f0000001440)=""/19, 0x13}, {&(0x7f0000001480)=""/2, 0x2}, {&(0x7f00000014c0)}], 0x4, &(0x7f0000001540)=""/127, 0x7f}, 0x100}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/109, 0x6d}], 0x1, &(0x7f0000001680)=""/66, 0x42}, 0x3}], 0x5, 0x2000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001880)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x40, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) 21:52:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0xc040000, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="67b8fd88a218"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x4000) 21:52:16 executing program 5: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) 21:52:16 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1050c1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r3, &(0x7f0000000080)="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", &(0x7f0000001080)="dd2c077895fe31838f68a6eb5b772646bf23eb4294c17e3b4d5280cbc8", 0x4}, 0x20) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 21:52:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000100)={0x400, 0x8, 0x7e46, 0x6, 0x6, 0x8001}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvme-fabrics\x00', 0x203, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000400)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c0002800800020000000000080001000000000008000100000000ed7f8458f208004fad00"], 0x54}}, 0x0) fcntl$setsig(r3, 0xa, 0x37) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = dup3(0xffffffffffffffff, r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r9, &(0x7f0000000900)={0x2c, 0xf, r7, 0x3c}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {0xc, 0x3}, {0x9, 0xa}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044045}, 0x20000880) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r5, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'ib'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x800) 21:52:16 executing program 1: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x6, 0x400, 0x1, 'queue1\x00', 0x8000}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000aaba7c18efb22ff89df4275a1ad1c22e77628b8f38e84c3575bf0553df14d65eedb5486bb58fddf7f688a3751a23886b14c817caa838"], 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54a4d362db460000be10093b0e0000020000a3c9544501acd60000000000000067000d991a32fcc6377c4caef229f5f1110c4c5275187b897bfcc00a28b4621d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010003b0e002928365507b4e082ff0000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES64=r3, @ANYRESDEC=r4, @ANYRESOCT, @ANYRES64], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="46a267de52977a361bf111c0e34b7c55973142c477e432dbf9461ce0b980db409ab79879a7ccaf52dd5db108b02c548e162847da02a87bcd1dd9e74865503f39fa9d4a1432e524ea8662df12d0cc625f9431b1947a21af916380de806d9bc9b1184fd9179656cacf6bd5373e3969beb389c914c21204f6d51e605108653a9daf975876ab6f355f71e0ae25dc3dedadaaf720bcb44b272f2b6f0e54b81df60cbcc4ef8a94b3953b8d3588", @ANYRESOCT], @ANYBLOB="2c001280090001007866726d000000001c000280080002000000000008000100000000000800020004000000"], 0x5}}, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0xe4, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaf}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x23}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x50) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) 21:52:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x7ffff000, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x780) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x401, 0x0, 0x1000, @remote, 'macvtap0\x00'}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x5c}) 21:52:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010003b0e0000000000000000000000001055872fe135f9fcd271259d40ae1559928abc08f16ea9fb2f85fcacf17ed69d02058597fc19e42a3403cd2fc822440799cfa35384c3d7fc86285c16edb7b4510b9028e87080776bc11392ff402bbd3f4474eba0305333719263fb82eeaa3a02e6f7457ccee77a7fc91a2204cc91b2dd79e265d7425f711c7b9528", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) [ 255.872309][T14312] __nla_validate_parse: 8 callbacks suppressed [ 255.872316][T14312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:52:16 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3f, 0x52f080) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1402, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) 21:52:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = dup(r1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x9, 0x6, 0xe000, 0x5, 0x8, 0x2, 0x2}, 0xc) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80001, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x280002, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000180)) 21:52:16 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x183080) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="00082abd7000ffdbdf2509000000840005801400028008000400a82f00000800040005000000340002800800010010000000080001000f00000008000300970000000800030009000000080001001400000008000300008000001400028008000200d600000008000200ff0f0000240002800800020003000000080001000d000800080003000300000008000400001000002400058008000100657468000700010069620000070001006962000008000100657468003c00068004000200080001000200000008000100000000000400020004000200080001000700000008000100200000000400020008000100fcffffff"], 0xf8}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) [ 256.069113][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.260465][T14325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:52:16 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000100)=0xfffffec0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x8000}, {r7, 0x200}, {0xffffffffffffffff, 0x1020}, {r5, 0x4080}, {r2, 0x20a6}, {r8, 0x4}, {r9, 0x510}], 0x7, 0x6) ioctl$VT_GETSTATE(r5, 0x5603, 0x0) [ 256.428716][T14327] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 256.440530][T14339] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:52:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0xfffffdef, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x100, 0x770, 0xfffc}) [ 256.624712][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:52:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) fcntl$getown(r2, 0x9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) connect$rxrpc(r5, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7ff}}, 0x24) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r6}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r6, 0x8}, &(0x7f0000000040)=0x8) 21:52:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001800)='devlink\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000002bc0)={&(0x7f0000002a80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000001fd8)=ANY=[@ANYBLOB="4b6000a550db5dea0c2df7cad9a8100aa4851e"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) clone3(0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) [ 256.779808][T14349] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.959313][T14350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.139171][T14325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:52:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80, 0x80000) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:17 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0xff, 0x3, 0x4, 0x80000, 0x200, {}, {0x2, 0xc, 0x1, 0x20, 0x7, 0x4, "948923a0"}, 0xffffffff, 0x2, @offset=0x88, 0x3f, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0xcd83, 0x2, 0x0, 0x7, 0xfb, 0x7fffffff}]}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) [ 257.320761][T14335] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:17 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) 21:52:17 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x560b, 0x0) 21:52:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000000)=0xffff) 21:52:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) rt_sigqueueinfo(r1, 0x4000b, &(0x7f0000000000)={0xf, 0xb9, 0x800100}) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x4, &(0x7f0000000080)={0x34, 0x8a0, 0x68}) ioctl$NBD_DO_IT(r2, 0xab03) 21:52:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101003, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000040)=0x8) 21:52:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x2, 0xe3b}, 0x20}}, 0x0) 21:52:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) 21:52:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x8, 0x1ff, 0xfff}) 21:52:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x3ff, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="24e91c56ea4dfd06a4189f2c08107cb876f3dff8f7097b7c4963f8ad8d157d5ed5deface348bba822b6db87f102113a512ff2b4c59ff88f40658975c19747a924bc6060f22c91ab4693999dda8775f0c7cdb168df65a44d11ba5f0c131b690f7f7e8309a5f8bd0f1835104577ce5e7bfd1da1c025e41a37af14aca07556dc34343091f40b57cfe052c51e57405b920e6ba38715870912aabfe243b173c63ab1adff8f9ec91797ae9fd4627ef61804cde0dbe4e433cedb2715aa4a57d3ba83967ac632cc9e4c7f6416096ae54273d4d12d004cb173fcb36d907ac07a2d367fed5d6532c9d5df595687cc2ff7ab4e9aa1bad524c78675741f90694fe", 0xfb, 0xfffffffffffffb0f}], 0x2012000, &(0x7f0000000280)={[{@gid={'gid', 0x3d, r2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@part={'part', 0x3d, 0x81}}], [{@fsname={'fsname', 0x3d, 'eth1'}}, {@subj_type={'subj_type', 0x3d, '!}proc}wlan0system%posix_acl_access&@nodevself)&'}}, {@smackfshat={'smackfshat', 0x3d, '-selfsystem:security'}}, {@fsname={'fsname', 0x3d, 'trustedeth0*^*\\(wlan0)[security'}}, {@subj_type={'subj_type', 0x3d, '-'}}, {@smackfstransmute={'smackfstransmute'}}, {@subj_user={'subj_user'}}]}) 21:52:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) 21:52:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 21:52:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x7, 0xe3b}, 0x20}}, 0x0) 21:52:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000040)={0x5, 0x80000000, {0x56, 0x9, 0x200, {0x9, 0x7}, {0x3, 0x8}, @cond=[{0x4, 0x1, 0x316c, 0x1, 0x0, 0x9}, {0xfffc, 0x9, 0x7, 0xbaa, 0x0, 0x200}]}, {0x52, 0x7d60, 0x100, {0x2, 0x9}, {0x6, 0x9}, @period={0x5c, 0xfe, 0x2, 0x3ff, 0x5, {0x5, 0x7, 0x6, 0x20}, 0x3, &(0x7f0000000000)=[0x3, 0x8000, 0x7]}}}) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) socketpair(0x25, 0x3, 0x13, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000100)=0x3, 0x4) 21:52:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0xc0002009}) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:18 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$VT_GETSTATE(r1, 0x4b65, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 21:52:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x280, 0x360, 0xa00, 0x40, 0x8000, 0x1, 0x0, 0x0, {0x7e5bdfe1, 0x8}, {0x8, 0x1, 0x1}, {0x1, 0x10000, 0x1}, {0x2, 0x2, 0x1}, 0x3, 0x100, 0xff, 0x40, 0x1, 0x9, 0x101, 0x8, 0x1ff, 0x8, 0x1, 0x3, 0x20, 0x1, 0x1, 0x9}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x6300c2, 0x0) 21:52:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402680, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x1}, 'port1\x00', 0x20, 0x100000, 0x1, 0xfffffff7, 0x4, 0x2619, 0xffffffb3, 0x0, 0x0, 0xa6}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 21:52:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0xa, 0xe3b}, 0x20}}, 0x0) 21:52:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffe, 0x81}) 21:52:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) 21:52:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000100)={0xc, "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"}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000000)={0x8, 0xc, 0x4, 0xe000, 0x8, {}, {0x4, 0x0, 0x10, 0x5, 0x8, 0x40, "09daa30b"}, 0x6, 0x6, @fd, 0xe272, 0x0, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000000c0)=@rose={'rose', 0x0}, 0x10) signalfd(r2, &(0x7f0000000340)={[0x4]}, 0x8) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:19 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x70000, 0x7, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0x6, 0x20, 0x6, "ad26e18f"}, 0x0, 0x4, @planes=&(0x7f0000000040)={0x8001, 0x8, @userptr=0x2, 0x3ff}, 0xffffffe1, 0x0, 0xffffffffffffffff}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100), 0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x4b65, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x270680, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000000)=0xe72) 21:52:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0xffffffff, &(0x7f0000000000)=0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10902, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x20000, 0x0) r4 = fcntl$dupfd(r0, 0x605, 0xffffffffffffffff) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000000c0)="32eeb7089fa10c2f66d5f4488ff401406d82f886d63168a9607350b90faf7960a7d320b3750f25d170724ac644c9901cb69963a393ddc451a04c4161febf1f6db0d3f436d3d3a3eca43b7f2df4c4e68a69b42ab0bca3134575d5a9077e328e5343b9e1e122fbfc94dda3413867a57a90ffd01f44ca417449ea5ddd38e91e311199cc3ba01c2f0e8d05a198350363b6813924112a1d005b05ea1e8444a0e3291951256b64c1808c3794cc1abd298f6a0e41e66be072ce80ab3db285e9f5e4729a", 0xc0, 0x4, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xff06, r3, &(0x7f0000000240)="5336c69903a86f6075bd20c9ae6b4140dc09dabddec79a5d51232ac7c74fe7a8579987bc0989324ff98b1e1ce198155f8eae450a0c52a5c4cf1cd94e6e2612c37588a2c44d82b241aff2f92ec21d1bbaffa2fdf33237d14f72a482907680a0f9afaa7f513bd87be7a204268efd0f775a26", 0x71, 0x8, 0x0, 0x2, r4}]) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2, 0x101, 0x10}) 21:52:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1f, 0x3, 0x108, &(0x7f0000000000)="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"}) 21:52:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r3 = dup(r2) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000040)) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 21:52:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x73, 0xe3b}, 0x20}}, 0x0) 21:52:19 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "f4b7d31cbe2210e8", "cb7042984e72d6ed7a3ee0ce3dfa9d10", "d0f7df75", "2c0c5e381ed9a981"}, 0x28) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xfffffffd}, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r7}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r7, 0x7, 0x5b}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000200)={r8, 0x3, 0x5}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r10, 0x1, 0x0, 0x0) ioctl$KDDELIO(r10, 0x4b35, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={0xffffffffffffffff, r9, 0x0, 0xffffffffffffff62, 0x0, r2}, 0xfffffffffffffda3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='eth1&\x00', r2}, 0x30) mq_notify(r0, &(0x7f0000000080)={0x0, 0x2c, 0x4, @tid=r11}) r12 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r12, 0x5603, 0x0) r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f0000000380)) r14 = syz_open_procfs(r13, &(0x7f00000000c0)='attr/exec\x00') ioctl$KVM_ARM_SET_DEVICE_ADDR(r14, 0x4010aeab, &(0x7f0000000100)={0x1, 0x3000}) 21:52:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4000, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) ioctl$RTC_PIE_OFF(r9, 0x7006) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x9, 0xffffff00], 0x2, 0x800}) 21:52:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000100)) shutdown(r1, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x80000000, 0x80000002}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='%'], 0x1) sendto$inet6(r1, &(0x7f0000000080)='~', 0x1, 0x0, 0x0, 0x0) close(r1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x7, 0xc, 0x1}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x8000, 0x1000, 0x1ff, 0x1f}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) 21:52:19 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000100)=0xfffffec0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x8000}, {r7, 0x200}, {0xffffffffffffffff, 0x1020}, {r5, 0x4080}, {r2, 0x20a6}, {r8, 0x4}, {r9, 0x510}], 0x7, 0x6) ioctl$VT_GETSTATE(r5, 0x5603, 0x0) 21:52:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1ff, 0x10102) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0xffffffc0, 0x0, 0x2022, 0x20, 0x5, 0x3, 0x680}) 21:52:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/124, 0x7c}], 0x1) 21:52:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) ioctl$TCSBRK(r0, 0x5409, 0x2) 21:52:19 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000280)={0x7, "0cadb5c604961e0e987ea501fd28e7ebe8b3a86a9dfa4dfe2d521005235b3f22", 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @local}}, [0x800000000000004, 0xac, 0x20, 0x2, 0x1, 0xd06, 0x4, 0x3, 0x4, 0x1, 0x7, 0x6, 0x7, 0xa6d, 0x5]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x9, @empty, 0x80000001}}, 0x7fffffff, 0x40, 0x6, 0x1d71a0, 0x1c, 0x32f, 0x63}, 0x9c) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r4, 0x560b, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001340)={0x3, &(0x7f0000001300)=[{0xf001, 0x1, 0x1, 0x8c25}, {0x0, 0x40, 0x7f, 0x4}, {0x7fff, 0x0, 0x3}]}) r6 = syz_open_dev$media(&(0x7f0000001380)='/dev/media#\x00', 0x40, 0x614000) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f00000013c0)=0x62ad11d9, 0x4) epoll_create(0xcdc) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000240)=0x4, 0x4) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='posix_acl_access-/proc\x00', &(0x7f0000000300)="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", 0x1000) 21:52:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x5a7800, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0xf, 0x27, 0x9, 0x19, 0x7, 0x0, 0x4, 0x63}) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x210000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000002900)={0x28, r2, 0xf591d3ee456bd401, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b0020000", @ANYRES16=r2, @ANYBLOB="200028bd7000fddbdf25130000005800058044000280080001000c000000080002000000010008000300070000000800020000000000080002000001000008000200000800000800040075b100000800020006000000070001006962000008000100657468000c00038008000300391700003c0003800800010005000000080003003a00000008000300010000000800030000c00100080008000000000000000200040000000800030007000000940001800c000280080002000000000044000400200001000a004e22000007ff0000000000000000000000000000000000100000200002000a004e220000800000000000000000000000000000000001000010002c000280080001000b000000080003000500000008000200000000000800010002000000080004000100000008000300000000000c000280080002000001000098000580070001006962000008000100657468004c0002800000020008000000080001000b00000008000400020000000800040020000000080003000900000008000400031000000800040020000000080001001c00000008000400010000000800010075647000080001007564700008000100657468001400028008000200ffffff7f08000200000001000c00028008000100090000004800028008000100040000000400040008000100080000000c00038008000200030000002400038008000200200000001f00020005000000080001000400000008000100070000008800058024000280080001001500000408000400010400000800010004000000080003000100000014000280080001001100000008000200070000004c000280080003006c09000008000200010000000800040097850000080004000180000008000300000000000800030009000000080002000800000008000300ffffff7f0800040000000080"], 0x2b0}, 0x1, 0x0, 0x0, 0x4010}, 0x80) 21:52:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000140)) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffff6, 0x208282) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) r2 = semget$private(0x0, 0x3, 0x480) semctl$SEM_STAT_ANY(r2, 0x4, 0x14, &(0x7f00000000c0)=""/103) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x985, 0xfeff, 0x1f, 0x17, 0x15, "fc888dfe5cd0caf1"}) 21:52:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x2}, 0x20}}, 0x0) 21:52:20 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0x0, 0x4}) 21:52:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x4, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x3) r3 = dup2(r1, 0xffffffffffffffff) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) 21:52:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4000, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) ioctl$RTC_PIE_OFF(r9, 0x7006) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x9, 0xffffff00], 0x2, 0x800}) 21:52:20 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) 21:52:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x1, 0x0) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xb3, 0x6, 0x4, 0x4, 0x3, "869f0d4968adf788"}) 21:52:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4000, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) ioctl$RTC_PIE_OFF(r9, 0x7006) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x9, 0xffffff00], 0x2, 0x800}) 21:52:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9d0000, 0x8, 0x80000000, r0, 0x0, &(0x7f0000000040)={0x9909c8, 0x80, [], @p_u8=&(0x7f0000000000)=0x7}}) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) 21:52:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8b, 0x80000) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x3}, 0x20}}, 0x0) 21:52:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) getuid() 21:52:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/105) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="5400000011003362ee600e0000bd500000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000100)=0x68) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(0xffffffffffffffff, r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r7, &(0x7f0000000900)={0x2c, 0xf, r5, 0x3c}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xa, 0x6}, {0xfff1, 0xffee}}, [{0x8, 0xb, 0x20}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) 21:52:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4000, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) ioctl$RTC_PIE_OFF(r9, 0x7006) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x9, 0xffffff00], 0x2, 0x800}) 21:52:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz0', "10abe786e19e0b27a416af28a33834f8fc389e3e0e93fbde442e08a600afa91e99cb6374cdfcacd383be8b4482be02c830c8dce825bde39e30cc827fdc5265cceb942ec54dab3b1bbc10bc8ac1ee1399dc27409e44e34110bb30ee61324d8b07a4f4314e9ec72a4eb68d54778b9387e7a0047f1d39b1c681b32586925169512df1896afa3141c2b7e6731607d74692f19fa3c79a8013ec1c11e2f45f183e6fb99fd2acaac5734cc6a8"}, 0xad) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000001540)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) writev(r3, &(0x7f0000001380)=[{&(0x7f00000000c0)="8705e3df152fb90d19e5d9a9796443345ac28675ff4daeb00b57d8935f24d17b859f71f19bc148f55b74f6f85145a14b0177f705c93038ba31fbded35559fbcb6ce237a77e764e6fee0e6e6c10d598cd471b7e055790318d2698149a365b", 0x5e}, {&(0x7f0000000140)="767d33dac8a2f1f358db0ebf0cc26043946fea172aaf", 0x16}, {&(0x7f0000000180)="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", 0xff}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="a332fb556e689ca1fcb493f9d528025ad95addf09ff56a6a3292a035cae1e84c42e6", 0x22}, {&(0x7f00000012c0)="bbd9abfadd89cb3b4593fde45ed2d9e9a59e74d326f050153aa075ecda9a772412860bf9d25e6376685d8013c30be42ad08ff6c01270cb365112502d3f4501d29fbbfc9d7a8672041c6d62", 0x4b}, {&(0x7f0000001340)="b19cace1340438356878159f21ba5af26ada4cf759c0fcc84c338a9237854f839a446e49f4ceec3f7668", 0x2a}], 0x7) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400)='/dev/hwrng\x00', 0x101502, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000001440)=""/231) 21:52:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20600, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000000c0)={@dev, @initdev}, &(0x7f0000000100)=0xc) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) connect$packet(r2, &(0x7f0000000280)={0x11, 0xa, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0xff) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) [ 260.938761][T14633] __nla_validate_parse: 22 callbacks suppressed [ 260.938769][T14633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x41, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x9, 0x1}, {0x20, 0xa1}, 0x7b, 0x0, 0x40}) 21:52:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4000, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) ioctl$RTC_PIE_OFF(r8, 0x7006) 21:52:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x4}, 0x20}}, 0x0) 21:52:21 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket(0xa, 0x3, 0x7) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x401) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f00000000c0)="25c0fd7983f8b1df9414adbe2b586468f13698b70cfe7729a51b8fe425afb6b0cf4ffa0797abcb95aa894195309016fb13589b341722a2b4503e80b2dc82e5062d4a0f9d0986eff8c7ef449dc5c93f4270b96fa377db859b2c9e693c34a2c90e3dc7813333ba2565b50b57ed4fd0babd20e1d4f52dec813237bbc1669656aa1a9e12e17217c6f22d76c4502f62b312d5174d47aeee708eaf6fbb", 0x9a) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)) [ 261.064515][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x4e, 0x7, 0x4, 0x2000, 0x0, {0x0, 0x7530}, {0x4, 0xc, 0x0, 0x25, 0xfc, 0x20, "cfab5e27"}, 0x5, 0x2, @userptr=0xd2c3, 0x3, 0x0, r1}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x7f, 0x9, 0x3f, 0x5, 0x3, "ac80bd4262f90b9e7614d85801f16070b22895"}) 21:52:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4000, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) 21:52:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[r3, r4, r6]}, 0x3) 21:52:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) fallocate(r1, 0x20, 0xb5d5, 0x66) 21:52:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) [ 261.248703][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:52:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4000, 0x0) 21:52:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000"], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4800, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)) 21:52:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=0x10) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) [ 261.415147][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:52:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) [ 261.619157][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.768768][T14676] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 261.928711][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.099851][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:52:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x5}, 0x20}}, 0x0) 21:52:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3, 0x3}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140d, 0x400, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004081}, 0x800) [ 262.279939][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:52:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x101, 0x81, 0x3f, 0x6}, &(0x7f00000003c0)=0x98) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:22 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) [ 262.441518][T14684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0cba3ac312997f3f3e72c29dc4ebef2768810cbbba2fcbe89ca1e63bdccae583bdaaa7f92d894d29ad2ba869aaf2432cf4a15cc10f6dde9ba8ab293924f109ed62ac53a307fc5649292efab18433d959eae61012839e8d2cd42e3510b5dead57a0dd3a58bc7d666f947a375b88f549bc831e2ad57eb776ada819c428b5fa2132d0c537d7173248af5ef826bfc97f3035a4ccf25a9cb7791c8d8421b3a2c492ee006b940c855afe1939c047a6f3104205ce361217fd932a521d85ad622c147daed0e17d6b7c1f1722637dc6b867d436b3fada364d004dddb79eb769bf"], 0x3}, 0x1, 0x0, 0x0, 0x24048006}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x10, 0x0, &(0x7f000034f000)) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0xf, r3, 0x3c}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0xe0, 0x16, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x10, 0x0, 0xfd, r3}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x39}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, [], 0x3e}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x32}}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @local}}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x183002, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x6}, 0x20}}, 0x0) 21:52:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x73c0be427c7b1df9}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:23 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/181, 0xb5}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) 21:52:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(r4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) fstat(r0, &(0x7f00000000c0)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = getgid() chown(&(0x7f0000000180)='./file0\x00', r9, r10) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:23 executing program 4: ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x4, 0x6}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101002, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x3f, 0x44d1, 0x40, 0x7c, 0x13, "b0c3fb9ffcda0efd"}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0xa}, 0x20}}, 0x0) 21:52:23 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)) 21:52:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) modify_ldt$write(0x1, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1e1000, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x5b08) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0xc}, 0x20}}, 0x0) 21:52:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x3262, 0x6, 0x9}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040), 0x10) 21:52:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x1b3, 0x18, &(0x7f0000000000)="ef11c1847e1d19b0c31eec13944a669cb166840883e24ed88fcfc5f16e8821282e8eca82bebb7f33e6958e818bafb227bcfd890028f16df70403126ac14cacfd75f9359363bc8d4d1536c9984c1d590b988c6e129c3cf34c4393d8b1c990da190ccce36b919785a24b70ba04c773017b3b3f194fd3909512886d3b07db3ef11eb1dcb53f975c77b431961e0769cfdcb913cf70dc4b63408720904ff2f33c75bcc9a74191e67d7b854e6f5e4fae58bd28c694b5d40f5faee893692375404e265b9aac824532a8f7e4fb3c14cfae31560566fbd0402558a60493bbcfd5020082c4bf45a424422a4b0564b2fc465513c9bb12f61584b25e62bf4c532403755ea97ed9466935228f0a2f874a6798b001f488f8a741263ab99a3d0c8a14fde8ddb611ab8cf8c2d0f64e0fff3789b580d7dbf7e33183454c28e0f7cca7b7000e8dee2876a30e1a48b9a36b7ddbdf4c6d6045c1587d8888de38c64766e28c66d7af33dfc1bf6e1e50f13620163978daa02e455dab75e569891b3507825746269b150fda826ab0ea23136ce2b14046b23e4de37e7ad26cea9719a38fb9a6d1e44bb09e3860a24e5070f1dbab429e028fb54f903da0a69f7d30b775f857ebc459428bea43fa71fbf1daaf4d7a518303e3e1e242aae85d8b17dfa5203c5de202dc4229602c0cfcc078f7e727255157b5b1f4afc38863b754c6f98545a2092f22cb308ef22d998a7dee80eb180c6e5349c341c36a93e9c3bee21e0a88de745cbb8b4486f71a8431c295e7d54fbb3cd5f7faa0ca29b280695326be29e0c48736a9174ee0d5b981ffb840b7c5e8ac03071005fa0a1109d2b03ea3ea22c99c2be56c6d0e9b2735d3190107a5f8e98a6652f621b03e4be54546c7f2009fcac6efdc2ae762c15773eb75f7a325084f1c9d11d8d2d54d3dccd80b6bd9dc910b71e5c3aa07ffea4b5877af66cfa72466b8c6833f1d01a5bc37c5ceb5eb8c633e1e3f1b4fcb2090689d0a83123014b659c06912ef8bcd4307258213c1cf8270c2d5e88c8bde21d301f4879d9c2374575952d27be96cab1fe373fb7dd90bdc386e48b5a149a9ee696c8d30a5493b43740b9312677fd124edb6b9c24e5e8d4d2fd3ab7591c88a12671e043f6b08f08b15ee841b882c69bd9b8c5e165471e7ee8ddae3770baaf9fb238fe8f7258d95500a2e4477837dff2a189be8b097836a9f198534ff280b8563a389eb4f3be66133f45150e7927e1d6f03231fdd15403bc04035f5157a4fdffe6750f7713e0898e94faecafd7891aabf3eb93aa56fbb43cb05001bc35412e75fc475b46fe626b39280fc884cc510186845aca3d6003744076e6ccc9b53ea16cd35847ef733ed06dcc2845558b8f6effa65ed1412efed9b4c49bedc18b0388aa1dd1e8a9032fee4e2ee5273162f3fc92b04517bc6f388333c18e713f8a45f351d495743"}) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x34}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1f, 0x0, 0x7, 0x7db4, r2}, 0x10) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:24 executing program 2: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x18101, 0x0) readahead(r0, 0x0, 0x3b4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4a4442, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x17) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000000c0)={r5, 0x48, "f525441c348008053902428a96870c6a4ba18f156b53031c1687efc8254540e13ce51f671bc7e6c5c1edca69135cca9fa0f68c196363c16c99c353755f15d2c346302c6309e66003"}, &(0x7f0000000180)=0x50) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r5}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x9, 0xf97, 0x1000, r5}, 0x10) 21:52:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0xf}, 0x20}}, 0x0) 21:52:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0x1) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x840) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x0, 0xfffa, 0x1, 0xc7}, 'syz1\x00', 0x55}) 21:52:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5414, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000040)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x1a8c309f, 0x3}) 21:52:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x2, 0x4, 0x9}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xc000, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000100)=0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x2, 0x4}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000040)={0x3f, 0x1f, 0x12, 0x5, 0x2}) 21:52:24 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5414, 0x0) 21:52:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x10}, 0x20}}, 0x0) 21:52:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x9aeb81e, 0x2, 0x81, 0x5, 0x3, 0x7}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x10401, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x0, 0x800, 0xffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) prctl$PR_GET_FP_MODE(0x2e) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000200)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x9d0000, 0x800, 0xafc, r0, 0x0, &(0x7f0000000040)={0x9909d0, 0x40, [], @value64=0x7ff}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, &(0x7f00000000c0)={0x8dd2, [0x81, 0x5, 0x6], [{0x80000001, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x6, 0xfffffffd, 0x0, 0x0, 0x1}, {0x6, 0x7ff, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x1}, {0x6, 0x1ff, 0x1}, {0x20, 0x19d}, {0x8000, 0x400, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x20}, {0x93, 0x1, 0x0, 0x1, 0x1}, {0xfffffffc, 0x40, 0x1, 0x0, 0x1}, {0x200, 0x8001, 0x0, 0x1, 0x0, 0x1}, {0x3a93, 0x81, 0x0, 0x1, 0x1, 0x1}], 0x9}) r6 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40000, 0x80) fsetxattr$security_evm(r6, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@v1={0x2, "11f6d8b4830756ec"}, 0x9, 0x2) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x100}) 21:52:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x1c}, 0x20}}, 0x0) 21:52:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:24 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x1, 0x40400) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}}, 0x4000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000080)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000e80)={0x980000, 0xc62, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)={0x9c0907, 0x0, [], @value=0x223d}}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000500), &(0x7f00000004c0)=0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) preadv(r5, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f00000002c0)=""/215, 0xd7}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/52, 0x34}], 0x5, 0x26) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x1) 21:52:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000000c0)=""/218) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000000)={0x0, 0x800, 0x80, 0x2, 0xca20000000000000, 0x5, 0x6, 0x80, 0x9, 0x4, 0x7}) 21:52:24 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x30}, 0x20}}, 0x0) 21:52:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xfffc, 0x0, 0x100}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:24 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x280000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x6, 0x41416770, 0xe8, 0x8001, 0x2, @stepwise={{0x5, 0x9}, {0x8000, 0x4}, {0x4, 0x8}}}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) 21:52:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000002c0)=""/27, 0x1b}], 0x6) 21:52:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) lseek(r1, 0x1, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:25 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x60}, 0x20}}, 0x0) 21:52:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:25 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:25 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:25 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:25 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x400) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="2c001280140001007866726d000000001c000280080002000000000008000100000000000800010000000000fde708863cdaed7fde39af26ed43e9b958a81af3aa2526e03db9d105500350bf9ebd9430695d021eea124c6eb90d150b86f1e9ef40f168ae5a490279a0751f451604c8ede6aec1eb4474a70f08f18e89c9d13c391c451251d7791c00ef457aaed6"], 0x54}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x3) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x311000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x787202de}, 0x4) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/206) get_thread_area(&(0x7f0000000180)={0x4db, 0x1000, 0x4000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x8) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:25 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:25 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x300}, 0x20}}, 0x0) 21:52:25 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x3, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:25 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) 21:52:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 21:52:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 21:52:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 21:52:26 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x503a80, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x121000, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[0xb626]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000026f2a8e0f13b736e141393c9ce47a02441d274fca1821cfc4e638f99811041cef78482561217676bf499b6d4e677e4946e89c35681d", @ANYRES16=r5, @ANYBLOB="2b04000000000000000001000000000000000141000000100017000000000000000069623a00"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0xfd5d, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/292]) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x500}, 0x20}}, 0x0) 21:52:26 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040), 0x1, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) 21:52:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0xfc4, 0x9, 0x6, 0x9, 0x2}) 21:52:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r2, 0xa, 0x12) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x1c7f1fd, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) memfd_create(&(0x7f0000000040)='systemn/-{\x00', 0x3) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fstatfs(r0, &(0x7f0000000000)=""/32) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x600}, 0x20}}, 0x0) 21:52:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x14, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9a0000, 0x101, 0x1ff, r1, 0x0, &(0x7f0000000040)={0x9c0903, 0x8, [], @p_u16}}) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x4}) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0xa00}, 0x20}}, 0x0) [ 266.355492][T14977] __nla_validate_parse: 13 callbacks suppressed [ 266.355508][T14977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0xfd5d, 0x0, 0x8, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0xfd5d, 0x0, 0x0, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x7, 0x3}) 21:52:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0xfd5d, 0x0, 0x0, "0227bb61cbc4174a73535b0a3e3db8c0ba342f", 0x0, 0x3}) 21:52:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/49) 21:52:27 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0xc00}, 0x20}}, 0x0) 21:52:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create1(0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0xfd5d, 0x0, 0x0, "0227bb61cbc4174a73535b0a3e3db8c0ba342f"}) 21:52:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0xf00}, 0x20}}, 0x0) 21:52:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x1f, 0x401, 0x8, 0x1, 0x10}}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) 21:52:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000614200029bd7000fcdbdf2508000157ff8019d7b87f2f4e9750c387cde100020000000800010001010000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000240)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000004c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000500)={r2}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000200)={r2, 0x5, &(0x7f0000000100)=[0x7f1e, 0x2, 0x401, 0x0, 0x71e0], &(0x7f0000000140)=[0x8, 0x100, 0x9], 0x40, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0xffff], &(0x7f00000001c0)=[0x3]}) 21:52:29 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000004c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000500)={r0}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000004c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000500)={r1}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000100)={r1, 0x2}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)) 21:52:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r2, 0xa, 0x12) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x1c7f1fd, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) memfd_create(&(0x7f0000000040)='systemn/-{\x00', 0x3) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup(0xffffffffffffffff) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x802c2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001140)='/dev/snapshot\x00', 0x2800, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={r4, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001100)=@assoc_value={r5, 0x5}, 0x8) 21:52:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000300)={0x8, 0x3f, {0x54, 0x101, 0x4, {0x8, 0x4}, {0x4, 0x686}, @cond=[{0x0, 0xffff, 0x8, 0x1, 0x6, 0x8000}, {0x5, 0x3, 0xb3c, 0x3, 0x9, 0x5}]}, {0x53, 0x5, 0x0, {0xf5, 0x3f}, {0x2, 0x7054}, @cond=[{0x401, 0x9, 0x8, 0x1f, 0x101, 0x9}, {0xa7, 0x2, 0x100, 0x1, 0x5, 0x1}]}}) sendto$unix(r2, &(0x7f0000000100)="513a537cf14c10278efe6b09", 0xc, 0x40040, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x4990, 0x4d17a4a7, 0x5, 0x7, 0x7, "a3a2799a5d9dd7659978413c9f7f53da926af6"}) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x80181, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x2, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x10004) 21:52:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x1c00}, 0x20}}, 0x0) 21:52:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 21:52:29 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xe94e172b3badb30f, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5414, 0x0) 21:52:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x1, 0x9, 0x80000001, 0xfffffffd, 0xf, "49f1327aede47c917e166a754d010bf4c64a61"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/101) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x224883, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@rose, @default, @bcast, @remote, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 21:52:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001180)='/dev/autofs\x00', 0x1040, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2040, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$VT_GETSTATE(r4, 0x560b, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000140)={0xffff, 0x7, @name="a45cde72ae2799d813135b6b8e21934214ff6f65e6b372d3be680b7f85bbdf1d"}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x5, 0xc0) setsockopt$packet_buf(r5, 0x107, 0xd, &(0x7f0000000000)="26721dcd511d0764a0f45c4091a09c56580b718c7ca70f3c958d9f0d55bf3b201a6c338646c23c749786a91699d7adbfdc8d276adada314dd2fbab4d3329019027bbacb25358ed3639b6e95ec5a634c14838ba0c25092046ef7260a571b4", 0x5e) pwrite64(r3, &(0x7f0000000180)="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", 0x1000, 0xffff) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f00000011c0)=0x50, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000000c0)) 21:52:29 executing program 3: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x400, 0x4, 0x81, 0x1000}}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x0, 0x6, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x8300, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/230) 21:52:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x2fa4}, 0x20}}, 0x0) 21:52:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r2, 0xa, 0x12) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x1c7f1fd, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) memfd_create(&(0x7f0000000040)='systemn/-{\x00', 0x3) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r2, 0xa, 0x12) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x1c7f1fd, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) memfd_create(&(0x7f0000000040)='systemn/-{\x00', 0x3) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x6f, 0x6, 0x5, 0x7, 0x8}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000)) 21:52:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000000140)=@sack_info={r4}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x9, 0xff, 0x208, 0x0, 0x3, 0x9, 0xffff, 0x200, r4}, &(0x7f00000000c0)=0x20) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000180)=0x820, 0x4) 21:52:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x3000}, 0x20}}, 0x0) 21:52:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:30 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, r1}) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0xa00000, 0x0, 0x99e, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b0954, 0x10001, [], @value64=0x9}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000340), 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa616a79e0b8cf74f}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000054f7e0c4de744ae0897fcdf864e86679ab04f4fdf5b0597c0245715e3f65", @ANYRES16=r6, @ANYBLOB="02002abd7000fddbdf2505000000100007800c00040000000000000000004400098008000100000800000800020009000000080002000200000008000100060000000800020002000000080001000800000008000100fdffffff0800010000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000880) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000040)) 21:52:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendto$inet(r2, &(0x7f0000001440)="7b9e627c6067b84a08", 0x9, 0x4080, &(0x7f0000001480)={0x2, 0x4e23, @local}, 0x10) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000180)={0x6, 0xfffd, 0x1000}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}}, [0x2, 0xe00, 0x7, 0x8001, 0x7, 0x20, 0x6, 0x8001, 0x0, 0x8, 0x6, 0x0, 0xce, 0x4, 0x20]}, &(0x7f00000002c0)=0x100) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x44) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) 21:52:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x810) 21:52:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x3f00}, 0x20}}, 0x0) 21:52:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xfffffff, 0x2, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9e0001, 0x5, [], @p_u16=&(0x7f0000000000)=0x1ff}}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffff9, @loopback, 0x62}, 0x1c) 21:52:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40046104, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000002940)={0x10, 0x30, 0xfa00, {&(0x7f0000002900), 0x2, {0xa, 0x4e24, 0x7, @empty, 0x1}}}, 0x38) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001800)='devlink\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000002bc0)={&(0x7f0000002a80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000001fd8)=ANY=[@ANYBLOB="4b6000a550db5dea0c2df7cad9a8100aa4851e"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) clone3(0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) 21:52:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={r2, &(0x7f0000000040)=""/131}) 21:52:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x4000}, 0x20}}, 0x0) 21:52:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x40, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) semget$private(0x0, 0x3, 0x700) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="018000"}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x202002) keyctl$chown(0x4, r6, r4, r5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) write$uinput_user_dev(r7, &(0x7f0000000200)={'syz0\x00', {0x180, 0x9, 0x4, 0x5}, 0x2f, [0x1, 0x5, 0x1, 0x6, 0x3, 0x9, 0x2, 0x7, 0x5, 0x745, 0x8, 0x7ff, 0x800000, 0x1, 0x9, 0xa6e, 0x3, 0x5, 0x6, 0x1, 0x80000000, 0x9, 0x40, 0x9e, 0x8, 0x3f, 0x81, 0xaa, 0x8001, 0xfff, 0x3, 0x5, 0x7f, 0x800, 0xfffffffc, 0x10000, 0x2, 0x1, 0x5, 0x3, 0x1, 0x7fffffff, 0x9, 0x80000000, 0x7, 0x1ff, 0xbd00, 0x7, 0x50fe87b3, 0x8, 0x0, 0x7ff, 0xffffffff, 0x7f, 0x101, 0x81, 0x9, 0x8, 0xae9a, 0x4, 0x80, 0x80000000, 0xe57, 0x7], [0xfd, 0x101, 0x400, 0x1, 0x9, 0x0, 0xffffffe5, 0x2, 0x100, 0x8, 0x7, 0x0, 0xffff, 0x7ff, 0xc197, 0x90, 0x401, 0x8, 0x721, 0x101, 0x10001, 0x3, 0x90, 0x20, 0x401, 0x3, 0x2, 0x0, 0x5, 0x1ff, 0xcf, 0x4, 0x38, 0x4, 0xcc, 0xdb56, 0x5, 0xffff0000, 0x0, 0x6, 0x7fffffff, 0x8000, 0x33e, 0x6, 0xe488, 0x81, 0xea6e, 0x5, 0x6, 0x6, 0x6d9, 0x7fffffff, 0x1000, 0x2, 0x8, 0x9, 0x5, 0x8, 0x6, 0xfffffffb, 0xc1, 0x2, 0x4, 0x8], [0x3, 0x5, 0x3, 0x0, 0x7d, 0x400, 0x100, 0x4, 0x9, 0x7ff, 0x0, 0x1, 0x0, 0xfff, 0x3, 0x3442, 0xf1, 0x5, 0x80000001, 0xfffffff9, 0xfffffffd, 0x2, 0x200, 0x8, 0x5, 0x1000, 0x28, 0x8, 0x0, 0x8, 0x6, 0x7, 0x7, 0x43bc4f37, 0x6, 0x8000, 0x3, 0x2, 0x2, 0x2, 0x200, 0x40, 0x10001, 0x7f, 0xfff, 0x6, 0x1, 0x741, 0x3ff, 0x8, 0x5cb, 0xff, 0xff, 0x6, 0xfffff000, 0x1000, 0x6, 0x10001, 0x3, 0x4, 0x2, 0x0, 0x1d8, 0x2], [0x14f, 0x3, 0x5, 0x8001, 0x7fff, 0x328f, 0x0, 0x6, 0x4, 0x8, 0x7fff, 0x81, 0x1, 0x1000, 0x5, 0x5, 0x39, 0x1, 0x4, 0x8, 0x1, 0x95e6e72d, 0x2, 0x80000000, 0x5, 0x9e, 0x4, 0x2, 0x2, 0x0, 0x3, 0x80000001, 0x7ff, 0x7, 0x2000000, 0x3, 0x8c8, 0x9, 0x1, 0x6, 0x0, 0xb, 0x80000000, 0x70, 0x0, 0x9, 0x6, 0x5, 0x7, 0x8000, 0xb3c, 0x7, 0x9, 0x6, 0x9, 0x6, 0xcc, 0x5, 0x0, 0x0, 0x3f, 0xb206, 0x2c6, 0x5]}, 0x45c) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) ioctl$LOOP_CLR_FD(r8, 0x4c01) r9 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x9, 0x40000) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000700), &(0x7f0000000740)=0x4) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0x78, 0xfffffffffffffff5, 0x8, {0x20, 0x72000, 0x0, {0x4, 0xfff, 0x0, 0x9, 0x20000000, 0x1, 0x7fffffff, 0x0, 0x7fffffff, 0xf5f, 0x2, r2, r5, 0x3, 0x6}}}, 0x78) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000680)) 21:52:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(r4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) fstat(r0, &(0x7f00000000c0)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = getgid() chown(&(0x7f0000000180)='./file0\x00', r9, r10) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fff, 0x400400) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) 21:52:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(r4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) fstat(r0, &(0x7f00000000c0)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = getgid() chown(&(0x7f0000000180)='./file0\x00', r9, r10) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 21:52:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x4788}, 0x20}}, 0x0) 21:52:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) 21:52:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="795ccc01e3e364443fc3aca8065a77efa960c66900"/46, @ANYRES16=r2, @ANYBLOB="180026bd7000fbdbdf2504000000080004000400000008000400000200000800040058f9ffff08000400ff7f00002000038014000600fe8000000000000000000000000000bb08000100020000000800060003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x45}, 0x20000811) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x9389, 'syz0\x00', @bcast, 0x1, 0x7, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x84, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x402}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr='m\x00'}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x84}}, 0x0) fsetxattr$security_smack_transmute(r3, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x2) sendmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x21, 0x2, 0x0, 0x0, "e7e3e741164fb9f4329457bc33202cc006340fd7a9c53f9169d901c1f108b1c1b96d984484201b033096c9e414cd534c00219727d66a9f181d27b0e58a6fbbf6"}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 21:52:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0xec0, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(r4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) fstat(r0, &(0x7f00000000c0)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = getgid() chown(&(0x7f0000000180)='./file0\x00', r9, r10) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x4888}, 0x20}}, 0x0) 21:52:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDMKTONE(r1, 0x4b30, 0x1f) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) 21:52:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) 21:52:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x560b, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) write$snddsp(r1, &(0x7f0000000040)="044aa9a159efdfe456e167e38ee2f13083a5227c5ccd2ab53c8e14314fbaf88d8f358533d46500dacf73703b014765f2cc635009c0c8630f4e5e57cacdd5341cd2db17d89d3bc1e18db434fe5044aae878ab7bda990a4fccd0f099b094a712d4277fce", 0x63) 21:52:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5608, 0x0) 21:52:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) setuid(r4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) fstat(r0, &(0x7f00000000c0)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = getgid() chown(&(0x7f0000000180)='./file0\x00', r9, r10) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)) 21:52:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0xec0, 0x10, 0xe3b}, 0x20}}, 0x0) 21:52:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x20, 0x10, 0xe3b, 0x5865}, 0x20}}, 0x0) [ 273.156940][T15184] ================================================================== [ 273.156992][T15184] BUG: KASAN: use-after-free in con_shutdown+0x65/0x80 [ 273.157002][T15184] Write of size 8 at addr ffff8880a0ebb108 by task syz-executor.5/15184 [ 273.157006][T15184] [ 273.157016][T15184] CPU: 1 PID: 15184 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0 [ 273.157021][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.157025][T15184] Call Trace: [ 273.157040][T15184] dump_stack+0x1fb/0x318 [ 273.157061][T15184] print_address_description+0x74/0x5c0 [ 273.157070][T15184] ? vprintk_default+0x28/0x30 [ 273.157083][T15184] ? vprintk_func+0x158/0x170 [ 273.157097][T15184] ? printk+0x62/0x8d [ 273.157122][T15184] __kasan_report+0x149/0x1c0 [ 273.157137][T15184] ? con_shutdown+0x65/0x80 [ 273.157153][T15184] kasan_report+0x26/0x50 [ 273.157170][T15184] __asan_report_store8_noabort+0x17/0x20 [ 273.157179][T15184] con_shutdown+0x65/0x80 [ 273.157188][T15184] ? con_close+0x10/0x10 [ 273.157201][T15184] release_tty+0xc1/0x530 [ 273.157220][T15184] tty_release_struct+0xc3/0xe0 [ 273.157237][T15184] tty_release+0xceb/0xfb0 [ 273.157268][T15184] ? tty_release_struct+0xe0/0xe0 [ 273.157284][T15184] __fput+0x2e4/0x740 [ 273.157313][T15184] ____fput+0x15/0x20 [ 273.157326][T15184] task_work_run+0x176/0x1b0 [ 273.157345][T15184] prepare_exit_to_usermode+0x480/0x5b0 [ 273.157372][T15184] syscall_return_slowpath+0x113/0x4a0 [ 273.157392][T15184] do_syscall_64+0x11f/0x1c0 [ 273.157410][T15184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.157420][T15184] RIP: 0033:0x415fc1 [ 273.157430][T15184] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 273.157436][T15184] RSP: 002b:00007ffe0857d170 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 273.157446][T15184] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000415fc1 [ 273.157453][T15184] RDX: 0000001b2f320000 RSI: 0000000000000000 RDI: 0000000000000003 [ 273.157459][T15184] RBP: 0000000000000001 R08: 00000000c7a118b8 R09: 00000000c7a118bc [ 273.157465][T15184] R10: 00007ffe0857d250 R11: 0000000000000293 R12: 000000000076bf20 [ 273.157479][T15184] R13: 0000000000770f60 R14: 0000000000042ab5 R15: 000000000076bf2c [ 273.157508][T15184] [ 273.157514][T15184] Allocated by task 13655: [ 273.157524][T15184] __kasan_kmalloc+0x118/0x1c0 [ 273.157533][T15184] kasan_kmalloc+0x9/0x10 [ 273.157541][T15184] kmem_cache_alloc_trace+0x221/0x2f0 [ 273.157549][T15184] vc_allocate+0x161/0x5b0 [ 273.157557][T15184] con_install+0x4b/0x490 [ 273.157565][T15184] tty_init_dev+0xcd/0x500 [ 273.157574][T15184] tty_open+0x7f0/0xcd0 [ 273.157582][T15184] chrdev_open+0x509/0x590 [ 273.157590][T15184] do_dentry_open+0x85b/0x10c0 [ 273.157598][T15184] vfs_open+0x73/0x80 [ 273.157607][T15184] path_openat+0x16f1/0x4380 [ 273.157616][T15184] do_filp_open+0x192/0x3d0 [ 273.157624][T15184] do_sys_openat2+0x42b/0x6f0 [ 273.157632][T15184] __x64_sys_open+0x1bd/0x1e0 [ 273.157641][T15184] do_syscall_64+0xf7/0x1c0 [ 273.157650][T15184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.157653][T15184] [ 273.157658][T15184] Freed by task 15192: [ 273.157667][T15184] __kasan_slab_free+0x12e/0x1e0 [ 273.157675][T15184] kasan_slab_free+0xe/0x10 [ 273.157682][T15184] kfree+0x10d/0x220 [ 273.157691][T15184] vt_ioctl+0x229d/0x3a70 [ 273.157700][T15184] tty_ioctl+0xee6/0x15c0 [ 273.157708][T15184] __se_sys_ioctl+0x113/0x190 [ 273.157716][T15184] __x64_sys_ioctl+0x7b/0x90 [ 273.157725][T15184] do_syscall_64+0xf7/0x1c0 [ 273.157733][T15184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.157736][T15184] [ 273.157744][T15184] The buggy address belongs to the object at ffff8880a0ebb000 [ 273.157744][T15184] which belongs to the cache kmalloc-2k of size 2048 [ 273.157753][T15184] The buggy address is located 264 bytes inside of [ 273.157753][T15184] 2048-byte region [ffff8880a0ebb000, ffff8880a0ebb800) [ 273.157757][T15184] The buggy address belongs to the page: [ 273.157768][T15184] page:ffffea000283aec0 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 273.157775][T15184] flags: 0xfffe0000000200(slab) [ 273.157788][T15184] raw: 00fffe0000000200 ffffea0002366f88 ffffea00023eeb48 ffff8880aa400e00 [ 273.157799][T15184] raw: 0000000000000000 ffff8880a0ebb000 0000000100000001 0000000000000000 [ 273.157803][T15184] page dumped because: kasan: bad access detected [ 273.157806][T15184] [ 273.157810][T15184] Memory state around the buggy address: [ 273.157818][T15184] ffff8880a0ebb000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.157825][T15184] ffff8880a0ebb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.157833][T15184] >ffff8880a0ebb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.157837][T15184] ^ [ 273.157844][T15184] ffff8880a0ebb180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.157852][T15184] ffff8880a0ebb200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.157856][T15184] ================================================================== [ 273.157860][T15184] Disabling lock debugging due to kernel taint [ 273.157890][T15184] Kernel panic - not syncing: panic_on_warn set ... [ 273.157900][T15184] CPU: 1 PID: 15184 Comm: syz-executor.5 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 273.157904][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.157907][T15184] Call Trace: [ 273.157917][T15184] dump_stack+0x1fb/0x318 [ 273.157929][T15184] panic+0x264/0x7a9 [ 273.157938][T15184] ? __kasan_report+0x193/0x1c0 [ 273.157948][T15184] ? trace_hardirqs_on+0x34/0x80 [ 273.157959][T15184] ? _raw_spin_unlock_irqrestore+0xa8/0xe0 [ 273.157970][T15184] __kasan_report+0x1b9/0x1c0 [ 273.157981][T15184] ? con_shutdown+0x65/0x80 [ 273.157992][T15184] kasan_report+0x26/0x50 [ 273.158002][T15184] __asan_report_store8_noabort+0x17/0x20 [ 273.158009][T15184] con_shutdown+0x65/0x80 [ 273.158016][T15184] ? con_close+0x10/0x10 [ 273.158023][T15184] release_tty+0xc1/0x530 [ 273.158036][T15184] tty_release_struct+0xc3/0xe0 [ 273.158047][T15184] tty_release+0xceb/0xfb0 [ 273.158077][T15184] ? tty_release_struct+0xe0/0xe0 [ 273.158094][T15184] __fput+0x2e4/0x740 [ 273.158111][T15184] ____fput+0x15/0x20 [ 273.158120][T15184] task_work_run+0x176/0x1b0 [ 273.158134][T15184] prepare_exit_to_usermode+0x480/0x5b0 [ 273.158151][T15184] syscall_return_slowpath+0x113/0x4a0 [ 273.158166][T15184] do_syscall_64+0x11f/0x1c0 [ 273.158178][T15184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.158183][T15184] RIP: 0033:0x415fc1 [ 273.158191][T15184] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 273.158196][T15184] RSP: 002b:00007ffe0857d170 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 273.158205][T15184] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000415fc1 [ 273.158210][T15184] RDX: 0000001b2f320000 RSI: 0000000000000000 RDI: 0000000000000003 [ 273.158216][T15184] RBP: 0000000000000001 R08: 00000000c7a118b8 R09: 00000000c7a118bc [ 273.158221][T15184] R10: 00007ffe0857d250 R11: 0000000000000293 R12: 000000000076bf20 [ 273.158227][T15184] R13: 0000000000770f60 R14: 0000000000042ab5 R15: 000000000076bf2c [ 273.159674][T15184] Kernel Offset: disabled [ 273.858759][T15184] Rebooting in 86400 seconds..